Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
File: _wsVRthMDZNVkFtsopPiW0QJSMU.mft (raw, json)
Hash identifier: 83CCgkjsC+vtxODBjnLxP57kvCw1m8N9f6zwJAmmla4=
Subject key identifier: 83:73:FB:2C:6D:CC:26:45:BA:4F:3B:BB:61:9F:E3:54:D1:88:40:DE
Authority key identifier: FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5
Certificate issuer: /CN=A9198F53/serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
Certificate serial: 0ADA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
Manifest number: 0AD3
Signing time: Thu 30 Jan 2025 19:25:18 +0000
Manifest this update: Thu 30 Jan 2025 19:25:18 +0000
Manifest next update: Thu 06 Feb 2025 19:25:18 +0000
Files and hashes: 1: _wsVRthMDZNVkFtsopPiW0QJSMU.crl (hash: 9yGuswmBKCLHXqFkP/dLhfzn59gdxRVKbOfhzynMGvI=)
2: 0B1FBD4A40F611EAACD44866C4F9AE02.roa (hash: O+1TVwNVO9fy4asd+g6mFvUYSSGMZxyCsanhKoUd1UE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2778 (0xada)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198F53/serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
Validity
Not Before: Jan 30 19:25:18 2025 GMT
Not After : Feb 6 19:25:18 2025 GMT
Subject: CN=679bd21e-68f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:48:be:01:97:a0:79:27:7a:f4:d4:35:98:
03:1c:e1:43:a8:74:a5:b5:8e:87:6f:47:5e:a8:b7:
91:4b:d1:c5:18:eb:35:a5:8d:57:9d:dd:cd:55:ee:
8d:5d:0d:19:89:5e:aa:37:7c:1f:0f:c5:fa:5b:ea:
45:48:80:d4:f3:74:87:de:25:cb:3a:26:fb:94:df:
65:7c:2b:7f:24:97:5a:20:78:d4:b0:09:82:32:80:
64:17:2d:be:a2:56:d9:61:15:db:68:c6:55:6f:b0:
63:ae:91:7b:3f:15:88:c8:59:8b:b9:5f:80:c1:d2:
42:c3:fb:99:5b:53:5c:68:3d:3e:81:b4:a7:20:56:
7a:e1:fb:51:43:9e:d2:ea:28:31:00:54:13:ce:dd:
cb:82:ab:47:e8:b0:af:f7:dc:7b:8e:9f:04:32:c7:
cd:f8:ea:35:68:11:09:b5:12:c2:f6:ad:dc:d9:30:
a4:c2:98:8a:85:02:60:0b:65:e5:b4:86:6d:fa:cb:
3c:fc:39:c7:57:fe:69:41:40:75:d3:00:06:f8:37:
86:68:99:4a:fe:ee:55:b8:7a:72:9d:2b:c1:f8:25:
58:81:24:fa:c8:99:6a:6c:55:9d:be:d2:9a:4f:94:
bb:68:63:91:1c:57:97:b6:3a:37:17:69:dc:25:f6:
d3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:73:FB:2C:6D:CC:26:45:BA:4F:3B:BB:61:9F:E3:54:D1:88:40:DE
X509v3 Authority Key Identifier:
keyid:FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:83:81:be:36:83:43:f4:36:5b:42:fe:ed:ca:ef:a7:e5:82:
f6:e7:12:f6:28:fc:57:1d:4d:a0:19:58:cb:ab:ac:30:43:be:
e5:f2:b1:11:a6:b9:ac:90:14:ba:e1:35:3a:69:df:8d:d2:6a:
30:19:d7:ec:d0:24:0f:c1:6a:09:0e:00:76:ca:40:39:ac:83:
22:78:9e:01:f3:95:b4:c0:6b:74:f4:16:69:d2:f3:8d:e3:18:
81:c7:c8:f4:9d:a0:b1:d1:fb:45:13:ee:6e:17:01:a1:ee:1a:
3a:65:ff:c4:2c:37:dd:2c:06:49:85:32:b0:a7:01:17:dd:9e:
83:91:0f:79:42:f8:b0:1c:8e:c2:9e:12:5e:91:0c:ec:27:c0:
52:f7:55:57:06:61:e6:a1:94:48:25:f7:d8:15:aa:4f:a5:a4:
9a:56:62:80:2b:6c:ec:5d:e2:14:0f:3f:a1:fb:8a:c5:79:ed:
4b:f5:3a:e8:fb:ff:87:8e:d7:20:cd:7a:0b:0f:f5:4a:f3:43:
f0:07:20:d9:f8:ac:c8:b3:7f:61:d1:a6:a5:99:5b:07:c5:b1:
fe:63:a3:50:6a:a0:c6:da:45:f0:f8:62:e0:d2:55:67:4f:95:
a3:b4:de:84:e4:a5:fc:1b:e2:66:9a:a0:78:4e:83:bc:d7:e8:
ba:8d:65:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:14:32 2025 by rpki-client