Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183E7F/D405D254285C11ECB9ACE10DC4F9AE02/1WCjWtQMpi9T5roc3grRqjKiuWc.mft
File: 1WCjWtQMpi9T5roc3grRqjKiuWc.mft (raw, json)
Hash identifier: SNkmCYTReNe7h0NmXuj/svUF5yM0SzGySTm+ks/LWAU=
Subject key identifier: 29:D3:47:52:47:1A:A5:61:FD:F0:38:C9:2F:13:0F:11:76:A3:BC:C7
Authority key identifier: D5:60:A3:5A:D4:0C:A6:2F:53:E6:BA:1C:DE:0A:D1:AA:32:A2:B9:67
Certificate issuer: /CN=A9183E7F/serialNumber=D560A35AD40CA62F53E6BA1CDE0AD1AA32A2B967
Certificate serial: 0480
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WCjWtQMpi9T5roc3grRqjKiuWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183E7F/D405D254285C11ECB9ACE10DC4F9AE02/1WCjWtQMpi9T5roc3grRqjKiuWc.mft
Manifest number: 0480
Signing time: Fri 31 Jan 2025 00:04:31 +0000
Manifest this update: Fri 31 Jan 2025 00:04:31 +0000
Manifest next update: Fri 07 Feb 2025 00:04:31 +0000
Files and hashes: 1: 1WCjWtQMpi9T5roc3grRqjKiuWc.crl (hash: OSjLD9E/+N0A5SoPAeMMTV/9Y+SRSrIEDKJezScNIL8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1152 (0x480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183E7F/serialNumber=D560A35AD40CA62F53E6BA1CDE0AD1AA32A2B967
Validity
Not Before: Jan 31 00:04:31 2025 GMT
Not After : Feb 7 00:04:31 2025 GMT
Subject: CN=679c138f-db2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:97:7f:38:26:f0:6c:2c:63:0b:eb:e0:cb:3d:
d0:6a:7a:84:0d:ec:31:70:24:49:17:fb:97:5f:66:
6a:8a:92:a3:2a:e5:59:d7:2f:e7:b8:7f:d8:1f:0a:
d9:d8:43:f2:19:4f:3b:32:7f:f8:ed:a5:0e:93:87:
38:f6:7d:f7:c4:06:78:e4:b4:0d:02:cd:2a:e5:68:
a3:6c:99:ca:36:5c:f1:b7:9a:74:cb:87:30:2f:2f:
fc:be:a1:05:dc:7b:ee:7f:b6:92:5d:37:6d:8a:2c:
6f:61:f6:77:e2:a2:07:6c:d5:70:aa:f6:82:5d:b2:
90:5b:17:58:54:19:16:2a:73:27:95:49:f1:05:44:
13:22:c7:59:24:f5:5f:d1:36:e3:98:e4:43:6e:24:
13:a4:0e:28:95:ff:d5:1c:b3:bf:95:51:fe:72:8e:
bc:ba:ed:a9:e4:89:ae:17:b7:11:3c:7e:4c:25:b1:
05:df:b4:df:dd:c6:fb:f8:f2:77:41:d3:85:28:b4:
8e:3b:7c:b7:d6:0a:2c:9d:c6:67:ab:d6:4a:78:39:
eb:62:bc:ec:4d:4c:9f:7c:a2:65:9f:fb:6a:e6:57:
67:c4:2b:91:63:1e:5d:1d:6d:9c:48:6c:3e:9d:96:
b5:d4:87:e1:fd:47:e1:06:72:ef:57:a7:c0:30:ca:
58:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D3:47:52:47:1A:A5:61:FD:F0:38:C9:2F:13:0F:11:76:A3:BC:C7
X509v3 Authority Key Identifier:
keyid:D5:60:A3:5A:D4:0C:A6:2F:53:E6:BA:1C:DE:0A:D1:AA:32:A2:B9:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183E7F/D405D254285C11ECB9ACE10DC4F9AE02/1WCjWtQMpi9T5roc3grRqjKiuWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WCjWtQMpi9T5roc3grRqjKiuWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183E7F/D405D254285C11ECB9ACE10DC4F9AE02/1WCjWtQMpi9T5roc3grRqjKiuWc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:0c:4f:66:bf:2e:71:fe:74:f0:4b:86:ab:5f:ca:16:bb:ed:
68:81:5a:ce:e6:b4:5f:ed:3d:45:a4:32:42:15:ac:9c:f7:e5:
8c:14:c9:bc:1b:2b:d1:51:84:a3:24:bf:e4:e1:9b:98:b9:6a:
28:eb:57:3c:4c:38:ad:ab:76:d5:31:0c:bf:74:59:65:83:20:
97:55:29:3f:3d:32:fa:09:33:cb:e3:68:5f:fa:9c:fc:8b:f6:
1a:a4:c8:df:57:79:b6:8f:7d:47:7d:35:77:62:30:d8:34:22:
78:2b:46:fc:6d:c9:ec:64:00:98:c4:4e:5f:64:92:15:7f:b4:
9a:e6:a6:16:02:aa:a4:e2:dd:2d:33:25:fb:04:cf:a4:17:59:
3c:36:12:23:85:a2:84:d7:65:cb:ca:26:d6:d5:d9:0c:d2:19:
78:de:3e:01:31:71:0e:b1:68:c5:a7:16:6e:f1:20:68:88:82:
20:bc:92:88:ef:83:62:1b:1b:76:14:ae:b8:a0:04:c6:b4:ec:
84:59:05:12:2d:80:10:ff:cc:d7:77:b1:e6:2a:dc:a6:be:aa:
b8:10:be:4e:c8:42:e1:c1:b5:e9:c9:a7:2e:e0:14:46:6d:71:
8f:3e:55:f4:e2:58:9f:3e:ce:ee:48:8a:9e:80:62:9a:7d:1f:
9b:39:b0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:16 2025 by rpki-client