Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft
File: v1WlsAYqTmo9yHnjyfyyZnxokrc.mft (raw, json)
Hash identifier: xNr7U9CXEtp0MwthKEoDidF0Nb3WoEtESzROPDzfv4E=
Subject key identifier: EC:2F:06:36:34:62:31:86:18:36:C5:FF:8F:4C:C7:78:D1:BA:10:40
Authority key identifier: BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7
Certificate issuer: /CN=A914E08F/serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7
Certificate serial: 12CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft
Manifest number: 12BA
Signing time: Fri 31 Jan 2025 17:04:27 +0000
Manifest this update: Fri 31 Jan 2025 17:04:27 +0000
Manifest next update: Fri 07 Feb 2025 17:04:27 +0000
Files and hashes: 1: v1WlsAYqTmo9yHnjyfyyZnxokrc.crl (hash: DQ8iiH9GK2jSoE6sPDInTVyJqIEdPhoMdYiT+zcn4oQ=)
2: 7F424CC0350711E9955C524EC4F9AE02.roa (hash: mWJcvoB56xtTVL8jsG+OSQ9sF5v7r1+9ESUNzFxge8k=)
3: 47C453F638A411E9AA7CEB37C4F9AE02.roa (hash: 9g+f1SJF42ygeVyvheaF7ZLxnRH6Cv+HITF3QrrONoI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4813 (0x12cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E08F/serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7
Validity
Not Before: Jan 31 17:04:27 2025 GMT
Not After : Feb 7 17:04:27 2025 GMT
Subject: CN=679d029b-cfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:36:40:c8:3e:9d:83:8e:9c:e7:29:40:84:5a:
26:a8:3c:98:90:7d:af:87:e6:91:02:9c:be:26:cf:
ce:e4:f6:e4:17:c8:45:82:f6:9b:78:fa:35:82:a3:
32:dc:77:66:0a:6e:9a:f7:89:06:80:fe:8f:d3:a2:
c8:45:65:de:ba:27:ea:87:03:44:9c:16:14:40:8e:
53:21:f3:fc:cd:e5:5b:55:43:fa:05:0f:ca:c5:cd:
80:51:17:55:59:17:ad:5d:e4:1e:d2:77:ae:be:91:
86:f8:73:17:41:ba:b1:3b:0a:37:3a:0b:ae:ee:16:
fa:13:1e:c2:58:a9:00:f3:f5:ef:e6:b7:41:07:b4:
89:1d:a0:e8:3d:b7:99:8c:d9:b8:7a:68:05:dd:30:
1a:4d:36:73:1d:28:f5:d6:a8:6e:f5:a0:d4:0e:26:
ee:21:00:7d:8b:26:7f:1f:96:99:77:b1:c3:08:99:
8a:23:16:ae:5d:9e:3c:64:23:09:3a:c8:88:5b:64:
2f:e3:85:5d:ab:6a:35:24:cf:c4:2c:21:e2:bb:d9:
16:a5:98:73:08:34:8c:4c:aa:ef:0a:48:be:a4:a0:
64:86:7b:cc:55:02:76:09:61:2f:e8:65:09:a6:f2:
b1:da:46:bb:52:9d:e2:a3:b3:d6:08:b3:93:e8:6b:
f4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2F:06:36:34:62:31:86:18:36:C5:FF:8F:4C:C7:78:D1:BA:10:40
X509v3 Authority Key Identifier:
keyid:BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:1d:e7:5d:7a:89:07:44:d0:28:72:76:58:e8:c8:bd:6c:e0:
cd:44:6e:99:d9:73:fc:dc:f8:40:20:c3:9a:06:31:26:ab:ce:
8c:40:49:1c:9b:5a:3f:57:15:54:7b:3b:70:9a:5d:7b:1e:67:
01:bd:52:b9:5b:a1:7e:6d:a5:1d:4d:bc:04:1a:ca:21:21:72:
8f:71:b2:b2:0e:bb:e3:bd:2d:d5:19:2b:7b:96:d4:21:02:9e:
8a:18:d5:55:1b:5e:44:1e:63:f7:28:26:17:d1:d5:b4:02:ed:
6c:1b:3a:2e:1d:e1:06:ff:10:fe:e5:7b:60:a8:b4:95:28:e2:
e8:f4:ef:a7:fb:23:92:fa:4f:2e:14:2b:27:82:e7:12:a7:f4:
d5:31:84:84:5e:2d:1c:a9:29:95:17:81:74:42:a7:f9:b6:b9:
a1:10:f6:7f:e5:c9:51:00:04:82:2e:3b:8c:a4:1d:41:70:e1:
4f:ad:35:b7:e2:76:19:28:83:bb:5b:88:62:a0:ac:70:a4:6d:
62:fc:56:09:f4:fe:7f:e4:8f:75:96:b3:5d:0d:9f:d7:e6:2c:
18:04:c9:22:84:f0:06:1f:33:d7:40:ab:0e:55:54:ea:08:e9:
a9:8d:c6:15:3c:f0:e4:b4:ae:cd:95:ef:29:cf:73:cd:bb:9c:
5e:1c:ca:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:46:28 2025 by rpki-client