Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft
File: _whTCVKXG6BlIktSH1ZWO20hJO0.mft (raw, json)
Hash identifier: iaZ/Fr+VALeP0P0dwfyJhSZmON+iqzf7GfbDZCajjP8=
Subject key identifier: B1:BE:79:E1:8E:23:8B:2E:5A:B5:4A:D8:34:D3:39:E3:43:34:9C:41
Authority key identifier: FF:08:53:09:52:97:1B:A0:65:22:4B:52:1F:56:56:3B:6D:21:24:ED
Certificate issuer: /CN=A917E475/serialNumber=FF08530952971BA065224B521F56563B6D2124ED
Certificate serial: 0CB2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_whTCVKXG6BlIktSH1ZWO20hJO0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft
Manifest number: 0CAC
Signing time: Fri 31 Jan 2025 18:06:55 +0000
Manifest this update: Fri 31 Jan 2025 18:06:54 +0000
Manifest next update: Fri 07 Feb 2025 18:06:54 +0000
Files and hashes: 1: _whTCVKXG6BlIktSH1ZWO20hJO0.crl (hash: o6fdctp5lPuUiUmM5eBzWPR2Vw43fChDhJdHs33lMx0=)
2: 3A8AC908E41C11E9AD4A8D16C4F9AE02.roa (hash: 7Dst7szyPWooV+5WFj8vI4oANvEvXDCaESLYXfhjMk0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3250 (0xcb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E475/serialNumber=FF08530952971BA065224B521F56563B6D2124ED
Validity
Not Before: Jan 31 18:06:54 2025 GMT
Not After : Feb 7 18:06:54 2025 GMT
Subject: CN=679d113e-daa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:50:09:5d:e8:ef:4f:80:1f:12:c8:29:7c:
8a:0e:16:6b:f5:ae:ca:fd:36:7b:02:79:22:2e:c5:
32:3f:35:b1:00:99:df:73:57:3c:62:9f:9e:8c:f2:
35:2f:90:ec:cc:91:ac:76:11:32:90:45:da:2a:d2:
fb:7b:ac:dc:92:cc:8c:aa:85:07:cc:43:f1:77:21:
d0:da:13:f1:ee:99:6b:1c:53:12:0b:c0:cc:5a:2a:
df:4c:10:31:0f:d4:c1:18:a0:55:e8:6f:05:52:73:
5d:82:c9:86:77:49:3b:1f:70:ef:c2:df:15:86:92:
11:e8:e1:f2:18:b2:bd:0b:a9:04:c2:71:59:b6:ac:
68:f0:14:50:02:67:69:59:78:3e:e2:ec:1a:87:68:
35:9d:c6:ad:09:0b:ff:e5:90:7e:a4:10:33:01:d4:
68:d9:fa:b6:a7:0c:5f:a9:28:de:ce:6f:26:85:e2:
da:7f:7a:13:03:cf:53:82:da:36:b0:ab:64:8d:60:
fb:ae:d0:82:50:48:3a:d8:b8:8c:0e:6e:a2:c7:8c:
71:4e:c1:01:f1:e3:b9:16:81:6e:4d:b5:48:ca:e0:
3a:bb:55:d7:95:16:c1:0c:2a:79:ed:a6:a0:5c:e5:
a4:25:81:9b:53:98:10:e6:6c:53:ab:e4:5f:f6:8f:
e4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BE:79:E1:8E:23:8B:2E:5A:B5:4A:D8:34:D3:39:E3:43:34:9C:41
X509v3 Authority Key Identifier:
keyid:FF:08:53:09:52:97:1B:A0:65:22:4B:52:1F:56:56:3B:6D:21:24:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_whTCVKXG6BlIktSH1ZWO20hJO0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:4f:a7:72:73:54:ed:fc:a2:d4:b7:be:26:bd:69:75:99:a0:
08:c8:e6:fa:8d:82:3f:c8:e3:6f:60:ef:f9:17:4d:1b:dc:03:
7b:61:ac:76:fa:50:95:e4:cb:ba:28:e4:ea:a9:3d:b7:73:58:
6d:2b:a6:5f:a8:52:b8:ce:55:5f:48:06:34:ee:fe:15:6a:74:
d8:41:c8:72:8c:a8:31:0d:13:fd:fe:9c:df:3d:18:8b:ac:93:
d5:2f:ba:e9:e9:9c:e5:9b:05:b6:03:91:8c:3d:b5:08:59:e1:
29:11:6b:6c:f5:27:57:dc:ea:14:d4:c8:bf:3d:ae:e9:5c:33:
6c:61:bb:6c:53:fd:b5:9c:5d:24:1a:ef:7e:00:8d:13:33:8f:
34:bb:ed:c9:35:19:ca:e8:48:c4:eb:68:28:e8:97:eb:ed:aa:
6f:ef:45:f1:2c:97:db:23:21:4e:6d:fe:05:f7:60:37:ef:aa:
ba:89:8b:57:b0:48:2d:9d:45:f7:d9:6b:e6:f8:07:4a:44:1d:
09:ff:59:73:b5:77:c1:b4:c8:84:c3:9f:a1:9d:5a:33:01:ae:
37:92:87:61:98:ed:f1:39:a1:3d:cb:19:48:70:27:b0:19:71:
78:b6:b2:76:10:07:7e:e2:5b:66:72:fd:ad:17:35:df:05:78:
ce:30:34:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:56:53 2025 by rpki-client