Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
File: QIWuE0tjOKEnZXKD67wWwS8guGI.mft (raw, json)
Hash identifier: ndaNkvKf87HhXtrUV+i4F+y5NUnlzKYQm/TDdG6inoQ=
Subject key identifier: A2:79:2A:D7:C5:A2:10:40:23:2D:CF:77:66:67:73:DE:3C:77:EC:E1
Authority key identifier: 40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62
Certificate issuer: /CN=A91E80FB/serialNumber=4085AE134B6338A127657283EBBC16C12F20B862
Certificate serial: 03AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
Manifest number: 03A3
Signing time: Sat 29 Mar 2025 01:01:43 +0000
Manifest this update: Sat 29 Mar 2025 01:01:42 +0000
Manifest next update: Sat 05 Apr 2025 01:01:42 +0000
Files and hashes: 1: QIWuE0tjOKEnZXKD67wWwS8guGI.crl (hash: Ax31QLMB9UZD1+WXbhlypoGjEJAkeT2I8zXQMWjcFxE=)
2: 9FBFD358C0F911EFA63F3E64C4F9AE02.roa (hash: yc1nPimI0kUiUPjKIX7+rUbHKCs59csyBzZSSe87J8M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 942 (0x3ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E80FB
Validity
Not Before: Mar 29 01:01:42 2025 GMT
Not After : Apr 5 01:01:42 2025 GMT
Subject: CN=67e74676-6c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:10:c9:22:66:b3:04:e7:d8:e2:24:4f:f0:
1e:2c:e1:0e:a8:e0:a3:fc:5b:2b:5d:f1:ff:6a:42:
be:18:82:28:60:e4:d7:b6:b3:8f:3b:4c:24:ba:91:
16:36:65:9e:b6:76:0e:00:73:eb:60:6e:89:b4:1b:
85:39:b7:20:7b:a4:a8:bd:ea:ad:ba:9e:4e:8b:0b:
da:74:42:9f:ae:ec:29:7c:32:2e:92:64:d8:23:4d:
f8:ab:6f:a0:b3:23:aa:bf:6d:44:ff:99:21:0c:4f:
e4:8c:6e:c2:3b:0f:43:7a:fb:df:15:1d:53:01:98:
13:20:60:cb:ce:bf:33:b7:17:7b:1b:e6:61:75:07:
98:55:fd:d3:aa:26:41:41:33:1f:b0:0e:b1:b0:7a:
8b:84:6d:69:98:07:45:73:55:35:a8:ae:bb:94:cc:
6d:00:b6:11:8e:6a:6e:27:0e:f4:f3:98:e9:18:37:
f6:33:b1:8c:15:9b:54:7d:b5:f3:a7:60:74:16:39:
a7:c9:a8:dc:42:51:ba:03:36:f7:4b:83:ed:52:c8:
66:d1:31:77:63:48:a6:b4:0b:5b:85:6c:59:b8:87:
8d:88:a9:69:f2:f0:b9:30:20:8d:e3:c5:8a:59:e4:
c6:3a:b5:a1:c1:d5:4e:ea:42:cf:94:53:d4:31:59:
4d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:79:2A:D7:C5:A2:10:40:23:2D:CF:77:66:67:73:DE:3C:77:EC:E1
X509v3 Authority Key Identifier:
keyid:40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ab:c4:28:2b:bc:2b:9f:08:28:48:2e:d5:85:97:04:37:97:
02:ea:d4:09:11:3d:1e:59:9b:8d:e8:0a:3d:b7:06:03:c1:e7:
50:8e:fb:ad:ba:5c:ce:f8:69:8d:45:fb:bb:c6:d3:bb:a7:e6:
bc:f0:3b:43:72:6b:ac:d7:a2:d6:c6:8d:b5:fa:0c:80:19:ed:
34:c4:d3:8b:ad:e7:20:5f:93:da:36:3f:7c:d3:e0:33:19:17:
33:e2:27:95:70:d2:fe:c8:64:14:64:b1:73:8f:1d:8d:6c:0f:
de:db:bb:2d:2d:4d:ee:13:1a:b6:35:58:34:3c:30:69:fe:96:
05:7e:18:57:fe:4c:48:f6:ea:11:ba:98:84:c3:7b:dc:2f:12:
95:34:c5:9f:b9:68:28:83:88:c5:06:af:9b:15:2b:ab:22:3d:
be:fa:ec:45:04:95:2f:4a:32:04:3a:f5:b1:5d:ca:45:a0:65:
72:c7:0c:3b:b6:fe:b9:85:fa:45:8a:1c:67:05:a4:4b:05:db:
e6:8b:ab:5d:b7:9e:0e:26:d8:25:41:1f:49:e2:44:c6:59:0f:
55:f8:41:9d:53:c4:54:86:82:b9:ce:e2:4e:8c:78:7f:db:dc:
d2:92:ae:70:90:23:0d:59:7f:45:e5:9e:c4:5a:60:35:16:78:
21:9e:69:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:00:31 2025 by rpki-client