Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
File: WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft (raw, json)
Hash identifier: pqBTR0uokeBzDSWIOBKkjlPGTWUFRoxs8T1F7MEFvAI=
Subject key identifier: F1:81:01:75:0F:8E:D7:63:F5:8C:1F:C5:CE:9A:40:35:08:35:FB:78
Authority key identifier: 59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19
Certificate issuer: /CN=A913C4FD/serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
Manifest number: 2A
Signing time: Fri 31 Jan 2025 06:50:06 +0000
Manifest this update: Fri 31 Jan 2025 06:50:05 +0000
Manifest next update: Fri 07 Feb 2025 06:50:05 +0000
Files and hashes: 1: WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl (hash: xshCEEYYSI/Ty3H8WRGFqrkuzdQ6vINbakjTw56gxDI=)
2: 7C321BDEA55711EFB8317F6BC4F9AE02.roa (hash: xTT8Qi7eRLtjGj1MJV5lOZ1nPkMc9OMOKapYnFfPneA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C4FD/serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319
Validity
Not Before: Jan 31 06:50:05 2025 GMT
Not After : Feb 7 06:50:05 2025 GMT
Subject: CN=679c729d-2114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:d1:43:b0:b5:d0:0a:24:7b:08:5e:06:61:
b5:58:ca:eb:21:12:09:10:76:07:7a:3b:8c:ac:27:
33:96:b6:87:21:15:c3:87:61:c4:a2:12:be:d1:34:
71:c2:17:b0:ae:17:b8:ce:09:35:06:f3:3c:7f:4d:
55:6a:c9:8f:74:8e:23:3a:01:ee:5d:ec:3b:0a:25:
aa:0a:b6:3e:6f:86:f1:fc:ad:07:34:12:b7:df:8f:
b1:1a:71:e5:4f:95:4c:0a:29:73:63:45:ee:72:a8:
ab:db:07:7c:f4:8a:30:76:e9:c2:7c:fa:e5:57:d1:
34:2d:6d:e6:92:7e:53:9d:7d:6f:2a:73:cf:d0:22:
ec:51:57:21:07:a0:3e:15:a8:7f:d2:7e:30:33:c6:
12:93:15:25:07:1a:51:db:88:5a:94:ee:4b:79:2e:
00:53:b9:db:ae:dc:c7:76:85:43:08:c8:fa:39:ec:
d3:c9:9c:03:f3:12:b2:74:7b:dc:0c:27:08:c3:45:
8a:0e:a0:24:7e:28:ba:f3:b7:55:0e:46:76:86:a3:
d9:9e:c9:d0:aa:02:02:c1:dd:d2:31:6a:6f:e3:5f:
7c:94:9c:6a:ed:d9:6f:65:47:da:8d:a0:a8:91:4d:
5a:6a:5b:b6:e2:1b:25:9e:31:44:57:c4:6a:a2:48:
df:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:81:01:75:0F:8E:D7:63:F5:8C:1F:C5:CE:9A:40:35:08:35:FB:78
X509v3 Authority Key Identifier:
keyid:59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ad:a8:5a:03:6f:b1:6c:64:bb:73:af:68:07:11:40:23:a1:
62:c8:05:04:66:9b:42:52:b7:ac:05:f5:de:1b:d6:4f:db:53:
dd:87:cb:2d:c8:ef:39:a6:b2:04:3d:8f:8b:6a:00:94:bc:ff:
38:3a:40:45:23:3f:d5:a7:a8:df:c1:65:ed:e5:c2:4c:49:5c:
c0:2f:6c:d8:5a:a9:a9:50:d8:fc:c7:6d:6e:e8:80:3d:d3:8b:
0d:51:90:48:f5:89:d8:5b:c4:50:7a:9d:e0:06:5b:a3:5c:d4:
24:1c:c7:db:b2:79:4d:be:bc:26:6a:d3:9c:43:5d:22:69:ff:
5c:4a:d1:8b:d9:29:2a:fc:65:a7:a7:ee:32:e3:58:f6:dc:f2:
b4:e1:c9:c0:34:6d:93:23:ca:db:7e:e7:6f:00:be:6a:81:18:
a8:5d:7e:11:8b:81:3c:50:14:62:81:20:78:0c:1c:73:52:af:
7a:97:3d:f3:1a:29:77:e7:7e:02:fa:eb:ca:23:74:1b:e4:26:
df:7c:13:b4:46:b2:2c:d5:d6:4e:17:cc:f0:7c:9d:87:ce:ad:
76:8a:78:23:d5:79:78:d5:5c:13:3d:6b:7e:db:fc:83:bd:b1:
fd:ba:7f:54:5b:40:dd:22:0d:1a:17:19:8a:7f:0e:ab:31:1f:
45:dd:fc:09
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
QzRGRDExMC8GA1UEBRMoNTk5MEY0QzNCQjIzNDM2Qzk1MTAwQjQ4NDhEQzkxODZB
QTQ5NTMxOTAeFw0yNTAxMzEwNjUwMDVaFw0yNTAyMDcwNjUwMDVaMBgxFjAUBgNV
BAMTDTY3OWM3MjlkLTIxMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5f9FDsLXQCiR7CF4GYbVYyushEgkQdgd6O4ysJzOWtochFcOHYcSiEr7RNHHC
F7CuF7jOCTUG8zx/TVVqyY90jiM6Ae5d7DsKJaoKtj5vhvH8rQc0Erffj7EaceVP
lUwKKXNjRe5yqKvbB3z0ijB26cJ8+uVX0TQtbeaSflOdfW8qc8/QIuxRVyEHoD4V
qH/SfjAzxhKTFSUHGlHbiFqU7kt5LgBTuduu3Md2hUMIyPo57NPJnAPzErJ0e9wM
JwjDRYoOoCR+KLrzt1UORnaGo9meydCqAgLB3dIxam/jX3yUnGrt2W9lR9qNoKiR
TVpqW7biGyWeMURXxGqiSN+rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8YEBdQ+O
12P1jB/FzppANQg1+3gwHwYDVR0jBBgwFoAUWZD0w7sjQ2yVEAtISNyRhqpJUxkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDNEZEL0E1N0NBQkVDQTU1
NDExRUY4QTk3NTI0N0M0RjlBRTAyL1daRDB3N3NqUTJ5VkVBdElTTnlSaHFwSlV4
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvV1pEMHc3c2pRMnlWRUF0SVNOeVJocXBKVXhrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND
NEZEL0E1N0NBQkVDQTU1NDExRUY4QTk3NTI0N0M0RjlBRTAyL1daRDB3N3NqUTJ5
VkVBdElTTnlSaHFwSlV4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAF2tqFoDb7FsZLtzr2gHEUAjoWLIBQRmm0JSt6wF9d4b1k/bU92Hyy3I
7zmmsgQ9j4tqAJS8/zg6QEUjP9WnqN/BZe3lwkxJXMAvbNhaqalQ2PzHbW7ogD3T
iw1RkEj1idhbxFB6neAGW6Nc1CQcx9uyeU2+vCZq05xDXSJp/1xK0YvZKSr8Zaen
7jLjWPbc8rThycA0bZMjytt+528AvmqBGKhdfhGLgTxQFGKBIHgMHHNSr3qXPfMa
KXfnfgL668ojdBvkJt98E7RGsizV1k4XzPB8nYfOrXaKeCPVeXjVXBM9a37b/IO9
sf26f1RbQN0iDRoXGYp/DqsxH0Xd/Ak=
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:33 2025 by rpki-client