Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft
File: qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft (raw, json)
Hash identifier: eiVh33kP16+vKCy8ivvMN9C4H+EgkXgX7vZeXkOpHo4=
Subject key identifier: 49:0C:D3:96:30:4A:94:54:4B:DA:44:BE:CD:9A:D1:A5:2C:D3:CB:AC
Authority key identifier: AA:21:B6:90:C1:D6:3C:BF:44:1A:A3:BD:11:7E:D8:B7:86:88:22:29
Certificate issuer: /CN=A91C0BE1/serialNumber=AA21B690C1D63CBF441AA3BD117ED8B786882229
Certificate serial: 05D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft
Manifest number: 05D1
Signing time: Fri 28 Mar 2025 23:17:24 +0000
Manifest this update: Fri 28 Mar 2025 23:17:23 +0000
Manifest next update: Fri 04 Apr 2025 23:17:23 +0000
Files and hashes: 1: qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl (hash: KKs1SE9Yw+HFy+EV87HukAuC7sFd2FBzZrVrGQBZXOU=)
2: 0C3EAFF6F84111EC926CBF53C4F9AE02.roa (hash: gGaPSZTXBZeyhBvTnRDrA4x3lhLiqzg2ne+ktqQeFQM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1493 (0x5d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0BE1
Validity
Not Before: Mar 28 23:17:23 2025 GMT
Not After : Apr 4 23:17:23 2025 GMT
Subject: CN=67e72e03-270f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:f7:85:19:ab:ad:41:9a:bd:e9:5b:18:a1:
a2:21:d1:83:bf:20:8f:25:d3:5b:68:80:1e:79:0e:
1c:b1:a8:3b:3c:b1:2e:6c:4a:01:5a:65:ab:12:8d:
5f:bc:53:63:2a:c0:71:de:e1:ee:c2:7d:2f:c7:ac:
9e:a3:13:4a:e5:7e:6e:c0:f5:cb:47:07:07:72:2e:
d8:1d:34:77:a6:b9:4a:f3:77:6b:f0:23:d9:b0:25:
e3:c4:05:65:0e:2e:ec:d4:2a:58:83:05:59:74:8a:
ac:66:a6:ae:0d:67:59:a5:c7:87:94:0c:71:6e:53:
cb:e9:ad:3a:8a:d6:d0:16:d3:47:94:8f:cc:05:63:
eb:80:71:e0:01:8a:79:78:19:4e:b0:d5:69:b8:fb:
c2:66:b7:72:e4:ae:66:eb:6e:4d:75:7d:50:e9:43:
6c:de:9b:93:a2:3f:3c:3e:6d:57:80:18:b9:f7:51:
10:27:9d:2b:da:6b:1c:5e:c5:75:5d:1e:5d:b3:99:
18:25:4f:95:96:0f:62:b5:fe:38:b9:d2:57:67:da:
6f:33:c9:1b:a7:88:96:36:6b:47:4e:94:bb:1f:f8:
39:4a:11:16:4d:a1:28:93:76:4f:a7:01:03:05:61:
d9:c7:34:51:29:6b:1b:05:f4:43:c6:1e:fa:2a:31:
46:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0C:D3:96:30:4A:94:54:4B:DA:44:BE:CD:9A:D1:A5:2C:D3:CB:AC
X509v3 Authority Key Identifier:
keyid:AA:21:B6:90:C1:D6:3C:BF:44:1A:A3:BD:11:7E:D8:B7:86:88:22:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:be:32:dd:79:5a:f3:bd:7d:b7:5d:ed:61:9d:4d:09:ba:35:
f2:df:c2:6b:6c:d2:c1:f9:15:5e:ab:e2:5c:cf:b9:40:ff:56:
91:79:e1:9d:23:b9:b4:43:07:d2:44:cd:43:94:cd:0e:ff:c4:
43:f0:4a:8e:85:58:b9:63:07:ec:2e:6b:0f:e8:df:1e:94:57:
c0:35:cf:50:06:00:6e:07:2d:95:76:04:55:b2:e8:c4:2f:e8:
47:2b:d2:29:54:3a:ca:39:4c:2d:56:c8:6f:89:7c:12:f2:7f:
6a:1c:86:18:1e:51:d6:e7:db:3d:b6:75:8e:d5:64:63:45:6b:
42:e0:d0:4d:63:13:9f:f2:9e:fc:81:b8:0e:fd:31:b4:aa:35:
0e:10:28:59:9e:5a:c3:42:76:69:c3:5d:59:b0:66:bf:be:4a:
dc:50:de:47:28:32:bc:40:86:0a:df:c3:e2:4a:81:5d:90:a2:
3c:53:32:3c:df:1c:da:36:56:3f:f1:55:eb:0c:c3:75:9c:6d:
52:39:2d:8d:26:b7:1e:15:3a:b9:eb:28:e9:80:bc:fb:7d:d4:
b7:66:5e:a6:80:0a:d4:eb:24:02:10:d7:c7:84:19:ad:7c:be:
1d:db:23:95:01:27:7a:21:7c:e4:2f:3b:ca:5e:12:6b:82:af:
42:93:db:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:37:20 2025 by rpki-client