Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
File: qkjQtX4IXNlA26F5HapYc8wZx_4.mft (raw, json)
Hash identifier: syYw62LWItQIKYBHcpfN2Q+5UNmj1unyZOxs4A3aRxI=
Subject key identifier: E7:56:77:07:7D:BC:11:92:B7:F6:52:65:DA:4B:81:C8:C3:D7:7A:FE
Authority key identifier: AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE
Certificate issuer: /CN=A91EA582/serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE
Certificate serial: 0370
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
Manifest number: 036B
Signing time: Sat 29 Mar 2025 01:12:11 +0000
Manifest this update: Sat 29 Mar 2025 01:12:10 +0000
Manifest next update: Sat 05 Apr 2025 01:12:10 +0000
Files and hashes: 1: qkjQtX4IXNlA26F5HapYc8wZx_4.crl (hash: bIsRZn9CLquJ3TB6Ip5B0JQu7LITiYE7CSz2IZcSNss=)
2: 9924B750A1AF11EC9A73D814C4F9AE02.roa (hash: IHCx8iKwFaHNBcD68Fjdjf74kAkM54IECqYXNmF+PP0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 880 (0x370)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA582
Validity
Not Before: Mar 29 01:12:10 2025 GMT
Not After : Apr 5 01:12:10 2025 GMT
Subject: CN=67e748ea-3424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8b:30:d4:86:b8:aa:61:57:d4:8d:e9:bc:08:
43:b6:99:49:04:2b:0b:ea:fc:28:2f:69:4b:50:0c:
46:74:6a:7a:a7:c0:f4:e2:bf:2c:48:9b:d4:36:8b:
81:5c:4f:0c:32:e5:4d:e9:43:6b:21:2c:77:17:bb:
4b:49:31:1d:37:32:9e:6b:de:4d:24:5e:52:34:b6:
4e:da:66:a1:a8:46:da:32:0e:6a:f5:5d:d9:b7:59:
26:6b:61:bf:f2:ea:5f:ff:e8:fb:3f:12:e9:74:2d:
af:36:e2:f7:00:03:8c:f3:9f:3f:08:90:8a:e3:f4:
eb:a8:e2:31:18:0e:00:0e:cf:b9:20:a2:f2:dc:39:
60:7e:77:0a:65:78:40:ac:f6:40:1a:f6:37:0a:01:
22:81:7b:45:c4:3e:71:f4:64:78:dd:16:5f:9f:e5:
ea:02:9b:00:4c:09:7a:fe:ed:8a:51:62:40:38:d8:
3a:ab:9f:97:54:28:48:b1:90:0a:79:04:b6:d2:12:
91:6a:d7:ab:2f:30:e7:60:cf:2c:fc:d2:7d:9c:5d:
4b:db:d3:f5:aa:f6:fb:fb:0b:42:22:1a:7c:e9:6f:
71:a5:94:4c:0c:eb:54:39:e1:f1:65:56:08:bf:c0:
a8:4c:a0:d8:15:d7:4a:9d:27:16:2e:c9:df:f7:1e:
e8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:56:77:07:7D:BC:11:92:B7:F6:52:65:DA:4B:81:C8:C3:D7:7A:FE
X509v3 Authority Key Identifier:
keyid:AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:e2:79:05:a8:0f:8d:e6:b1:c7:f0:ae:f5:3b:20:76:12:a5:
df:e3:d9:e1:07:07:e6:85:61:8a:76:2d:58:ca:32:9c:15:37:
a7:4a:f2:8d:69:41:f9:bb:4d:60:75:57:f0:71:53:38:58:3e:
22:98:ea:0b:27:d5:33:67:0c:a8:b6:bd:16:26:dc:2d:c5:73:
a9:8d:39:b0:12:71:de:a7:e6:37:7d:51:99:af:f6:d8:53:68:
e6:43:64:1e:ca:21:36:a6:67:bd:f5:11:1d:44:2a:1b:c0:d0:
e0:72:ef:d4:89:a2:50:e4:f1:32:d2:d9:15:3d:4a:e2:68:19:
b9:2f:bb:4b:a5:49:d1:2b:2a:ea:c5:5f:c7:67:2f:83:ba:4a:
cd:08:12:5b:0e:fb:53:0f:46:16:30:54:2d:b9:f3:cd:b9:6b:
9a:91:44:44:47:3d:40:ae:ca:ad:e4:4c:af:3e:de:c7:24:19:
97:a0:c5:81:d6:9b:ec:ea:a6:ee:2a:a2:2c:74:c9:93:89:89:
01:3a:70:7e:91:7d:67:d1:1f:cd:e5:5b:62:70:ac:88:44:60:
22:55:54:b3:e8:df:28:a8:36:56:b6:6e:5b:35:80:02:1a:30:
42:82:49:45:28:8f:b5:ab:65:8d:55:29:25:5b:89:66:af:9e:
69:e2:64:61
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE1ODIxMTAvBgNVBAUTKEFBNDhEMEI1N0UwODVDRDk0MERCQTE3OTFEQUE1ODcz
Q0MxOUM3RkUwHhcNMjUwMzI5MDExMjEwWhcNMjUwNDA1MDExMjEwWjAYMRYwFAYD
VQQDEw02N2U3NDhlYS0zNDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp4sw1Ia4qmFX1I3pvAhDtplJBCsL6vwoL2lLUAxGdGp6p8D04r8sSJvUNouB
XE8MMuVN6UNrISx3F7tLSTEdNzKea95NJF5SNLZO2mahqEbaMg5q9V3Zt1kma2G/
8upf/+j7PxLpdC2vNuL3AAOM858/CJCK4/TrqOIxGA4ADs+5IKLy3DlgfncKZXhA
rPZAGvY3CgEigXtFxD5x9GR43RZfn+XqApsATAl6/u2KUWJAONg6q5+XVChIsZAK
eQS20hKRaterLzDnYM8s/NJ9nF1L29P1qvb7+wtCIhp86W9xpZRMDOtUOeHxZVYI
v8CoTKDYFddKnScWLsnf9x7o8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdWdwd9
vBGSt/ZSZdpLgcjD13r+MB8GA1UdIwQYMBaAFKpI0LV+CFzZQNuheR2qWHPMGcf+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU4Mi85NzRGQ0FBMEEx
MTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhObEEyNkY1SGFwWWM4d1p4
XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FralF0WDRJWE5sQTI2RjVIYXBZYzh3WnhfNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTU4Mi85NzRGQ0FBMEExMTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhO
bEEyNkY1SGFwWWM4d1p4XzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBU4nkFqA+N5rHH8K71OyB2EqXf49nhBwfmhWGKdi1YyjKcFTenSvKN
aUH5u01gdVfwcVM4WD4imOoLJ9UzZwyotr0WJtwtxXOpjTmwEnHep+Y3fVGZr/bY
U2jmQ2QeyiE2pme99REdRCobwNDgcu/UiaJQ5PEy0tkVPUriaBm5L7tLpUnRKyrq
xV/HZy+DukrNCBJbDvtTD0YWMFQtufPNuWuakURERz1Arsqt5EyvPt7HJBmXoMWB
1pvs6qbuKqIsdMmTiYkBOnB+kX1n0R/N5VticKyIRGAiVVSz6N8oqDZWtm5bNYAC
GjBCgklFKI+1q2WNVSklW4lmr55p4mRh
-----END CERTIFICATE-----
Generated at Thu Apr 10 05:54:27 2025 by rpki-client