Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json)
Hash identifier: iD0fWT4G+4FGk5nSa5BzmgRL2lIkJIUJDXA9e5CWvDI=
Subject key identifier: 1B:99:FB:DD:59:80:81:93:DD:FD:CA:A7:85:8A:C1:6E:D4:26:32:AA
Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91
Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
Certificate serial: 0BF8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
Manifest number: 0BD4
Signing time: Fri 31 Jan 2025 18:40:16 +0000
Manifest this update: Fri 31 Jan 2025 18:40:16 +0000
Manifest next update: Fri 07 Feb 2025 18:40:16 +0000
Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: KhaTbP4k7ug/qmXQ2VCoi3qZ9dDqBVi4KKJaObgEZ+I=)
2: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: gf3Sdo19qyXM6SMAtIZiiG8nFm/lM81I+lk8U/mxJ0A=)
3: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: m3cQPwvPfynkpVZQ6ovTIwwV/a4OxHBn+kGRuN/3tCk=)
4: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: iJYPLuFQNCCH+UvB8S/XoN2BohnkZQZo7wuZ5vZn4KI=)
5: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: OT8lFgnYcC18UV02Y4GD3JZ3PmqRrvihPECOx7skEQw=)
6: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: b4w7QgPcZzJXvh0ZqyON2NEy/TPDBAfSWtVCJWQUkJM=)
7: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: +57K4ut0qq2fKWCTFqpHNS42ff+KxP45CLdJafu2rsI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3064 (0xbf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
Validity
Not Before: Jan 31 18:40:16 2025 GMT
Not After : Feb 7 18:40:16 2025 GMT
Subject: CN=679d1910-f909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f6:18:d9:58:12:ca:bf:43:b6:d1:47:70:de:
0d:f9:7b:b9:57:db:1b:0f:23:bc:51:79:95:d4:f6:
15:a2:b0:ed:4f:2a:84:aa:95:1c:36:7d:2b:2f:c2:
ce:93:f3:01:71:4f:83:53:cf:77:a6:45:de:90:0b:
64:01:bd:48:9f:73:b1:5b:0a:d8:59:e7:5a:79:07:
c7:de:5b:b6:3e:a6:1a:2c:97:01:97:a1:ff:cc:3a:
54:28:17:d9:2f:59:26:11:23:bd:9d:b9:82:f3:94:
29:78:25:a9:c8:02:46:01:57:d0:1a:e0:22:a8:d4:
38:69:91:f1:6d:97:d6:c0:44:7f:95:0f:3d:c0:cf:
98:6d:05:2e:40:6d:59:3a:6f:17:91:c7:60:36:46:
11:52:63:e0:1d:7d:3b:ef:a5:93:93:8a:ac:7e:08:
6a:c0:94:5f:4a:60:1e:6b:a4:05:ae:d9:6e:15:dd:
4b:bd:55:7a:33:45:df:78:a7:36:32:8f:74:30:be:
1b:7a:49:ec:63:50:14:1a:5f:10:0f:2b:5b:97:94:
a7:c1:49:b8:aa:3a:64:b4:4c:88:3f:8d:11:5f:b5:
9c:37:6c:99:fd:f5:e9:4c:c8:f9:93:6d:ef:43:d2:
8a:57:af:2e:53:e0:c8:23:31:af:a8:44:bb:c7:48:
8f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:99:FB:DD:59:80:81:93:DD:FD:CA:A7:85:8A:C1:6E:D4:26:32:AA
X509v3 Authority Key Identifier:
keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:76:06:d5:ea:3b:19:53:f4:28:0f:6b:ca:fb:64:ca:37:78:
f3:99:20:72:fe:c8:9e:20:da:cb:bc:9e:33:5a:32:f2:cb:6b:
e5:cc:96:fa:9e:79:fc:2b:2f:6c:d3:ba:13:4a:91:28:17:ba:
2e:83:5e:07:7c:5e:21:0d:a1:14:85:e9:5f:ea:32:56:50:69:
87:f0:0c:b0:8a:de:78:af:fa:a0:36:20:cf:df:65:e8:50:a5:
f8:ec:81:83:61:2d:68:08:06:af:5c:46:57:ab:ff:e5:d7:15:
7d:ac:d6:6e:55:c2:93:44:4e:1b:41:cf:61:9c:4d:33:43:38:
fc:48:de:05:e7:01:d4:1f:3b:9f:c2:dd:23:cb:80:a6:3a:9c:
49:4c:b5:66:78:75:b7:07:d0:1b:72:2a:b7:59:11:55:6b:c6:
c9:69:47:5c:45:d7:2b:06:34:c5:e6:91:d7:3a:3c:a6:c1:c6:
9f:db:fa:08:ae:fe:87:b8:77:9a:3a:e8:8d:10:c6:f6:c7:ba:
a1:7c:c9:17:fe:06:65:27:ac:1d:70:08:4b:43:cb:07:8f:ce:
4f:05:2b:3b:8f:44:6d:3e:97:c9:2d:03:c3:41:92:8d:4f:a3:
9b:fa:82:37:12:b3:d7:a0:13:ab:83:da:2a:09:ed:0d:3e:fb:
87:e3:a4:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJGREExMTAvBgNVBAUTKDVBQzc2MTVDNDU5Qjc4ODEwMzdENzVFNTY1MUE0Q0VD
MzZGN0VGOTEwHhcNMjUwMTMxMTg0MDE2WhcNMjUwMjA3MTg0MDE2WjAYMRYwFAYD
VQQDEw02NzlkMTkxMC1mOTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzvYY2VgSyr9DttFHcN4N+Xu5V9sbDyO8UXmV1PYVorDtTyqEqpUcNn0rL8LO
k/MBcU+DU893pkXekAtkAb1In3OxWwrYWedaeQfH3lu2PqYaLJcBl6H/zDpUKBfZ
L1kmESO9nbmC85QpeCWpyAJGAVfQGuAiqNQ4aZHxbZfWwER/lQ89wM+YbQUuQG1Z
Om8XkcdgNkYRUmPgHX0776WTk4qsfghqwJRfSmAea6QFrtluFd1LvVV6M0XfeKc2
Mo90ML4beknsY1AUGl8QDytbl5SnwUm4qjpktEyIP40RX7WcN2yZ/fXpTMj5k23v
Q9KKV68uU+DIIzGvqES7x0iP7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuZ+91Z
gIGT3f3Kp4WKwW7UJjKqMB8GA1UdIwQYMBaAFFrHYVxFm3iBA3115WUaTOw29++R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkZEQS82ODEyN0UyMDBG
NEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJRURmWFhsWlJwTTdEYjM3
NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dzZGhYRVdiZUlFRGZYWGxaUnBNN0RiMzc1RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QkZEQS82ODEyN0UyMDBGNEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJ
RURmWFhsWlJwTTdEYjM3NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCedgbV6jsZU/QoD2vK+2TKN3jzmSBy/sieINrLvJ4zWjLyy2vlzJb6
nnn8Ky9s07oTSpEoF7oug14HfF4hDaEUhelf6jJWUGmH8Aywit54r/qgNiDP32Xo
UKX47IGDYS1oCAavXEZXq//l1xV9rNZuVcKTRE4bQc9hnE0zQzj8SN4F5wHUHzuf
wt0jy4CmOpxJTLVmeHW3B9Abciq3WRFVa8bJaUdcRdcrBjTF5pHXOjymwcaf2/oI
rv6HuHeaOuiNEMb2x7qhfMkX/gZlJ6wdcAhLQ8sHj85PBSs7j0RtPpfJLQPDQZKN
T6Ob+oI3ErPXoBOrg9oqCe0NPvuH46Rl
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:36:09 2025 by rpki-client