Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft
File: WAFITP9u_F0ACyYp-RFr4jXErDY.mft (raw, json)
Hash identifier: Hym/CqJkiP/vmMW4r0RVMDI2I4Zpf4izPsTBzzWrD/w=
Subject key identifier: 55:95:48:A5:51:FA:1B:42:A9:C5:41:CA:3F:D4:63:5D:DE:58:98:05
Authority key identifier: 58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36
Certificate issuer: /CN=A914C531/serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft
Manifest number: 59
Signing time: Fri 31 Jan 2025 06:12:37 +0000
Manifest this update: Fri 31 Jan 2025 06:12:37 +0000
Manifest next update: Fri 07 Feb 2025 06:12:37 +0000
Files and hashes: 1: WAFITP9u_F0ACyYp-RFr4jXErDY.crl (hash: tKAKn9J0s99HLO4tLq9wiRmyIKOKo4+cMEjdKwiqbjI=)
2: 569067B25D5B11EF9EA49613C4F9AE02.roa (hash: jzHwIJDjBsj7i65jlfiFEhcWfKHflbj/qtfKv05Qz30=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C531/serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36
Validity
Not Before: Jan 31 06:12:37 2025 GMT
Not After : Feb 7 06:12:37 2025 GMT
Subject: CN=679c69d5-bfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:3f:81:1a:f3:8e:4d:b3:69:c2:4b:cf:f8:
9b:9a:68:6b:77:dd:c9:7f:35:fe:57:ef:83:e4:96:
40:6a:4c:0f:af:db:2f:f3:ab:43:b3:34:d8:c2:73:
50:bd:d8:b1:6e:89:05:37:9d:b3:39:44:1e:04:3e:
93:d4:b2:9c:35:ae:33:e8:7f:4c:89:a6:08:e1:1a:
b3:8f:b7:c7:f5:9a:39:63:00:7b:e9:97:7f:f3:07:
24:c9:00:16:19:b5:d1:67:4f:26:3b:e6:47:a0:3a:
78:d4:87:96:03:52:cc:a5:76:da:09:c4:88:2e:37:
a3:a5:82:98:99:8d:49:68:b2:d8:b7:cf:07:2b:dc:
80:e8:52:98:9c:22:bd:2d:92:19:00:36:1d:be:d7:
a4:b1:a0:60:78:95:63:6e:dc:32:dc:21:e3:f9:ad:
0b:35:e9:24:48:48:ab:e7:f8:7e:8b:bb:9a:eb:67:
a5:e0:99:88:2e:14:c1:87:ba:8d:83:46:b5:6a:24:
0f:a9:51:c1:52:26:e5:34:b8:7a:e7:b1:a1:2a:24:
46:31:29:f9:2c:e2:a3:0c:d7:f1:46:ed:95:50:d5:
3b:1d:ba:f8:97:6f:3c:5e:18:35:e8:cb:f4:75:ad:
3e:ad:0e:c9:48:84:e4:37:96:97:e0:7b:82:4b:6e:
11:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:95:48:A5:51:FA:1B:42:A9:C5:41:CA:3F:D4:63:5D:DE:58:98:05
X509v3 Authority Key Identifier:
keyid:58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:77:b7:dd:38:f3:fd:ca:06:f0:10:8f:2e:75:9c:fa:af:43:
2f:20:e9:e4:a3:7a:a1:07:b5:b8:48:3e:fb:36:45:3f:b2:78:
2b:f9:93:27:d6:24:f7:f1:54:f6:32:1d:1d:14:45:8b:c0:39:
7b:92:db:43:ac:03:6b:f1:6f:0c:33:8d:44:ae:72:09:df:b8:
14:d0:32:b0:2a:bc:ba:cc:f1:34:39:dc:e7:b0:e4:1b:02:26:
82:76:8c:42:ae:c4:24:9d:b1:b5:8d:5f:5e:7a:b1:a5:9b:6b:
13:40:40:5c:fa:50:87:6e:a8:ad:f0:2f:a4:ad:1e:36:2b:c6:
04:4c:03:b5:a4:43:59:14:10:e6:66:5d:a5:0e:a1:8b:26:63:
52:60:3c:80:c5:41:30:cb:01:a1:20:ad:f7:72:0c:e1:58:58:
f6:4b:8d:0a:33:2b:3f:a4:82:f7:2d:74:b1:00:7c:60:ae:05:
fd:e9:b6:99:91:2f:bb:ce:ac:18:9d:82:38:24:6b:b0:46:83:
78:f1:13:58:e4:26:77:d6:47:98:2a:aa:f9:88:97:d1:b3:2c:
a6:7a:f0:f9:ba:54:67:2c:36:ad:d7:6d:b9:ba:d7:02:93:d2:
52:1f:f5:72:85:9f:36:80:d0:25:f2:fc:7b:fd:a2:8c:c1:6b:
99:8d:91:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:04:20 2025 by rpki-client