Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft
File: SQP-uXRPViXit-FaT4CyXtPdCfM.mft (raw, json)
Hash identifier: 1mWvyGohrKLAOu7B1+NotkHHiKS21g+qHsWlXXyfiMI=
Subject key identifier: 45:43:C0:D7:0C:F6:5D:3D:93:8A:07:7F:F1:DA:8C:F3:DF:5D:F7:8F
Authority key identifier: 49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3
Certificate issuer: /CN=A91D23D1/serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3
Certificate serial: 0622
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft
Manifest number: 061D
Signing time: Fri 28 Mar 2025 23:00:08 +0000
Manifest this update: Fri 28 Mar 2025 23:00:08 +0000
Manifest next update: Fri 04 Apr 2025 23:00:08 +0000
Files and hashes: 1: SQP-uXRPViXit-FaT4CyXtPdCfM.crl (hash: ddQIx6QOYZHZPvXJVlJXH3NaunoeOH6cJDJTnkH6gSk=)
2: 32BA4EE0913311EB96A8E810C4F9AE02.roa (hash: sQNOj4qancKoB72U0bVcoarcyKvmrTavihgBPexyxuM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1570 (0x622)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D23D1
Validity
Not Before: Mar 28 23:00:08 2025 GMT
Not After : Apr 4 23:00:08 2025 GMT
Subject: CN=67e729f8-add0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:bc:f5:c0:6c:5d:77:cb:7c:51:4a:d6:e4:
93:6b:ea:e3:3b:0e:f9:47:f4:1b:a4:81:74:70:61:
c8:fa:f6:40:4d:8b:a6:04:5f:29:7e:92:ee:78:6d:
73:d8:15:94:4a:15:7e:92:b5:3f:73:67:24:9c:88:
29:9c:48:6c:1f:d5:df:6d:74:cf:88:a7:a9:75:b7:
60:8d:72:41:7d:59:15:88:3c:0b:c4:d5:fa:ba:a7:
8d:91:c1:88:ce:8f:26:4e:52:2f:20:d1:47:c7:a8:
12:b4:0a:b1:8e:4e:26:1d:c5:7f:71:dc:73:f6:b3:
1b:c9:49:6f:08:fe:9d:ba:b1:97:5c:a6:47:0f:bf:
0c:93:3e:5b:b4:56:53:78:77:04:f7:2b:a5:bf:6b:
1f:63:cf:be:48:2b:cb:31:22:ab:ed:1e:89:2d:97:
a8:71:b5:2c:a1:10:56:fe:59:d5:8f:d6:b9:6c:26:
5a:51:db:b7:38:67:2c:0e:a3:60:4e:07:7a:f2:2e:
52:93:47:75:a9:9f:57:12:bf:91:15:c6:8b:4e:7e:
1e:34:4f:87:63:e0:cd:38:0a:6d:af:d4:c5:9b:2d:
6e:f7:81:72:12:81:0e:b6:85:d1:6a:a1:f4:b1:5d:
ff:74:3b:38:90:99:fc:c9:f1:f0:b9:df:a0:4d:c7:
dd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:43:C0:D7:0C:F6:5D:3D:93:8A:07:7F:F1:DA:8C:F3:DF:5D:F7:8F
X509v3 Authority Key Identifier:
keyid:49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:31:38:59:c0:c0:21:a7:5d:e8:06:92:4b:a7:00:11:a0:83:
6d:3e:40:0f:89:53:57:d9:3b:80:fb:f9:67:37:02:38:af:c0:
0f:f8:7b:ac:94:e1:02:f8:b3:44:2f:b4:54:0e:7a:c6:78:92:
a6:db:ba:76:88:e0:64:83:92:c2:15:8b:25:df:0b:8a:f9:60:
1d:c8:e0:1b:94:12:11:fe:37:cd:e8:5b:e3:fc:69:10:3b:53:
6a:39:15:de:3f:63:e3:ff:7a:c1:00:37:2b:01:57:84:c0:21:
04:b4:f4:ed:2f:84:56:87:d7:70:cb:4a:39:0c:20:cb:e1:c6:
b1:dc:b3:a7:22:30:ca:15:c1:71:2e:e5:44:ce:e4:7c:02:67:
9c:77:ea:32:fb:f8:c2:29:7e:53:2c:61:48:81:fd:af:00:c6:
55:66:53:0c:f9:ed:76:4e:33:91:8e:56:66:cb:38:9e:f3:c1:
af:a8:d1:c7:3a:5e:ce:2f:eb:79:f6:57:3a:22:0d:00:43:2b:
f0:5c:cc:a5:70:9c:ee:99:93:f5:35:66:49:98:59:13:10:d8:
81:79:5b:ed:c9:0a:25:4e:07:92:7a:50:82:8b:45:85:a7:f6:
4f:3b:8d:58:fe:be:44:e8:2c:14:8a:5f:9c:c3:3e:b7:80:08:
5f:f0:54:22
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDIzRDExMTAvBgNVBAUTKDQ5MDNGRUI5NzQ0RjU2MjVFMkI3RTE1QTRGODBCMjVF
RDNERDA5RjMwHhcNMjUwMzI4MjMwMDA4WhcNMjUwNDA0MjMwMDA4WjAYMRYwFAYD
VQQDEw02N2U3MjlmOC1hZGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqHu89cBsXXfLfFFK1uSTa+rjOw75R/QbpIF0cGHI+vZATYumBF8pfpLueG1z
2BWUShV+krU/c2cknIgpnEhsH9XfbXTPiKepdbdgjXJBfVkViDwLxNX6uqeNkcGI
zo8mTlIvINFHx6gStAqxjk4mHcV/cdxz9rMbyUlvCP6durGXXKZHD78Mkz5btFZT
eHcE9yulv2sfY8++SCvLMSKr7R6JLZeocbUsoRBW/lnVj9a5bCZaUdu3OGcsDqNg
Tgd68i5Sk0d1qZ9XEr+RFcaLTn4eNE+HY+DNOAptr9TFmy1u94FyEoEOtoXRaqH0
sV3/dDs4kJn8yfHwud+gTcfd8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVDwNcM
9l09k4oHf/HajPPfXfePMB8GA1UdIwQYMBaAFEkD/rl0T1Yl4rfhWk+Asl7T3Qnz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjNEMS8xRjMzOEFDNDkw
Q0MxMUVCQjFCRTEwMkRDNEY5QUUwMi9TUVAtdVhSUFZpWGl0LUZhVDRDeVh0UGRD
Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NRUC11WFJQVmlYaXQtRmFUNEN5WHRQZENmTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjNEMS8xRjMzOEFDNDkwQ0MxMUVCQjFCRTEwMkRDNEY5QUUwMi9TUVAtdVhSUFZp
WGl0LUZhVDRDeVh0UGRDZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA0MThZwMAhp13oBpJLpwARoINtPkAPiVNX2TuA+/lnNwI4r8AP+Hus
lOEC+LNEL7RUDnrGeJKm27p2iOBkg5LCFYsl3wuK+WAdyOAblBIR/jfN6Fvj/GkQ
O1NqORXeP2Pj/3rBADcrAVeEwCEEtPTtL4RWh9dwy0o5DCDL4cax3LOnIjDKFcFx
LuVEzuR8Amecd+oy+/jCKX5TLGFIgf2vAMZVZlMM+e12TjORjlZmyzie88GvqNHH
Ol7OL+t59lc6Ig0AQyvwXMylcJzumZP1NWZJmFkTENiBeVvtyQolTgeSelCCi0WF
p/ZPO41Y/r5E6CwUil+cwz63gAhf8FQi
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:14:55 2025 by rpki-client