Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft
File: WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft (raw, json)
Hash identifier: uWLXW1sCD2ZAUJHU7s7+1PZS9KjllNTn71WSEGVYJD4=
Subject key identifier: 12:73:D1:E7:71:64:85:EC:18:C8:64:7D:78:59:13:CE:57:24:1E:0D
Authority key identifier: 59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53
Certificate issuer: /CN=A91172C6/serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53
Certificate serial: 0F1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft
Manifest number: 0F17
Signing time: Fri 31 Jan 2025 17:35:01 +0000
Manifest this update: Fri 31 Jan 2025 17:35:01 +0000
Manifest next update: Fri 07 Feb 2025 17:35:01 +0000
Files and hashes: 1: WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl (hash: rZZyyQT/WpIzEClf04fV5lc17zziIFz7ePmxqzt4BY4=)
2: 16FA72386A4E11E992F4832FC4F9AE02.roa (hash: OgNGu/mRKm6xVdHYanAV24opwQSD/lMEZY85nUgEHHI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3871 (0xf1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91172C6/serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53
Validity
Not Before: Jan 31 17:35:01 2025 GMT
Not After : Feb 7 17:35:01 2025 GMT
Subject: CN=679d09c5-0daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:7a:2f:bf:bf:35:69:67:08:61:32:3f:1c:
45:8e:ff:92:3b:84:ac:a6:9f:fb:b5:ff:82:d8:48:
ba:21:40:7f:03:7b:d7:dd:26:e6:c6:27:ba:1d:ea:
01:71:32:fe:b4:23:22:a0:1a:bb:53:bb:d8:f9:48:
e5:f8:e1:39:7a:34:d2:ac:25:f2:66:fc:64:64:86:
c2:99:aa:e2:7f:a1:b1:e2:1c:3d:59:56:35:9a:7e:
09:23:8d:89:60:64:7a:34:b7:c6:dc:12:7e:0c:0e:
0f:63:e1:fd:2f:68:7a:d2:6f:3d:10:c3:44:03:1e:
a1:8e:45:83:c4:ad:38:17:4c:c2:eb:f7:6d:d6:3a:
c2:33:07:46:82:a7:e2:df:c0:86:47:32:39:05:1a:
57:74:a1:4d:a8:1d:02:57:1b:e2:cd:50:e3:48:6a:
99:8d:93:39:2a:b5:e0:1d:c7:b6:07:b7:57:eb:64:
81:33:ad:0f:c1:3a:66:14:6c:6e:cc:46:84:1b:95:
2a:3f:ce:59:39:57:85:ac:05:61:29:65:54:5f:95:
cb:9b:68:30:ec:59:26:da:c9:ff:42:e5:55:8c:af:
6f:29:ee:bf:88:1e:cf:59:1c:ad:f0:56:85:af:9d:
e0:2e:4f:0a:c7:90:3e:89:c3:af:61:2a:10:77:90:
34:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:73:D1:E7:71:64:85:EC:18:C8:64:7D:78:59:13:CE:57:24:1E:0D
X509v3 Authority Key Identifier:
keyid:59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:2a:c5:b2:84:c7:53:23:f2:38:92:38:74:b7:f0:9e:72:bc:
94:29:79:51:a9:23:b1:19:fd:ce:f8:0a:df:5a:6e:e4:ac:16:
71:37:94:49:cd:cf:42:4e:06:bd:a2:4a:05:92:9e:76:a0:cc:
d2:29:5f:a3:4f:2c:dd:78:26:cd:c3:61:46:00:83:44:9a:b6:
a3:05:f1:de:81:d4:80:11:6f:9a:b6:b2:42:5e:a6:b9:7f:2d:
b3:8c:dd:62:35:34:a4:a2:5f:63:2d:b1:6f:3c:ac:d9:d4:fb:
a9:8d:2a:77:1a:64:b4:78:67:28:0c:d2:21:17:fe:ad:ad:86:
77:4c:c5:c9:bf:c2:e8:10:bb:71:7e:33:ee:fa:3e:f5:95:b1:
0d:73:73:92:63:a2:df:fe:d3:f7:75:bd:5f:a5:86:27:f0:48:
1a:3a:73:d3:ff:83:38:26:87:9e:0f:24:fe:76:a4:28:dc:1a:
b7:55:b9:a6:40:f3:38:41:8d:cb:0d:1e:62:60:53:c0:e6:59:
7c:6e:94:c2:55:6f:28:b3:9b:e5:de:e6:13:fa:43:2a:07:50:
70:33:c6:62:cd:c0:13:91:79:35:71:f1:2b:90:ea:94:21:53:
84:48:84:f1:e8:c7:4b:5a:4d:59:13:ee:d5:fa:91:08:5d:e8:
5f:bc:b2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:47:55 2025 by rpki-client