Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
File: QgBM9ryh-lZCT17qJPYqkrJc3s8.mft (raw, json)
Hash identifier: 0O1JYF8/rqwllwa7CscWKv/aKxud8eTVZdHd8JPyzpE=
Subject key identifier: 55:B4:57:5C:07:A6:62:B3:B3:5E:56:BF:95:35:5A:3C:41:04:AA:80
Authority key identifier: 42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF
Certificate issuer: /CN=A919960D/serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF
Certificate serial: 01A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
Manifest number: 01A3
Signing time: Sat 29 Mar 2025 02:53:07 +0000
Manifest this update: Sat 29 Mar 2025 02:53:07 +0000
Manifest next update: Sat 05 Apr 2025 02:53:07 +0000
Files and hashes: 1: QgBM9ryh-lZCT17qJPYqkrJc3s8.crl (hash: Ur7vFWIg/3pcaP5NdumTx6IsoCFhZ7Oer1GE84oJE7M=)
2: BE9174768DDE11ED97AFDA82C4F9AE02.roa (hash: fFAFWp3SGDiligAO05H4p9el//2m+rPWPKenlyAVezU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919960D
Validity
Not Before: Mar 29 02:53:07 2025 GMT
Not After : Apr 5 02:53:07 2025 GMT
Subject: CN=67e76093-8820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:59:84:c3:86:9d:57:01:76:fc:24:16:77:1f:
b9:5f:20:a3:98:9e:0d:c9:53:ea:7f:4e:bf:a3:0f:
9f:a2:f1:06:a0:5a:79:ab:fc:c9:63:9c:d4:ab:cc:
8f:42:16:b2:48:9e:ba:d0:4c:09:16:b6:d4:c1:3b:
04:5a:39:89:e5:99:52:a4:24:f1:8d:7d:07:ee:c2:
47:45:2a:bf:61:5f:0f:97:1c:27:1d:21:06:48:bc:
14:99:ed:90:cf:73:2d:b7:9d:eb:f7:d3:ed:c8:4f:
42:0e:fd:35:90:c6:12:a3:31:fd:95:4e:ce:64:77:
e2:38:27:31:50:a1:fc:ab:62:e2:80:96:82:a0:87:
44:9c:2e:b4:af:84:13:a0:ef:50:30:a5:d6:13:66:
12:9a:d8:3f:f0:4d:48:90:13:1c:09:52:48:5f:a5:
42:11:08:f3:cf:63:f3:c5:00:eb:4b:8d:be:24:46:
d4:14:24:1f:1a:65:0b:57:2b:bf:13:ae:24:dd:d8:
32:21:1c:28:cf:a3:6e:94:1a:a2:aa:56:79:a2:89:
a0:9f:5c:da:07:d9:f1:19:25:a6:76:05:af:cc:52:
b1:73:61:cd:bf:28:24:60:64:23:25:78:d9:6d:a1:
b2:10:7b:1c:cd:02:4b:4d:e8:e3:2c:48:cc:eb:d3:
83:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B4:57:5C:07:A6:62:B3:B3:5E:56:BF:95:35:5A:3C:41:04:AA:80
X509v3 Authority Key Identifier:
keyid:42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:8e:65:2d:81:d2:8b:ae:84:c8:b6:1b:e6:62:6e:45:9c:5f:
f9:43:fc:0b:a6:3c:10:ba:b2:a6:e0:41:20:6f:b5:fe:dc:b3:
ed:95:78:a2:63:ef:1c:23:d5:7c:a0:1f:95:22:ca:af:d9:af:
b5:cf:aa:a4:5a:a3:9a:1d:1e:94:57:8e:a9:7c:5b:bb:cf:1f:
ca:97:b0:c6:ce:47:59:86:a2:91:2a:d3:e1:f9:db:ce:81:21:
aa:0c:dc:a0:a3:2c:4e:68:4b:73:98:ae:44:a9:5d:59:37:f2:
7d:42:e7:fd:af:63:78:35:72:11:19:6e:bd:42:25:2a:2c:51:
71:c2:64:a7:df:ce:53:34:95:4e:b4:c3:e6:96:8e:c8:68:f4:
b9:17:bc:66:de:ce:49:0d:4f:cb:78:d2:79:41:ff:2f:c5:9d:
8f:d8:88:ba:00:49:ed:35:11:f7:87:7e:26:57:d6:5c:09:e6:
1e:82:37:46:9f:f4:c3:1c:76:6b:67:29:87:c1:05:03:2e:75:
4e:29:e0:98:9f:7a:c8:41:75:e3:27:19:79:94:1b:b3:1f:c5:
55:95:7b:3f:92:f8:ae:fd:da:8c:5b:fb:8f:80:62:3c:c8:b5:
47:3c:4a:ef:3b:f3:71:85:a6:99:e6:c8:da:28:65:a9:13:7c:
ae:64:26:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:39:11 2025 by rpki-client