Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
File: qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft (raw, json)
Hash identifier: xnoon+IQKeXaVk423LuuPMdF66VVF42YTrO6Y4vo1Lo=
Subject key identifier: 90:11:CD:56:5C:85:2F:0D:B8:63:6C:9F:E3:8C:A5:22:2F:6A:EB:9A
Authority key identifier: AA:CF:FA:B8:80:4E:7D:62:2F:43:B5:25:49:83:3D:30:87:D9:F9:C8
Certificate issuer: /CN=A919FADC/serialNumber=AACFFAB8804E7D622F43B52549833D3087D9F9C8
Certificate serial: 079C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
Manifest number: 0796
Signing time: Fri 28 Mar 2025 21:31:12 +0000
Manifest this update: Fri 28 Mar 2025 21:31:12 +0000
Manifest next update: Fri 04 Apr 2025 21:31:12 +0000
Files and hashes: 1: qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.crl (hash: axN76lC3HsQg3W8uGfNCby4BHJ41nz17UYzBK7Q9FcM=)
2: 773C48F6FCB511EAA35BDA0AC4F9AE02.roa (hash: KI7txZEx8AsuacpyFYc9h/5FHdJT+YSw2xg8bLancgI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1948 (0x79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FADC
Validity
Not Before: Mar 28 21:31:12 2025 GMT
Not After : Apr 4 21:31:12 2025 GMT
Subject: CN=67e71520-0eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:22:27:c3:5f:57:0d:80:34:e4:9a:d6:1f:
06:7c:80:f7:15:62:22:56:ab:a7:2d:80:f6:71:ae:
78:30:45:c7:01:f5:5f:7b:0f:3d:e3:73:22:e5:08:
5a:42:75:c6:eb:aa:f1:fa:2a:fb:9f:ba:24:0d:30:
cb:88:0f:2c:7e:27:a6:3b:ee:d9:aa:23:9b:97:6d:
57:8b:1f:1e:f6:28:ab:c6:87:08:6c:01:16:ed:c0:
b6:e0:9f:80:45:21:a6:0f:bc:13:e4:5e:d9:de:2f:
23:c2:e9:c5:a9:23:ef:0b:84:af:c8:a2:4c:ad:0e:
e6:d1:b8:ed:5e:58:c0:69:b0:5b:7a:0d:66:f6:e9:
a7:08:df:1f:d9:fc:77:fe:24:48:5b:18:f5:ce:1f:
5f:b5:45:5f:4c:1c:99:11:5a:ac:76:e0:5a:23:9e:
72:e5:f3:0d:04:43:40:a8:b0:ac:96:da:69:97:c6:
43:e5:44:f3:a8:2a:3f:ec:5a:08:05:20:a9:d9:63:
63:6d:5f:37:a4:41:5f:82:4c:23:d7:c0:54:29:6a:
e7:8c:37:b0:30:31:a9:aa:39:83:42:19:4a:61:98:
db:ab:75:e3:d4:23:7d:00:b1:51:09:7c:c8:ec:d9:
2d:93:33:78:9b:1a:59:c6:6b:ff:4c:12:a4:a1:5d:
93:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:11:CD:56:5C:85:2F:0D:B8:63:6C:9F:E3:8C:A5:22:2F:6A:EB:9A
X509v3 Authority Key Identifier:
keyid:AA:CF:FA:B8:80:4E:7D:62:2F:43:B5:25:49:83:3D:30:87:D9:F9:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:54:3f:89:5a:2b:30:e3:4c:ff:c5:7b:f2:78:d0:44:61:85:
20:9d:1d:53:53:15:e4:97:fa:00:5a:3c:62:32:ba:7e:23:2b:
8b:0e:3a:28:87:86:f5:31:56:1c:29:a6:09:45:2a:95:ed:8e:
f8:5e:ca:91:14:49:1c:91:59:22:3a:12:73:e8:17:fd:3e:1e:
73:e5:16:cb:b5:a1:9f:a7:92:c4:03:80:dc:69:91:e4:c8:23:
97:ee:3b:f5:4e:69:f1:06:4c:5a:05:ae:31:3c:b5:5a:80:c5:
41:86:7b:45:3e:ec:31:4b:fa:d6:9c:a1:38:41:a6:4d:dd:8b:
71:a3:40:13:9c:b7:79:34:74:6f:40:70:1e:6c:3a:7b:d6:7d:
a0:77:17:9f:76:12:d1:ce:82:d8:a1:05:91:66:91:5f:3d:7d:
b1:7a:24:42:4e:79:a2:2f:a9:96:8d:4a:93:0a:a8:8e:28:c9:
6f:80:4f:75:2e:ce:0e:b1:1b:32:1c:85:bd:af:96:bc:e2:a5:
3b:1e:5c:19:cf:d0:f2:4b:37:73:6a:99:e9:6c:46:0f:63:5c:
71:a9:ff:68:a2:e2:db:8a:2c:35:9e:6a:27:f6:d4:d3:ee:ce:
2c:d7:f9:7f:65:d9:61:bd:a6:75:24:23:eb:f7:ed:51:74:f5:
3d:5c:c1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:27:50 2025 by rpki-client