Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
File: QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft (raw, json)
Hash identifier: 5byjWaUbgTL6oAaQRfwZexNmcmjps6Hr1Vy/+Bghvas=
Subject key identifier: 6F:56:C0:37:4A:F8:40:9F:7D:FB:1D:B2:68:8B:B7:24:49:1D:B7:0A
Authority key identifier: 40:E4:BD:36:AE:15:07:7F:E5:99:85:D1:37:0D:5D:64:67:0A:88:D9
Certificate issuer: /CN=A91BB492/serialNumber=40E4BD36AE15077FE59985D1370D5D64670A88D9
Certificate serial: 04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
Manifest number: 04
Signing time: Sat 29 Mar 2025 07:32:49 +0000
Manifest this update: Sat 29 Mar 2025 07:32:49 +0000
Manifest next update: Sat 05 Apr 2025 07:32:49 +0000
Files and hashes: 1: QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl (hash: EWJTYYFVDeB4mu1DuQwrh7M5n9Uq2mOUJ3fozV5DiQA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB492
Validity
Not Before: Mar 29 07:32:49 2025 GMT
Not After : Apr 5 07:32:49 2025 GMT
Subject: CN=67e7a221-83aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:eb:50:6e:e8:ad:92:50:0c:88:41:58:b4:
03:00:ad:92:4a:10:84:df:41:35:c7:7a:41:c4:b4:
a8:5a:53:be:d8:d9:6a:48:a0:13:d3:5a:6f:ba:17:
63:14:96:73:53:dd:9f:d1:0a:b0:03:c3:fa:ab:ba:
4a:8e:d5:1a:d7:3d:a8:bc:bc:8b:fb:d6:ac:a3:33:
79:54:f1:a6:4e:e7:f1:65:c3:07:58:f4:2e:59:53:
d5:fb:44:11:2c:30:59:3c:96:8f:d1:7a:83:ce:83:
64:9e:17:ad:44:48:bd:08:f9:49:7b:b1:77:6e:76:
57:80:66:f9:4d:96:f1:c4:f1:ed:fb:e4:ba:70:d4:
8e:c5:6c:03:dd:42:77:b6:71:19:22:66:16:9f:63:
c6:fc:f2:fa:18:2d:bc:9f:ad:db:31:7f:1d:fb:50:
a7:94:ff:a7:f6:8e:bc:d4:bc:ae:9f:90:52:3d:60:
f1:cc:31:39:7a:45:cf:72:52:3c:8a:cc:30:52:cb:
d3:7a:2b:27:16:76:82:2c:96:07:61:dd:41:92:10:
ee:8b:0f:e6:18:e0:4d:ec:18:39:58:00:19:bd:a4:
d0:0d:bf:70:78:47:7d:ef:4b:19:0c:5b:40:15:01:
92:db:24:8f:45:a2:2f:f5:df:19:25:6a:6c:33:5d:
c9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:56:C0:37:4A:F8:40:9F:7D:FB:1D:B2:68:8B:B7:24:49:1D:B7:0A
X509v3 Authority Key Identifier:
keyid:40:E4:BD:36:AE:15:07:7F:E5:99:85:D1:37:0D:5D:64:67:0A:88:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:88:45:57:94:b3:69:e7:85:41:52:ae:03:90:58:5d:ff:ca:
93:88:fc:7e:04:4e:db:80:62:df:27:62:50:f0:ce:fc:c1:6d:
47:79:01:37:c7:75:8a:3f:cc:e1:02:b4:7d:6d:61:05:32:7e:
3c:cc:f1:80:12:d1:e4:c5:12:b3:d1:7e:07:ec:f3:ba:e9:0d:
50:0b:36:92:92:33:4f:71:bf:58:2d:14:ae:bd:10:47:59:eb:
ba:d3:e3:3e:a7:5e:eb:54:09:6d:f0:c4:15:5f:76:a4:1f:de:
1d:15:d8:ad:e8:c6:66:c0:e6:86:de:bd:af:a4:eb:27:b7:8d:
49:61:33:b6:aa:93:fe:2c:33:9b:c9:58:d9:1f:cd:d9:e8:02:
25:bc:77:08:43:99:76:fd:99:e1:b4:36:12:42:4e:63:7e:d2:
d9:42:9e:00:30:2c:a8:a4:4f:83:01:96:14:40:a4:e2:6a:e2:
f8:9a:21:f6:94:3a:65:3b:94:a8:4a:87:a9:9a:1c:0c:02:d3:
25:b8:0b:6b:e4:bb:f5:47:2d:bb:99:08:ae:f5:eb:3f:b9:63:
4a:3d:bf:da:dd:da:52:53:61:88:05:61:00:bf:7d:6b:3f:3f:
a7:b2:8f:01:cd:6f:40:93:9a:47:c7:06:b5:b7:c6:7a:49:12:
56:a3:3b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:46:58 2025 by rpki-client