Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft
File: qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json)
Hash identifier: HaxjRFuPgdU4xmGKQWbprgOBHpZGvY/7MfISQLXr04E=
Subject key identifier: 6B:F2:91:54:7E:10:9D:82:1B:90:DE:79:57:93:77:DA:CE:BE:9A:58
Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B
Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B
Certificate serial: 43
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft
Manifest number: 42
Signing time: Sat 29 Mar 2025 06:45:53 +0000
Manifest this update: Sat 29 Mar 2025 06:45:53 +0000
Manifest next update: Sat 05 Apr 2025 06:45:53 +0000
Files and hashes: 1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: YiEAAHC0BF97CNwI+8WdQ4snYEz9QLrnW15NoxtVT0w=)
2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: P1YxJ4+gjHWBzmSpF7hBMmYmiKS5/7YJlO0/1zxJNmc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2C38
Validity
Not Before: Mar 29 06:45:53 2025 GMT
Not After : Apr 5 06:45:53 2025 GMT
Subject: CN=67e79721-c54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ca:56:08:98:00:24:43:c0:2e:70:1a:9a:ce:
99:c7:e0:7e:6f:41:e0:2f:4e:1f:2d:97:a2:13:b2:
64:ac:11:84:c7:1d:18:46:d2:ca:63:aa:50:5f:0b:
4e:1f:1d:87:5b:c9:0e:25:83:ab:fb:e5:57:5b:1d:
23:f4:26:51:1e:34:2f:72:b6:b1:14:ef:83:17:b8:
fc:32:04:14:d1:b1:33:87:7c:2d:dc:f5:85:5b:57:
17:91:0b:91:fb:f2:7d:4b:50:9b:b4:73:e9:d2:72:
c2:00:a2:b7:ff:47:66:35:fb:4d:19:8c:20:74:b7:
8f:4a:f0:62:6b:88:46:0a:f6:dd:f2:6f:87:7c:14:
52:99:ed:e5:1b:c9:2d:99:9f:4a:2f:cf:dc:c1:3c:
49:72:a3:29:f6:83:72:b0:d5:17:ef:51:59:31:05:
38:62:07:18:5a:43:38:0c:e1:c7:6a:0d:91:f4:a4:
6b:ef:1c:d9:27:f3:0b:9d:73:5c:df:03:85:54:5c:
54:4f:a2:0e:dd:f2:a5:b3:2e:ff:5e:5d:41:d5:b0:
e1:ff:ab:84:0a:d0:fb:0c:df:a7:7b:cd:2e:53:c7:
bc:b5:18:bf:d8:10:ae:4e:97:b1:fe:b6:2c:bc:83:
47:10:42:f1:f2:2f:a0:28:46:73:01:bf:c6:84:73:
f8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F2:91:54:7E:10:9D:82:1B:90:DE:79:57:93:77:DA:CE:BE:9A:58
X509v3 Authority Key Identifier:
keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ec:c3:06:24:2a:a0:bc:8c:93:0f:0c:93:be:41:09:d5:3a:
a5:a5:96:6c:6f:2e:00:1a:11:8a:46:d6:86:c9:67:c6:0a:c9:
01:4b:4f:cb:87:61:46:02:ba:7d:e3:84:e6:ef:67:39:42:72:
a6:e5:c5:2d:17:ca:93:0a:41:b6:74:dc:ff:52:c9:e5:69:68:
50:a5:b1:55:c9:97:6b:61:f3:93:19:50:33:d8:10:15:33:df:
f6:d2:ed:73:fb:0c:e7:29:79:0f:da:72:5a:e8:c2:d2:92:ca:
e5:61:e8:35:63:3e:7b:04:be:4f:a6:8b:01:04:27:ab:35:c8:
b8:39:5d:4b:f1:a9:d1:1c:76:0a:ef:2c:d2:5a:a1:1c:24:16:
4d:e9:f9:71:d7:7a:57:ff:5a:92:30:29:a9:d2:b2:1c:71:30:
86:9a:54:d6:1e:ac:e5:8e:85:9c:34:bb:a2:0b:df:04:eb:ee:
bf:73:ae:04:be:ba:05:5b:c0:3b:c0:eb:c5:9f:d1:4a:06:80:
3e:d8:5b:27:66:d4:f0:85:1d:6b:40:f1:8a:3d:42:87:c6:9a:
5f:00:a0:7c:26:1c:31:94:1b:d0:3e:a3:46:15:bd:38:16:73:
af:1b:48:14:23:c4:d8:ed:e8:fb:53:61:ce:37:86:d5:a3:b8:
d0:6c:f6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:48:02 2025 by rpki-client