Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
File: wG_wBd4dXvE7qPDCYOljA0paIso.mft (raw, json)
Hash identifier: wH0PmWig6tStW7BXAZXsUzeXe5MbYt4poWgyfV+EyLM=
Subject key identifier: 73:D9:5B:22:92:67:22:69:F2:DB:CE:7D:6C:98:29:8B:48:23:EA:19
Authority key identifier: C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA
Certificate issuer: /CN=A91A0C5F/serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA
Certificate serial: 0159
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
Manifest number: 0157
Signing time: Fri 31 Jan 2025 03:21:15 +0000
Manifest this update: Fri 31 Jan 2025 03:21:14 +0000
Manifest next update: Fri 07 Feb 2025 03:21:14 +0000
Files and hashes: 1: wG_wBd4dXvE7qPDCYOljA0paIso.crl (hash: iTHD4xTsAD4lVd6q4RI/fsAIy9vKDMNV/nGc6yKCzBI=)
2: 0D53ED80D2BA11ED8E06CC13C4F9AE02.roa (hash: S559gsIWXVd6S5Op4XFYguV0V2ZXge3n4rHa7okd57c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0C5F/serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA
Validity
Not Before: Jan 31 03:21:14 2025 GMT
Not After : Feb 7 03:21:14 2025 GMT
Subject: CN=679c41ab-a63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e0:03:0e:40:78:22:b4:ad:a3:63:7d:cf:fd:
c6:50:e1:07:41:5e:59:d9:52:e0:5a:be:cd:5e:44:
de:92:bc:93:f9:b3:69:f2:22:77:db:66:14:48:c7:
55:e2:21:ae:76:17:5a:57:7d:26:2b:84:e0:e4:5d:
5d:09:a3:94:9b:9a:c7:bb:b8:b8:90:82:79:7e:15:
7c:45:40:2c:fa:d8:65:18:4e:85:e2:7f:b2:26:bf:
5d:62:1f:7e:88:e0:56:07:29:67:91:1e:ed:91:80:
60:81:ef:ee:b8:c8:d3:b5:08:84:ec:0e:46:e1:ee:
b4:0f:bf:b4:f4:f7:6b:2d:ee:89:93:40:76:a1:4c:
df:d4:93:9b:de:6c:ce:79:82:5d:c1:89:df:c3:fb:
3d:d5:19:42:66:04:2f:87:f5:10:77:0c:40:7f:56:
8b:7e:66:d3:15:1f:ec:09:99:bf:9b:51:9e:eb:9b:
fd:82:d0:cf:b4:af:d9:15:7f:44:8a:e6:f1:2d:fa:
a0:b6:38:b3:ea:00:bc:37:73:57:ea:a1:fd:c4:63:
a9:d5:6d:2f:f5:13:18:3b:2f:c5:1a:af:8d:7e:ad:
22:47:3d:38:23:10:e2:43:d7:43:87:e3:20:11:c5:
4c:0b:4a:f9:3e:67:de:18:a4:82:77:6d:81:7e:04:
49:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D9:5B:22:92:67:22:69:F2:DB:CE:7D:6C:98:29:8B:48:23:EA:19
X509v3 Authority Key Identifier:
keyid:C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:9b:c8:5a:32:e2:72:27:88:da:c1:90:c7:b5:0f:0a:07:de:
95:37:f7:9c:85:b3:4b:1d:43:bc:4a:2d:bc:c8:13:3b:6a:31:
37:b7:4c:9b:63:ab:03:dc:61:4a:a7:3f:9c:2b:2e:46:76:d8:
02:e8:8d:dd:cb:46:73:06:4b:c8:7c:b4:e4:a0:c0:a1:89:f6:
80:94:58:ce:e1:af:92:fc:b2:30:cb:a4:b3:0f:46:f1:79:35:
25:cb:eb:cd:1c:54:4a:15:40:6f:31:30:1b:e2:b0:38:8a:b6:
b5:41:1d:d2:2d:00:55:9a:25:dc:85:2d:c2:b9:30:f7:85:13:
eb:ec:af:a3:f7:69:0c:2e:7e:98:15:ab:86:c2:f6:7a:9b:1a:
1b:29:72:59:21:22:e0:ee:8c:81:92:1f:d2:00:eb:51:37:06:
6c:2e:a1:c8:1c:ef:e1:a1:87:6c:45:2a:ae:e0:32:0c:3a:68:
47:2b:8f:c2:6f:7d:c6:28:c5:ee:2d:52:22:c3:92:ec:01:df:
4a:35:e8:bd:19:32:e3:5f:e1:e7:cf:e1:a7:d5:61:cf:16:48:
e3:7d:2b:f9:7d:2a:79:e5:78:3a:47:7a:2d:07:62:ae:8f:9f:
5a:b9:8b:2e:38:19:30:b7:35:87:d1:42:6b:12:35:ba:1d:a6:
71:4c:a2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:02:50 2025 by rpki-client