Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
File: quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json)
Hash identifier: 4UqbHVQ+Tkjros/++jvwZVkYut+o9cyTEp41e9Mo43c=
Subject key identifier: 15:5F:54:B8:E4:0F:2F:76:01:23:8D:62:E3:C9:C8:CB:B9:25:FB:8E
Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
Certificate issuer: /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Certificate serial: 59
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
Manifest number: 56
Signing time: Sat 29 Mar 2025 06:33:57 +0000
Manifest this update: Sat 29 Mar 2025 06:33:56 +0000
Manifest next update: Sat 05 Apr 2025 06:33:56 +0000
Files and hashes: 1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: +MviADcAru6tXCDWgSpdi0B7a8iJYibREP0BBa22Ycs=)
2: C5B7E29491F111EFA1C14C61C4F9AE02.roa (hash: id6HTAhbs7lkZSnmnWxvojaKrloCyVbBox6Qwy3+IY8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C60A5
Validity
Not Before: Mar 29 06:33:56 2025 GMT
Not After : Apr 5 06:33:56 2025 GMT
Subject: CN=67e79455-b7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:23:de:50:46:70:14:bb:43:70:71:24:1f:13:
a1:af:b4:c7:62:84:af:c6:5f:ec:e5:4e:ee:cf:c5:
fc:21:72:5d:d7:95:3a:bf:9b:b2:9e:e1:75:54:7e:
de:7f:db:e9:c4:5f:b9:c1:b3:e4:78:23:15:12:16:
5b:cd:b8:eb:0e:fb:db:54:18:56:98:e7:7b:b5:7b:
93:5d:05:98:4d:43:de:05:33:c1:b4:93:96:37:39:
50:7d:24:d8:a0:36:d2:2a:31:7c:dd:fd:f1:4d:11:
ac:ec:b3:fa:09:c8:8a:ae:c1:74:07:22:38:7c:d2:
a2:3b:f7:54:14:d3:fb:33:87:31:c7:68:54:b5:04:
75:da:e8:8a:86:5f:a1:47:f1:0f:7f:0b:9a:1a:07:
13:7e:5b:95:98:04:b5:47:4c:b9:07:be:52:e7:bf:
21:f1:55:05:61:2c:73:ae:ce:7e:58:ea:3e:ff:00:
73:74:52:de:12:e7:eb:3a:7d:26:fc:9c:23:47:eb:
c6:81:68:ba:40:35:67:61:21:80:f3:6e:50:74:4b:
5a:aa:58:56:90:0d:9a:61:a1:f4:ed:5e:a6:aa:70:
9f:cd:fe:36:56:31:f9:80:80:a2:3d:b3:d8:94:62:
17:3f:bf:80:af:84:9e:57:5e:3e:ba:12:9a:61:36:
9f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5F:54:B8:E4:0F:2F:76:01:23:8D:62:E3:C9:C8:CB:B9:25:FB:8E
X509v3 Authority Key Identifier:
keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5d:36:01:b2:89:a8:4e:b5:49:9b:14:72:7d:82:ce:15:80:
ce:0b:8c:44:0b:fc:79:cf:d0:8d:c4:4a:d7:9a:57:0b:06:44:
19:7c:ec:d3:13:c4:49:19:bf:ea:d9:1c:ee:fd:d8:29:2e:71:
52:fb:6b:40:fd:f1:2d:54:72:db:fa:b3:ca:0d:72:da:4e:24:
26:b4:9d:c6:95:71:9f:cc:ee:82:fe:d3:f7:38:e8:89:72:f3:
b6:c4:25:60:09:5f:6c:08:e7:25:6b:ce:4c:86:19:90:12:30:
51:fb:11:e2:ad:ec:1f:2c:de:33:bc:f4:18:be:59:aa:a7:80:
7c:de:02:fd:d8:f5:cd:22:ea:80:55:c8:25:1a:ab:cb:cf:68:
ff:24:93:26:43:ea:b0:11:0e:ae:88:28:f5:11:e4:95:11:48:
31:28:24:16:83:1b:43:a0:39:db:e5:34:c1:8d:7e:31:97:06:
cf:c6:f1:2b:1a:1e:32:d6:8f:9b:97:1c:d4:38:ec:dc:2e:f5:
cb:b8:9a:f1:db:6b:4c:aa:ca:63:1d:8e:f9:fc:19:16:1a:c1:
3d:d8:83:1d:47:35:d7:b9:00:dc:cc:a7:b9:14:2b:f9:75:c7:
71:31:7e:81:23:44:3b:62:29:c1:b5:df:1e:c8:9e:7a:32:2a:
d8:c8:98:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:36:58 2025 by rpki-client