Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft
File: Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft (raw, json)
Hash identifier: izedOCNjXH9V7ZtbALm2dt80L0uvqhLHAvMHk/82w2g=
Subject key identifier: FE:5D:3E:F4:21:88:55:9C:13:D5:AD:D3:38:25:0A:FB:EC:F6:4C:E6
Authority key identifier: 5A:1E:2E:39:8C:30:6E:F1:DF:F4:C0:6E:FC:AA:F6:E3:42:63:B1:2A
Certificate issuer: /CN=A918A311/serialNumber=5A1E2E398C306EF1DFF4C06EFCAAF6E34263B12A
Certificate serial: 345F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft
Manifest number: 3455
Signing time: Fri 31 Jan 2025 14:57:59 +0000
Manifest this update: Fri 31 Jan 2025 14:57:59 +0000
Manifest next update: Fri 07 Feb 2025 14:57:59 +0000
Files and hashes: 1: Wh4uOYwwbvHf9MBu_Kr240JjsSo.crl (hash: 2zXqYhvFpYPbzqFWXdOIqhWDd7uxQxREeRJFKdNcYGI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13407 (0x345f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A311/serialNumber=5A1E2E398C306EF1DFF4C06EFCAAF6E34263B12A
Validity
Not Before: Jan 31 14:57:59 2025 GMT
Not After : Feb 7 14:57:59 2025 GMT
Subject: CN=679ce4f7-7a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2d:9f:d3:54:bd:00:8b:59:1c:af:5d:0f:d6:
c4:cf:83:92:18:20:16:8a:ef:05:03:57:df:1b:4b:
e6:f4:ac:1d:00:05:40:b1:bd:75:e7:38:f4:dc:3e:
aa:b7:93:f1:64:0f:c5:d5:f8:83:ef:c2:53:1d:4e:
bd:2b:45:ea:bf:43:21:2a:af:e3:0b:f6:7c:0d:5a:
32:07:4e:b4:6d:a4:9b:3f:10:f7:0b:84:33:2b:05:
6c:16:1c:9c:b2:be:15:8a:da:eb:fd:67:3c:89:22:
55:e4:f9:5e:94:86:f1:c1:c8:2d:f9:46:bf:57:be:
e3:d7:97:85:ec:a5:8f:49:02:58:b1:df:7f:d3:dc:
5f:ee:6d:43:6e:4c:b8:0f:27:7e:cf:08:c2:49:b9:
b1:30:de:cd:35:1d:01:77:ec:fc:7f:74:0d:b6:e5:
41:58:01:07:a3:08:15:66:2b:54:64:96:f0:91:29:
c3:29:57:d0:b4:03:74:03:96:a4:f7:5b:7b:d0:ec:
89:3d:95:8e:b2:0e:a7:71:73:73:ce:5f:e6:41:80:
10:e4:b8:60:cd:96:37:38:43:a2:23:0d:75:8c:78:
de:4a:1c:15:60:59:c3:34:ff:37:3a:9d:96:2c:e9:
fc:be:55:1e:65:96:35:22:38:e6:44:34:0a:11:c0:
df:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5D:3E:F4:21:88:55:9C:13:D5:AD:D3:38:25:0A:FB:EC:F6:4C:E6
X509v3 Authority Key Identifier:
keyid:5A:1E:2E:39:8C:30:6E:F1:DF:F4:C0:6E:FC:AA:F6:E3:42:63:B1:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:93:65:1b:a9:b2:28:67:9c:8b:db:28:b2:b6:37:e6:4e:bb:
75:70:57:5c:ac:87:e4:7e:fd:32:ed:ce:12:f4:71:8c:c3:2e:
44:55:5d:1f:58:8b:82:37:5a:f2:aa:b1:8d:c0:e9:ab:fc:e1:
93:5a:ae:88:af:c5:76:1a:0c:d4:de:42:b8:b4:54:7b:83:c0:
35:4b:01:30:9f:4a:f4:19:77:89:68:1b:2e:f1:2d:40:2d:c5:
bb:b2:71:ff:eb:89:51:1f:c2:fb:24:c4:72:00:a1:f2:7a:10:
1f:47:0f:76:93:e2:e1:0b:b2:db:47:52:bb:3d:99:68:a7:c7:
a2:18:14:15:20:b1:23:0b:e0:b1:c0:07:42:ca:ea:50:25:f4:
ad:79:ad:2d:f1:fc:89:59:a6:6e:99:79:dc:57:9c:6a:5c:95:
d6:08:a9:94:92:3e:5a:ac:24:de:8f:ed:b6:2d:1f:80:72:fd:
3f:6c:94:ac:79:ea:f2:70:7c:c7:d9:c1:75:f0:a0:e7:73:69:
37:55:5e:a6:a5:82:4b:b8:a4:9e:08:4b:58:51:9f:93:3d:dd:
06:d8:8f:8a:78:1d:7e:3e:72:e7:e6:0e:7a:30:6f:21:5e:e4:
c8:73:c2:0c:84:67:66:66:cc:0f:e0:f3:cf:e5:49:6f:9d:64:
5f:08:f9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:49:36 2025 by rpki-client