Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft
File: WAfnFR1ax7dL8iyZCSvS6S6mBig.mft (raw, json)
Hash identifier: CXgss9ufgApGeAHEJ9g2DV6dn5CWQ3gAXRoNk7DGMh0=
Subject key identifier: 27:2F:41:73:7F:AF:33:EB:64:E3:EA:E4:B2:16:CC:6F:66:DF:9E:93
Authority key identifier: 58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28
Certificate issuer: /CN=A9144EC5/serialNumber=5807E7151D5AC7B74BF22C99092BD2E92EA60628
Certificate serial: 058B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft
Manifest number: 0581
Signing time: Thu 30 Jan 2025 23:18:21 +0000
Manifest this update: Thu 30 Jan 2025 23:18:20 +0000
Manifest next update: Thu 06 Feb 2025 23:18:20 +0000
Files and hashes: 1: WAfnFR1ax7dL8iyZCSvS6S6mBig.crl (hash: h3J8ge1glac7Hl5MvQs7Tjjv7Tg64MrZ2YsOZLEGCWg=)
2: 9CCB30B0C5F411EB8A6F1525C4F9AE02.roa (hash: 3Rc3j+d1O8Ewr6XgYdHpoNd/omQ6+BrlDickanhKcdQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1419 (0x58b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144EC5/serialNumber=5807E7151D5AC7B74BF22C99092BD2E92EA60628
Validity
Not Before: Jan 30 23:18:20 2025 GMT
Not After : Feb 6 23:18:20 2025 GMT
Subject: CN=679c08bd-a3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:eb:68:ad:be:d7:b3:ec:de:7e:a6:ec:43:
18:f3:b2:a5:2a:93:d1:5c:31:7e:55:b3:6b:ad:a8:
97:2b:ba:2b:37:85:d1:75:8d:40:58:5b:2f:5f:97:
83:70:a8:5b:80:bc:60:18:7d:d8:fa:db:91:7d:0e:
35:8d:e4:39:ad:5e:b5:94:a8:fa:55:c8:49:4a:d5:
d4:53:11:f4:cd:3f:6d:6b:ef:49:30:8b:a9:87:fb:
1f:04:ed:32:fd:7f:f6:f0:04:8a:e6:bd:74:82:b0:
a9:a8:b8:17:a5:cc:00:cf:22:15:3f:c2:9c:1a:62:
e2:64:9d:2a:7d:e3:ba:00:f9:d6:9e:f1:8d:15:ff:
74:90:0e:d9:59:3c:73:94:ae:8c:48:bf:23:8f:0d:
ba:47:0c:b5:c4:e1:83:d8:b3:68:85:72:53:65:c1:
7b:fb:a5:84:1a:a2:c0:82:c3:1e:99:79:4c:03:1b:
bd:8d:55:5b:76:97:c2:c9:b1:ae:70:17:fc:29:f2:
a5:96:ae:12:94:a7:2c:47:05:a7:ce:c5:3b:67:28:
6b:08:be:50:ef:8e:0c:b5:07:cb:3f:38:d2:ee:bd:
c5:79:97:10:e1:c6:75:fe:27:38:e7:82:37:b9:c9:
dc:bb:c4:56:9c:ca:0d:1d:47:f0:51:f2:98:6c:b9:
df:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2F:41:73:7F:AF:33:EB:64:E3:EA:E4:B2:16:CC:6F:66:DF:9E:93
X509v3 Authority Key Identifier:
keyid:58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a5:54:0c:44:9d:78:6c:b8:32:1c:63:e9:cf:3a:81:a3:6f:
23:af:87:37:a9:55:ce:16:71:73:42:bb:ed:b5:48:29:6c:5f:
ec:0d:24:15:42:18:94:86:4f:38:51:08:18:8b:b0:97:03:07:
bd:4b:c5:d9:96:36:fd:c1:27:ad:f3:f9:3a:74:7e:b0:dd:9a:
bb:0c:57:82:09:2b:40:7c:8e:12:b2:19:08:79:95:88:a4:dc:
39:9f:9e:49:21:60:83:ed:1f:83:8c:87:33:e2:49:24:28:68:
11:b1:4d:9b:91:86:9a:50:d0:b9:ad:35:d3:26:a3:3f:eb:30:
f0:54:92:8d:7c:73:3c:bd:0f:25:d6:c4:c5:cb:31:28:fa:2b:
10:86:e3:90:17:1b:45:6d:12:67:97:3d:36:cc:91:38:ae:50:
bb:d0:d2:14:d8:1c:d2:7d:f5:d8:cc:63:09:85:f3:8e:b0:bd:
f4:73:6a:bc:d7:f2:d1:4d:5f:95:fa:2b:30:b7:70:81:ed:9b:
f7:f2:76:16:5b:23:b0:49:ff:3f:88:5b:77:7d:92:d3:de:be:
75:35:25:d1:da:8a:ca:1a:3a:2e:41:6a:6e:2f:13:53:6f:94:
96:6e:67:d9:68:95:e5:68:cd:03:46:3c:88:fe:42:4e:ad:13:
40:a7:7a:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRFQzUxMTAvBgNVBAUTKDU4MDdFNzE1MUQ1QUM3Qjc0QkYyMkM5OTA5MkJEMkU5
MkVBNjA2MjgwHhcNMjUwMTMwMjMxODIwWhcNMjUwMjA2MjMxODIwWjAYMRYwFAYD
VQQDEw02NzljMDhiZC1hM2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzaDraK2+17Ps3n6m7EMY87KlKpPRXDF+VbNrraiXK7orN4XRdY1AWFsvX5eD
cKhbgLxgGH3Y+tuRfQ41jeQ5rV61lKj6VchJStXUUxH0zT9ta+9JMIuph/sfBO0y
/X/28ASK5r10grCpqLgXpcwAzyIVP8KcGmLiZJ0qfeO6APnWnvGNFf90kA7ZWTxz
lK6MSL8jjw26Rwy1xOGD2LNohXJTZcF7+6WEGqLAgsMemXlMAxu9jVVbdpfCybGu
cBf8KfKllq4SlKcsRwWnzsU7ZyhrCL5Q744MtQfLPzjS7r3FeZcQ4cZ1/ic454I3
ucncu8RWnMoNHUfwUfKYbLnfCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcvQXN/
rzPrZOPq5LIWzG9m356TMB8GA1UdIwQYMBaAFFgH5xUdWse3S/IsmQkr0ukupgYo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEVDNS80MzlFM0MyOEM1
MTExMUVCOTE2NDBDODdDNEY5QUUwMi9XQWZuRlIxYXg3ZEw4aXlaQ1N2UzZTNm1C
aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dBZm5GUjFheDdkTDhpeVpDU3ZTNlM2bUJpZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NEVDNS80MzlFM0MyOEM1MTExMUVCOTE2NDBDODdDNEY5QUUwMi9XQWZuRlIxYXg3
ZEw4aXlaQ1N2UzZTNm1CaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB6pVQMRJ14bLgyHGPpzzqBo28jr4c3qVXOFnFzQrvttUgpbF/sDSQV
QhiUhk84UQgYi7CXAwe9S8XZljb9wSet8/k6dH6w3Zq7DFeCCStAfI4SshkIeZWI
pNw5n55JIWCD7R+DjIcz4kkkKGgRsU2bkYaaUNC5rTXTJqM/6zDwVJKNfHM8vQ8l
1sTFyzEo+isQhuOQFxtFbRJnlz02zJE4rlC70NIU2BzSffXYzGMJhfOOsL30c2q8
1/LRTV+V+iswt3CB7Zv38nYWWyOwSf8/iFt3fZLT3r51NSXR2orKGjouQWpuLxNT
b5SWbmfZaJXlaM0DRjyI/kJOrRNAp3rg
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:35:39 2025 by rpki-client