Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
File: qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft (raw, json)
Hash identifier: Wgx1yUcGxQcvl9EMjWWOnJ6y6iUhvPgk7zpCa1sSX58=
Subject key identifier: F7:B6:CD:32:2F:66:FF:F2:28:AB:8C:92:78:3C:56:1F:C7:18:7C:CE
Authority key identifier: A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A
Certificate issuer: /CN=A91A1C52/serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
Certificate serial: 0182
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
Manifest number: 017F
Signing time: Sat 29 Mar 2025 03:12:06 +0000
Manifest this update: Sat 29 Mar 2025 03:12:06 +0000
Manifest next update: Sat 05 Apr 2025 03:12:06 +0000
Files and hashes: 1: qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl (hash: YqkKeVFqR3XwcuOXSsOSAKQnlsnyCZLaHWxcdK4e4do=)
2: A40C03B0D3B511EDA2A9DD7BC4F9AE02.roa (hash: qTpurh8+bWpZzwTVZxTLGeJXujwiEOMw1H0kXdqpaC8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1C52
Validity
Not Before: Mar 29 03:12:06 2025 GMT
Not After : Apr 5 03:12:06 2025 GMT
Subject: CN=67e76506-a5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f5:81:ca:4e:be:e9:da:e8:20:3f:c3:73:9a:
b4:f2:8d:bb:88:7b:9b:72:3e:d0:0e:26:29:f6:fc:
7d:89:60:66:63:57:29:78:14:ec:14:2b:28:ca:ef:
f1:3a:57:ba:f2:07:31:85:e9:68:a4:53:2c:ce:17:
8c:3f:39:00:27:dc:ed:ee:59:d1:94:a2:1f:60:5e:
27:f1:04:a7:af:9e:e5:66:7f:a4:87:7d:0a:61:8b:
68:6d:1e:53:c9:02:8b:08:89:44:e1:d0:b2:7d:b3:
67:0c:8f:2a:5b:e2:c8:e8:60:e4:ad:a6:67:f8:a1:
58:42:e1:8b:6d:28:cc:82:62:7e:ab:ba:b8:47:70:
d2:e1:db:14:92:19:be:3d:d1:a1:da:86:f2:25:af:
23:7b:31:5e:67:97:07:df:d3:23:2b:a0:83:09:f7:
ee:3d:c2:5f:b2:d4:04:4a:0b:f9:9f:a7:86:9a:1c:
90:4a:3c:5b:a3:01:2a:0c:9e:35:bc:cb:65:64:02:
00:56:bf:98:7c:72:a3:c0:30:94:e9:21:83:c4:82:
05:5b:d2:17:b7:30:7a:f8:b9:b7:33:e1:dc:39:85:
83:4c:43:0a:31:a7:bc:26:0c:0b:ab:c0:9f:dd:3f:
6c:ab:6a:0e:83:c7:11:6d:ff:6e:54:23:ab:b9:95:
8a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B6:CD:32:2F:66:FF:F2:28:AB:8C:92:78:3C:56:1F:C7:18:7C:CE
X509v3 Authority Key Identifier:
keyid:A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:88:25:6c:7b:0b:f5:c0:a0:32:66:b3:8a:78:16:a1:ca:97:
8d:f5:9e:c1:8f:b9:11:d9:15:52:be:a8:a6:fc:d0:e8:3d:52:
3b:f3:1c:85:e6:0e:8f:06:29:9f:0d:57:f4:66:03:2c:c5:5a:
84:be:ca:e4:a8:57:9e:b3:bd:0e:ba:56:fe:a0:c5:f8:c9:12:
f0:7e:c4:c9:8b:20:33:66:aa:29:88:c8:20:8d:7e:9e:ff:87:
9a:dc:b9:4d:27:26:47:f5:fb:4a:e1:c9:1b:b9:35:a1:de:75:
2e:79:d2:07:f8:79:1b:ff:0f:e2:8c:c7:ef:64:f5:1b:b5:74:
2e:13:a9:a5:69:ba:25:0a:07:da:12:37:53:c7:5d:91:4c:a7:
c6:95:4b:0a:8a:3d:8c:c3:c2:62:43:e2:2f:cc:25:df:12:89:
a2:bc:81:2b:10:43:be:f6:7e:ed:8f:3f:38:d5:39:6a:6c:c3:
29:c0:c6:1b:16:0d:cf:96:d7:da:be:d2:04:b4:f8:d4:53:f4:
62:b2:55:45:f8:78:ff:e0:72:1c:7b:3f:62:34:3a:2f:29:67:
62:80:15:5f:fd:66:19:c4:02:c1:b1:0d:ca:06:8e:36:db:11:
38:ae:c5:d6:ec:f9:bb:5b:29:cf:07:47:0f:3f:ee:08:29:9c:
43:6a:72:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:23:42 2025 by rpki-client