Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft
File: wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft (raw, json)
Hash identifier: MW84MyU4d707ydkCJ+3dLAhkKAVblOMhkBqKBJXNbPw=
Subject key identifier: 4E:EB:77:7F:64:D9:90:01:77:5B:DC:D6:7A:2C:7A:E9:E1:A2:8C:07
Authority key identifier: C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76
Certificate issuer: /CN=A914400E/serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft
Manifest number: A9
Signing time: Fri 31 Jan 2025 05:14:52 +0000
Manifest this update: Fri 31 Jan 2025 05:14:52 +0000
Manifest next update: Fri 07 Feb 2025 05:14:52 +0000
Files and hashes: 1: wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl (hash: Y3TgfxpJE4IMST72gUF6T4A2LMs3UdhTAKQQo3eqP4E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914400E/serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276
Validity
Not Before: Jan 31 05:14:52 2025 GMT
Not After : Feb 7 05:14:52 2025 GMT
Subject: CN=679c5c4c-6ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:60:a1:c1:4d:ad:cb:82:23:2e:4f:c1:50:9b:
96:c1:be:92:60:5c:5b:02:4a:ed:66:d0:da:fc:d5:
72:24:b8:bf:91:1a:b0:fc:f2:71:41:93:a5:e2:52:
e4:8d:2c:25:a2:6b:a1:3f:b6:fe:0c:22:1a:6d:e6:
9f:98:a5:3c:17:10:74:f6:50:c5:f1:0b:d3:9c:fb:
6e:e7:95:0c:bd:a7:48:a0:fc:9d:33:81:5c:a0:f0:
ae:7b:6f:8f:f2:bd:aa:79:c1:5b:3d:c4:cc:b1:98:
f0:3c:b0:62:9a:75:0a:b7:53:8e:2e:31:0f:f8:60:
c6:f2:ca:41:92:43:dc:08:44:11:57:bb:7a:bc:f1:
3a:87:33:80:dd:8d:8a:69:18:b4:5e:cc:cf:c9:54:
d4:3f:5a:e1:bd:bb:b3:e1:9f:7f:37:b3:3b:25:18:
cf:a3:b1:30:27:37:ed:24:e1:81:be:ff:35:61:fd:
4f:b8:6e:72:6f:df:3f:71:9e:7e:5a:13:4d:03:93:
5f:87:bd:54:29:a3:de:66:9f:ad:1f:d2:5d:2b:7c:
fc:0a:fb:a3:3c:67:e1:44:23:52:62:91:c2:64:98:
60:f3:20:34:2d:9f:a8:ba:98:9d:d4:36:64:71:75:
ac:42:4f:33:6b:f6:2c:39:51:7e:71:69:f3:b6:b6:
97:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EB:77:7F:64:D9:90:01:77:5B:DC:D6:7A:2C:7A:E9:E1:A2:8C:07
X509v3 Authority Key Identifier:
keyid:C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:7f:c0:ab:08:ca:20:66:71:e4:a6:42:6b:ec:20:bc:42:18:
95:8a:ce:59:7d:aa:32:40:04:89:13:d7:03:72:31:a7:91:c8:
df:bd:2b:fc:83:a3:1c:f3:85:81:8e:26:c5:9f:63:ec:81:54:
70:28:ea:c4:9e:ff:5e:16:2f:0a:76:ea:3f:63:22:ee:49:de:
f1:60:ab:26:2a:f9:28:d1:43:2a:af:b1:73:bf:07:ac:9d:43:
f6:37:be:8a:0b:48:26:d2:6d:60:46:57:b3:1f:e6:d2:d2:55:
5f:4b:06:e7:0a:25:a9:da:93:b9:22:00:4d:9b:4e:84:2a:22:
3c:52:4c:37:16:7b:d6:6a:bb:c3:2e:9e:75:6e:d1:e1:4f:05:
63:8b:bf:bf:67:de:82:80:93:63:77:cf:8c:3d:b9:ba:9c:f8:
a3:90:9b:35:15:96:5c:66:4b:18:de:fc:cf:ff:1a:8e:eb:b2:
73:b0:43:2e:21:a4:f6:31:99:bc:f5:31:d4:8b:24:1e:8d:4d:
9e:1b:ad:26:3a:ab:78:6f:dc:12:f8:f0:a5:42:a1:b6:3a:fa:
eb:92:12:81:09:e4:ce:0d:41:b1:2e:4c:e3:9a:16:c2:4d:72:
54:35:80:c5:3f:f6:ed:ae:08:94:bc:41:e2:2a:67:2e:ed:1f:
48:65:9f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:38:18 2025 by rpki-client