
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
File: wLnBGxsWDzIbiuxM_N3a2JX8R94.mft (raw, json)
Hash identifier: ZrvViJ6F7kAfWYXhvUhA4SWVJCgRGf1IZsIjDs3UjdI=
Subject key identifier: 89:71:1C:1B:D1:0D:EA:F1:41:CC:2B:43:C5:4D:78:92:ED:DF:64:4A
Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
Certificate issuer: /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Certificate serial: 0E41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
Manifest number: 0E28
Signing time: Fri 31 Jan 2025 17:43:57 +0000
Manifest this update: Fri 31 Jan 2025 17:43:57 +0000
Manifest next update: Fri 07 Feb 2025 17:43:57 +0000
Files and hashes: 1: wLnBGxsWDzIbiuxM_N3a2JX8R94.crl (hash: j5mRdthHqMn2nLZzuNamYqvVh20m2AXhiPkGKE0imA8=)
2: DC185D0CB0A111EE8C78834EC4F9AE02.roa (hash: zVf7fP7T9Wlmc5kqlhyBV7WQ1wTAT5AIwMfxCy+bFh0=)
3: A2369FBA595F11EF8C3B3D31C4F9AE02.roa (hash: bwOilKkFH3gA2ITdGBNjHTtXXoE0VHn2T54WZ0kqiDg=)
4: E54A88DE595F11EFB2BAB431C4F9AE02.roa (hash: vNgqnIHOyFrG+kBff2/fqp9MtS/6uUeV76Dqat02ibo=)
5: A2E6430C595F11EF8C3B3D31C4F9AE02.roa (hash: uTNV8vfPbOqOvQgw4kqLGgweQoS/h+YACeR/Qh/rfj8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3649 (0xe41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Validity
Not Before: Jan 31 17:43:57 2025 GMT
Not After : Feb 7 17:43:57 2025 GMT
Subject: CN=679d0bdd-b42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:10:70:b9:77:82:b4:2e:d1:23:bf:e5:91:
24:5d:71:0f:70:72:5a:91:91:10:52:a3:e5:e0:75:
d2:96:ce:73:73:32:bd:1b:bb:eb:53:23:8f:e1:ea:
70:89:c0:e3:47:82:c8:3b:12:36:7d:4c:98:95:e6:
43:bc:96:36:df:a6:6e:1d:ec:0a:d0:d5:d9:53:34:
12:18:19:39:d2:07:ab:8e:a7:4a:31:f4:9a:26:63:
9b:48:b5:bc:85:99:d2:05:05:ce:2c:70:1f:77:77:
c0:92:ce:08:9e:cf:a2:54:10:36:f7:88:0e:6e:4c:
cd:ed:75:1a:ea:0b:33:78:19:4a:86:ad:fd:00:19:
bb:f9:a6:ab:39:3c:64:a5:a9:a7:28:d1:af:82:14:
41:f9:4d:55:5e:f3:a0:e5:c1:09:73:bd:a8:f8:e5:
4f:6d:f1:29:15:35:46:a9:c6:98:0e:41:97:0f:3e:
6e:ab:e3:07:5e:df:fc:0f:81:9d:23:ff:5a:8d:0f:
64:d3:0b:ad:65:ba:ec:2f:c1:4a:5a:bd:17:b1:fb:
f1:47:c4:ff:6c:e8:5c:8b:e1:0f:5b:9a:4a:1e:ba:
a4:b3:2e:30:55:e4:e8:22:85:a6:09:e3:00:95:a2:
f9:c4:6b:c3:20:01:28:13:67:25:04:9b:a4:51:9d:
89:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:71:1C:1B:D1:0D:EA:F1:41:CC:2B:43:C5:4D:78:92:ED:DF:64:4A
X509v3 Authority Key Identifier:
keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:d0:c3:d6:82:e5:34:9b:2a:ee:96:40:c0:5a:07:5c:24:58:
4e:7f:65:3c:76:ec:37:22:1b:8e:bd:46:bd:d8:6b:34:13:b0:
4e:42:9c:ab:ee:6f:9a:db:29:f1:32:99:bc:60:b4:a0:ca:d5:
13:10:6e:a2:93:35:34:e9:ec:c2:b4:06:13:ba:27:5a:d0:de:
70:00:50:bf:88:88:c0:00:92:28:49:15:82:bf:77:5c:56:e2:
a5:0a:5b:cb:5c:f0:11:02:f6:da:58:b3:4d:a2:13:1c:50:9c:
20:9d:00:c2:39:30:ea:7c:3a:5f:91:39:fe:59:71:b4:68:da:
c0:81:49:95:9c:74:00:79:fe:c6:da:d5:53:c1:fc:18:f1:a3:
d8:ba:27:cc:19:67:91:f9:2f:cb:53:67:6a:83:44:30:4c:29:
12:da:ed:ab:37:a3:e8:bb:82:f1:1e:43:b7:30:5b:f9:a8:78:
79:d2:ba:11:0c:c4:c4:a4:a9:68:74:46:fb:60:6e:5d:d4:eb:
3c:f9:2d:8b:7b:ae:06:e6:51:a2:40:f8:ce:2a:00:2e:91:bb:
ee:02:b2:ea:ed:e8:09:db:60:73:c2:6e:cd:08:d3:94:2f:3c:
be:11:e9:69:ec:60:05:8d:01:41:6c:aa:fe:ae:c8:87:3c:04:
b8:41:8b:e6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjY5OEUxMTAvBgNVBAUTKEMwQjlDMTFCMUIxNjBGMzIxQjhBRUM0Q0ZDREREQUQ4
OTVGQzQ3REUwHhcNMjUwMTMxMTc0MzU3WhcNMjUwMjA3MTc0MzU3WjAYMRYwFAYD
VQQDEw02NzlkMGJkZC1iNDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvL0QcLl3grQu0SO/5ZEkXXEPcHJakZEQUqPl4HXSls5zczK9G7vrUyOP4epw
icDjR4LIOxI2fUyYleZDvJY236ZuHewK0NXZUzQSGBk50gerjqdKMfSaJmObSLW8
hZnSBQXOLHAfd3fAks4Ins+iVBA294gObkzN7XUa6gszeBlKhq39ABm7+aarOTxk
pamnKNGvghRB+U1VXvOg5cEJc72o+OVPbfEpFTVGqcaYDkGXDz5uq+MHXt/8D4Gd
I/9ajQ9k0wutZbrsL8FKWr0XsfvxR8T/bOhci+EPW5pKHrqksy4wVeToIoWmCeMA
laL5xGvDIAEoE2clBJukUZ2JXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlxHBvR
DerxQcwrQ8VNeJLt32RKMB8GA1UdIwQYMBaAFMC5wRsbFg8yG4rsTPzd2tiV/Efe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS9GMTlBN0M5NDlD
MUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6SWJpdXhNX04zYTJKWDhS
OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dMbkJHeHNXRHpJYml1eE1fTjNhMkpYOFI5NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Njk4RS9GMTlBN0M5NDlDMUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6
SWJpdXhNX04zYTJKWDhSOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB00MPWguU0myrulkDAWgdcJFhOf2U8duw3IhuOvUa92Gs0E7BOQpyr
7m+a2ynxMpm8YLSgytUTEG6ikzU06ezCtAYTuida0N5wAFC/iIjAAJIoSRWCv3dc
VuKlClvLXPARAvbaWLNNohMcUJwgnQDCOTDqfDpfkTn+WXG0aNrAgUmVnHQAef7G
2tVTwfwY8aPYuifMGWeR+S/LU2dqg0QwTCkS2u2rN6Pou4LxHkO3MFv5qHh50roR
DMTEpKlodEb7YG5d1Os8+S2Le64G5lGiQPjOKgAukbvuArLq7egJ22Bzwm7NCNOU
Lzy+Eelp7GAFjQFBbKr+rsiHPAS4QYvm
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:58:27 2025 by rpki-client