
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
File: wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json)
Hash identifier: 7NiRd63Ia1R5kJHm+fn6Oc+6v16nF27ka28trQR5vhg=
Subject key identifier: 39:0F:8C:02:85:30:23:F1:EE:2D:C6:54:4C:4E:8F:8A:2A:36:E1:06
Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Certificate serial: 04EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
Manifest number: 04D5
Signing time: Thu 30 Jan 2025 23:53:29 +0000
Manifest this update: Thu 30 Jan 2025 23:53:29 +0000
Manifest next update: Thu 06 Feb 2025 23:53:29 +0000
Files and hashes: 1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: FfQltIOZzkMHqNHwXoF85dk10WHpM9YkhT6fg8ZtwPM=)
2: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: PT6HAQnCKQ1h24wBLOcqnEqZNrhbuPQnC+z2D3m/yIA=)
3: 24AE273C2D1111EE85C59810C4F9AE02.roa (hash: YWeX1DfSGs4BQndSEpvjXp//SRdFsIHjRaQTZ+32G1w=)
4: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: mYVTb3naQfgNMS7fIevSh0fymgDfaPtpkRpDdX0Fp/8=)
5: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: dwJddnm1ntnsj4XMzYCHtwqdcwWHva5rTpsA08hxqqs=)
6: BCE8827C4EB011ECA708A867C4F9AE02.roa (hash: YiFunTZL5LVn069EwrhiVsys5tG1ZsT1/SQk8scoDqU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1263 (0x4ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Validity
Not Before: Jan 30 23:53:29 2025 GMT
Not After : Feb 6 23:53:29 2025 GMT
Subject: CN=679c10f9-9329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b9:9a:37:05:19:2a:80:0c:36:7a:95:5a:70:
21:09:cf:97:83:53:e3:2a:d0:d8:c1:81:7e:88:31:
ad:54:eb:e0:53:ec:13:78:eb:e2:26:70:bf:73:84:
a1:37:5b:d8:b9:6b:ee:80:67:ff:12:6a:4e:d1:5e:
67:34:1a:af:56:d8:75:e4:a9:b9:b0:ea:9a:2f:b3:
5b:b0:d3:c6:29:0c:48:32:31:c2:d4:40:2b:37:6b:
34:5c:b1:5b:57:eb:ec:4d:b4:93:63:34:d7:41:a6:
b1:b7:de:b8:b8:f1:81:83:97:78:80:ee:45:67:7a:
1d:21:fb:19:75:83:06:a4:d4:cc:19:80:b5:6b:57:
b1:73:4b:0b:73:82:9d:5d:0a:02:9c:af:1f:a4:f6:
db:dc:0b:db:59:8a:6e:93:93:3e:e7:36:d3:33:bc:
32:d9:74:3a:6a:27:84:e8:c3:15:19:b2:43:ec:43:
57:72:18:ae:87:7e:3e:17:ac:43:3d:07:8e:01:49:
7a:f2:70:71:bc:93:34:07:e2:23:01:cb:1a:ec:96:
70:3f:e3:2e:f5:a3:59:12:3e:d6:9b:e7:8d:67:d5:
0d:57:3c:26:20:a8:02:f8:cb:0d:1e:92:d2:1c:03:
fa:0c:e6:83:a4:55:7a:81:11:92:36:74:63:eb:98:
93:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0F:8C:02:85:30:23:F1:EE:2D:C6:54:4C:4E:8F:8A:2A:36:E1:06
X509v3 Authority Key Identifier:
keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:49:d9:c6:22:10:28:58:09:ce:84:c2:30:6e:00:50:61:5c:
3c:e3:29:85:c8:f9:7e:e6:9e:fc:3a:63:96:b0:da:d0:4f:7f:
4b:a3:e9:6b:b1:1e:13:b5:e0:f3:43:b5:2a:a4:33:17:80:41:
b1:d3:94:08:f5:d3:3c:1a:94:e3:75:66:3a:b2:51:07:0a:a2:
23:1a:5e:1e:73:7b:5e:a7:f2:82:4f:f6:05:a0:92:1f:89:7f:
c6:c7:df:a6:67:b0:14:98:ab:08:29:4c:f5:74:fb:f1:f0:dc:
5c:25:dd:a2:ca:50:56:a9:5c:a8:8d:68:12:41:4d:dd:62:42:
47:34:4f:2e:26:22:2c:a4:92:17:83:ad:0c:be:21:1a:50:30:
9c:db:15:2e:c4:66:0a:d0:37:c4:dd:e8:19:16:28:59:93:6b:
4c:15:d8:27:e9:0d:51:ca:6a:ff:77:86:bb:60:1b:e1:4f:50:
f1:a0:59:b2:76:65:0e:a5:43:be:da:6e:b4:55:03:41:48:70:
71:60:a7:a2:7c:63:3f:99:40:66:76:52:75:b5:50:65:70:94:
d1:a5:42:8d:42:9d:9c:72:bc:c4:fb:91:51:30:76:1c:87:ed:
91:80:f3:ea:0f:8b:d5:7b:d7:5b:23:cf:c0:cc:c5:6c:0b:5b:
b6:34:97:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0
MjQ5NjI5MUQwHhcNMjUwMTMwMjM1MzI5WhcNMjUwMjA2MjM1MzI5WjAYMRYwFAYD
VQQDEw02NzljMTBmOS05MzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy7maNwUZKoAMNnqVWnAhCc+Xg1PjKtDYwYF+iDGtVOvgU+wTeOviJnC/c4Sh
N1vYuWvugGf/EmpO0V5nNBqvVth15Km5sOqaL7NbsNPGKQxIMjHC1EArN2s0XLFb
V+vsTbSTYzTXQaaxt964uPGBg5d4gO5FZ3odIfsZdYMGpNTMGYC1a1exc0sLc4Kd
XQoCnK8fpPbb3AvbWYpuk5M+5zbTM7wy2XQ6aieE6MMVGbJD7ENXchiuh34+F6xD
PQeOAUl68nBxvJM0B+IjAcsa7JZwP+Mu9aNZEj7Wm+eNZ9UNVzwmIKgC+MsNHpLS
HAP6DOaDpFV6gRGSNnRj65iTTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkPjAKF
MCPx7i3GVExOj4oqNuEGMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC
RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NUQyNS82N0YyQjBEODBCRDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9j
VC1hZlk2VEtwdHBDU1dLUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA7SdnGIhAoWAnOhMIwbgBQYVw84ymFyPl+5p78OmOWsNrQT39Lo+lr
sR4TteDzQ7UqpDMXgEGx05QI9dM8GpTjdWY6slEHCqIjGl4ec3tep/KCT/YFoJIf
iX/Gx9+mZ7AUmKsIKUz1dPvx8NxcJd2iylBWqVyojWgSQU3dYkJHNE8uJiIspJIX
g60MviEaUDCc2xUuxGYK0DfE3egZFihZk2tMFdgn6Q1Rymr/d4a7YBvhT1DxoFmy
dmUOpUO+2m60VQNBSHBxYKeifGM/mUBmdlJ1tVBlcJTRpUKNQp2ccrzE+5FRMHYc
h+2RgPPqD4vVe9dbI8/AzMVsC1u2NJew
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:52:53 2025 by rpki-client