Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft
File: wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft (raw, json)
Hash identifier: azH2ScG2ocge+9elKJEahRU+p5Io1dxBmSO4oU/Nmuc=
Subject key identifier: 1D:86:7D:F9:7B:72:B4:3F:FC:36:6B:F3:F6:39:B5:85:B7:FA:C4:7C
Authority key identifier: C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72
Certificate issuer: /CN=A91365B9/serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272
Certificate serial: 0359
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft
Manifest number: 0355
Signing time: Fri 31 Jan 2025 01:02:49 +0000
Manifest this update: Fri 31 Jan 2025 01:02:48 +0000
Manifest next update: Fri 07 Feb 2025 01:02:48 +0000
Files and hashes: 1: wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl (hash: wDWMmJM7Df1ddwtLERpQajHuBXF0P99qDF+imPGyOB8=)
2: AFF4E1F89EB711EC8210607DC4F9AE02.roa (hash: l4NiEiTB+02p0Uj+cCqIOLwgHYhCmg6R+xhxmoCEOiY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 857 (0x359)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91365B9/serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272
Validity
Not Before: Jan 31 01:02:48 2025 GMT
Not After : Feb 7 01:02:48 2025 GMT
Subject: CN=679c2138-a1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a1:8d:95:d2:de:13:1d:6c:85:c2:4a:2c:a1:
e6:28:ff:0a:df:d8:21:c3:3b:fb:5e:99:a8:c1:cb:
a3:38:31:f7:45:d4:0c:89:f7:d6:f8:03:a8:08:2c:
3d:d3:bb:0c:20:2e:f8:5d:28:91:4d:37:30:ff:98:
34:04:c1:ae:c2:d0:a6:56:c9:0b:46:b0:ce:96:61:
60:d5:34:3f:19:95:5d:db:08:86:46:2a:b0:3e:3a:
d8:9a:f7:69:8b:26:85:54:16:cb:69:5d:9c:25:ca:
84:8a:e3:ea:09:9b:24:25:7d:8a:b8:0b:cf:84:c5:
8b:d6:b1:67:cf:83:72:ef:a9:e4:1f:72:a6:80:19:
99:05:3a:27:74:97:66:30:cf:12:08:aa:04:65:21:
29:98:96:da:33:74:25:d0:b5:13:e0:60:37:a3:df:
e0:35:25:4a:b8:98:fa:85:bb:0e:c6:0a:7e:6d:b5:
28:9a:65:b4:93:1e:98:e7:5b:88:1d:af:bb:79:f0:
2c:32:d0:0c:80:9e:d3:70:67:3b:3b:41:43:bd:6a:
1e:1f:75:2d:e7:04:41:75:71:a9:25:5f:1c:4c:48:
c6:f4:50:a7:d6:9d:bb:9a:d5:92:ff:8a:68:7c:ce:
36:ff:07:32:f7:b3:6a:22:ab:a1:8e:17:8e:75:4b:
4b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:86:7D:F9:7B:72:B4:3F:FC:36:6B:F3:F6:39:B5:85:B7:FA:C4:7C
X509v3 Authority Key Identifier:
keyid:C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e0:7d:1a:b4:94:15:15:f9:be:f1:01:26:7f:bb:13:02:bf:78:
ef:81:8a:35:c3:33:4f:67:e9:6b:5b:e3:d9:47:72:6f:a3:05:
92:80:22:91:e3:c7:bf:28:dd:19:ae:f5:11:5e:df:13:e9:87:
60:d2:61:72:18:8c:81:12:7e:11:eb:0a:a5:c1:76:82:e8:2d:
0b:e2:5a:c8:74:2d:b1:9f:fb:3b:fa:d8:39:0b:5a:ac:19:50:
d5:d7:de:c6:5c:ec:8b:e1:83:89:6c:2b:62:0a:2b:6f:25:43:
fc:69:28:cd:37:ad:17:71:ff:27:d2:cf:97:42:a5:f0:a6:66:
dc:eb:bd:71:f8:17:03:97:0c:f2:53:15:5e:dd:71:a1:f9:6f:
43:43:84:dd:2d:16:d7:f8:a7:32:5a:40:e4:c5:90:0d:89:4f:
a7:92:cc:02:28:31:26:c0:f4:c4:1e:28:86:9a:a3:1a:44:0c:
5f:1a:fe:a8:63:44:8f:ba:41:b1:75:c1:e1:a6:0e:23:00:bb:
39:ea:15:4e:6f:93:ae:3e:5b:cc:0c:4f:16:8c:b9:2c:8a:4a:
76:bc:7b:7b:be:1c:fb:01:a5:6c:de:7f:1c:22:88:9a:bf:7a:
af:92:78:55:38:1d:45:59:a6:4e:2c:95:85:3b:7f:76:d0:a9:
eb:10:c2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:40:52 2025 by rpki-client