Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
File: WFcZh2wfmiD9644Ew9aTelrKpXw.mft (raw, json)
Hash identifier: VjdztFO2KbEVbtVBVWcZ43kBhYqcetB9wXp+sbIHOWs=
Subject key identifier: 6E:CB:7D:E0:C1:01:95:01:D6:7D:BA:C0:44:8E:35:16:D6:0B:3D:6B
Authority key identifier: 58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C
Certificate issuer: /CN=A916F1C6/serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C
Certificate serial: 3444
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
Manifest number: 3444
Signing time: Fri 31 Jan 2025 15:08:48 +0000
Manifest this update: Fri 31 Jan 2025 15:08:48 +0000
Manifest next update: Fri 07 Feb 2025 15:08:48 +0000
Files and hashes: 1: WFcZh2wfmiD9644Ew9aTelrKpXw.crl (hash: PDHrt22Cwr+qJniXgIqzcoZBRsGnXE5VNCPvPcwp0s0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13380 (0x3444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916F1C6/serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C
Validity
Not Before: Jan 31 15:08:48 2025 GMT
Not After : Feb 7 15:08:48 2025 GMT
Subject: CN=679ce780-7374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:21:79:da:9b:8d:dd:75:8c:8f:df:56:1f:d0:
f3:da:53:89:f9:b3:43:bd:af:ae:a1:44:57:06:68:
9f:5c:e8:61:b5:42:4a:56:dc:19:0a:23:63:25:bd:
0f:cb:eb:e6:44:bb:bd:fc:8d:ca:4d:01:b3:83:87:
c5:4f:6f:60:7e:2f:fe:e7:99:45:87:31:89:95:e1:
9b:65:68:5c:6a:f3:db:9e:ee:4a:b3:76:72:59:74:
06:33:7f:73:3a:72:07:81:03:ad:80:9e:62:96:82:
19:9e:72:ea:44:16:c7:9d:a8:da:2a:e8:47:df:58:
e7:d8:ec:4b:51:90:23:66:15:61:bc:19:d3:f8:c4:
52:94:a7:cb:92:2f:e6:2f:a7:0b:d0:92:32:49:0b:
39:73:08:68:fb:0e:ae:de:0e:b1:64:ee:ac:d0:0a:
8c:2b:52:03:72:b3:62:97:ff:66:b1:38:64:d7:f1:
57:3c:1c:fa:60:81:ec:3a:b7:42:35:1c:2a:ec:43:
47:f1:ab:fd:1b:d1:c6:7d:f0:4f:ff:3e:d3:2c:88:
99:9f:6d:27:58:ca:71:94:d5:97:66:f4:7f:3f:ac:
9c:6d:cb:0a:35:b8:5a:6d:6b:67:98:13:ed:57:e2:
d7:13:0d:d4:04:dd:71:63:cd:d5:0b:ff:d1:28:8e:
d5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CB:7D:E0:C1:01:95:01:D6:7D:BA:C0:44:8E:35:16:D6:0B:3D:6B
X509v3 Authority Key Identifier:
keyid:58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:92:a7:97:77:9d:85:86:d3:10:02:5d:e1:20:cb:da:f8:cc:
3f:3d:50:53:53:3d:1b:f9:7d:be:fa:2c:f1:89:64:02:47:4c:
0f:b0:e5:db:9e:49:54:f4:40:60:32:33:0b:81:ea:2c:0e:18:
bb:64:52:9c:f8:70:ca:be:11:f1:c5:78:1a:f6:2e:b7:2d:cd:
e8:7f:57:18:66:58:dc:c5:2a:71:70:dc:99:ee:86:ed:ae:e8:
d1:d9:6c:96:09:23:0a:1b:dc:1b:28:f1:6d:15:ce:55:0b:27:
2f:c6:f7:ed:e0:9b:ce:9a:82:35:8b:33:26:1d:bb:43:dd:c2:
28:df:e7:ea:4f:a1:e3:41:6f:b1:a0:3b:8e:88:8e:d0:eb:34:
5a:3b:5e:cd:12:53:6c:1d:4e:58:41:bc:f0:d4:89:1d:58:90:
9f:52:df:1a:af:78:b4:12:34:83:40:41:9b:08:b0:89:b9:5b:
4f:3f:f6:fa:fd:69:a3:17:af:9f:fd:53:43:75:ea:c4:46:0a:
35:d1:81:c2:5e:b4:de:49:79:8c:c1:49:ff:bb:17:7e:d1:82:
a9:30:57:77:d8:59:61:db:50:06:1d:27:d7:f1:11:e5:28:39:
12:02:76:48:89:64:a0:06:c4:33:bc:73:cf:46:f6:79:de:2c:
3f:5b:8c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:11 2025 by rpki-client