Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
File: WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft (raw, json)
Hash identifier: 1QJL5MAaStaRgP/9aug+jfit7bc6R9U2KT7f/umXHJI=
Subject key identifier: 89:74:78:1C:59:86:ED:40:58:1B:FA:B0:11:01:8E:07:31:72:1C:7C
Authority key identifier: 59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76
Certificate issuer: /CN=A91275A6/serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876
Certificate serial: 017D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
Manifest number: 017B
Signing time: Fri 31 Jan 2025 03:00:40 +0000
Manifest this update: Fri 31 Jan 2025 03:00:39 +0000
Manifest next update: Fri 07 Feb 2025 03:00:39 +0000
Files and hashes: 1: WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl (hash: Zu6j5Oevk9h1t2z1OJCmLaHiaLmoqa2IdJDGmuyhlYM=)
2: 8FA08DC29C8511EDB3506E5AC4F9AE02.roa (hash: OEKv7P5lgSyN95lexkYQQPDBgSrO0jMtbC3pa2USD3w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381 (0x17d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275A6/serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876
Validity
Not Before: Jan 31 03:00:39 2025 GMT
Not After : Feb 7 03:00:39 2025 GMT
Subject: CN=679c3cd7-1ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:ff:e9:ae:26:10:e5:4b:7e:69:91:06:94:
9b:ca:c4:92:95:86:68:db:5b:41:19:de:df:a7:41:
2b:e2:e4:d5:76:fc:b6:dd:e8:fb:36:3f:cc:46:bb:
9f:13:c4:10:d7:c9:7b:81:bf:b8:24:63:15:2d:1b:
3d:a9:bf:20:63:a8:18:7b:00:56:85:3c:33:f3:93:
12:f2:1b:b7:7f:d7:84:8e:95:0a:4d:6e:5d:8c:3e:
84:9b:8b:c3:ad:cb:fc:24:06:01:d2:e5:bf:f1:11:
ab:12:d1:20:7c:66:7b:c9:20:59:f8:20:c3:47:c2:
d3:a6:ca:47:4b:83:0a:79:1b:8e:47:fc:00:86:d5:
53:fe:f3:29:2f:82:24:0c:1a:67:1c:3a:92:9b:4b:
01:26:10:56:92:c3:ea:68:92:36:29:da:50:80:f3:
67:6d:b2:a5:af:c1:42:29:9d:d8:e6:d8:57:ad:c2:
7f:5a:5c:77:96:f3:22:a7:5b:ce:70:fa:3d:a4:94:
51:11:39:a7:96:de:46:d6:52:64:61:d6:98:58:97:
68:08:55:b1:26:8d:94:e2:57:20:b1:a7:e1:6b:d1:
da:f2:59:65:06:4f:0e:c7:a9:cf:58:73:25:b8:2d:
33:05:dc:03:c1:ba:20:dd:b4:50:4c:7a:95:0b:33:
85:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:74:78:1C:59:86:ED:40:58:1B:FA:B0:11:01:8E:07:31:72:1C:7C
X509v3 Authority Key Identifier:
keyid:59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:34:88:83:b2:1b:d9:2d:40:b0:4c:e7:71:1d:16:be:14:d0:
e0:76:42:2e:df:4b:41:30:78:7a:cf:95:41:92:ec:59:4b:34:
16:dd:cf:29:c5:4b:7c:8a:64:b8:2e:f0:7f:79:bd:8e:a0:e7:
44:b3:2b:d1:46:82:b8:ee:6c:0e:fb:bb:83:62:08:85:79:9b:
74:3f:71:16:a0:65:5e:32:77:00:74:22:82:ba:74:e4:6a:c6:
0b:8b:1e:19:54:d0:f6:2a:91:99:b5:c9:8e:c9:28:88:86:9e:
47:9c:85:ab:74:59:3a:03:34:17:e0:95:27:f8:d6:c9:63:37:
77:e6:f7:ac:57:7e:1f:d0:76:ed:91:e6:77:60:d1:c9:a5:96:
05:34:da:f6:9d:6d:fc:dd:ee:93:80:f2:b7:49:22:22:a8:c2:
72:aa:2c:7d:fd:46:3e:d5:91:78:cc:e6:da:8b:8d:ca:fb:9e:
56:60:e2:65:4a:46:a1:22:85:18:ae:05:ed:0f:ad:de:47:d1:
20:9f:f8:da:ed:36:02:00:5e:a9:ed:11:87:39:db:05:a3:fe:
7c:67:be:af:0a:d8:0b:a9:e3:c1:54:3b:14:63:1a:9e:53:5c:
19:fc:c7:ef:93:0f:92:a9:8a:db:3f:91:28:a2:4f:3a:0c:c9:
aa:4d:a9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:53 2025 by rpki-client