Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft
File: QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft (raw, json)
Hash identifier: fy3yR6pnpuibfFeA4F8fj3Tnaq6f8lvODxHhDiXiI4M=
Subject key identifier: 07:C4:55:FA:22:AE:E3:BC:16:45:67:B1:5E:54:96:FF:F7:87:5B:79
Authority key identifier: 40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12
Certificate issuer: /CN=A917FACB/serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft
Manifest number: 3B
Signing time: Sat 29 Mar 2025 06:52:09 +0000
Manifest this update: Sat 29 Mar 2025 06:52:08 +0000
Manifest next update: Sat 05 Apr 2025 06:52:08 +0000
Files and hashes: 1: QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl (hash: Dc0rPIoDRsn/rhlWNfbiVsbZ61LIHN69L/JxerCrbHU=)
2: 817FDF1EB46511EF86BEAC6BC4F9AE02.roa (hash: 3X4IEvNoArraBKAuq5CyT+VKjti9XVZccQ9OUFJ9p8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FACB
Validity
Not Before: Mar 29 06:52:08 2025 GMT
Not After : Apr 5 06:52:08 2025 GMT
Subject: CN=67e79899-d1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:52:b8:c1:99:35:a8:4d:89:9d:5f:54:6f:e8:
e9:e1:65:f4:31:6f:64:58:95:fb:3c:75:41:8f:d1:
97:0f:66:66:e5:8a:9f:39:e4:28:e5:6a:a5:86:0b:
97:76:d6:7b:da:49:82:3a:36:85:82:3a:77:77:0d:
3b:38:bd:39:3d:ad:00:ef:d9:30:4e:31:f3:d4:b9:
e1:59:f0:a5:f2:30:30:59:cd:5a:be:69:ab:35:bc:
74:04:c4:a2:80:6e:62:35:d7:22:41:4e:b0:30:f7:
e7:7a:5f:76:b8:fb:f2:a6:94:4a:c1:00:b8:86:2b:
02:ea:5a:0c:88:a3:b7:27:c8:c4:aa:cb:ff:37:1b:
22:a6:ee:21:0e:90:90:ea:3a:76:4d:86:5d:29:5e:
7f:24:14:e4:be:c4:46:f4:ef:33:14:7e:ed:99:43:
fb:6a:0e:dd:3c:a9:20:ed:6f:13:86:53:ca:2e:f5:
6e:10:c7:89:d4:7c:33:6b:7a:4f:97:2d:7f:54:fc:
72:9e:df:45:74:54:2b:54:fd:ec:de:0b:ac:24:f9:
77:16:3c:60:10:a1:9a:c9:9e:bb:fa:70:55:80:5a:
bc:0f:9c:ee:c8:5c:92:ea:90:34:42:d2:41:e3:05:
2d:bd:ad:fd:0b:7d:ea:84:17:6d:61:1e:a9:3a:f8:
28:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C4:55:FA:22:AE:E3:BC:16:45:67:B1:5E:54:96:FF:F7:87:5B:79
X509v3 Authority Key Identifier:
keyid:40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e0:ba:83:d1:26:46:ae:e0:5d:ba:1c:2b:80:1f:4b:6d:d4:
b0:f9:2a:d0:2b:51:10:52:28:0a:04:25:54:f9:8a:07:8c:07:
26:d3:83:d5:7b:05:62:6e:a4:64:8a:34:f5:ad:6c:2e:df:82:
9e:0a:7c:32:3d:31:d0:f7:a8:63:c9:9f:74:c7:c8:e5:5e:51:
c4:ee:21:ba:4f:e2:89:14:12:14:c0:97:f2:3a:8a:51:34:3e:
79:6e:a9:75:47:41:c0:c0:07:d9:6e:38:b1:1e:b1:33:f2:82:
ce:d1:8e:aa:2c:8d:09:a9:06:5e:6f:6b:cb:50:d5:97:20:4a:
ec:9e:b0:6d:f6:e4:d2:f4:78:74:68:9c:c7:28:cb:9d:27:22:
c7:a2:de:b1:56:73:35:be:70:7c:2b:b6:e1:4c:8b:10:19:ff:
9f:6f:a0:6a:57:8a:2b:1c:22:7c:0e:4d:94:27:18:8d:d4:a4:
96:fc:a5:fb:88:f9:3b:1f:4b:0a:ae:8e:39:a6:27:e1:c9:b3:
77:0b:86:02:7f:89:18:06:44:c9:1b:2b:cb:33:82:56:4f:00:
f9:86:d1:1e:8b:ed:7f:9c:96:54:9b:ae:d8:67:29:2b:7f:99:
f0:5e:1e:2f:77:37:bf:47:00:b6:ea:91:25:d7:5d:a5:3f:d3:
09:71:5d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:29:50 2025 by rpki-client