Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
File: s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft (raw, json)
Hash identifier: BiH4gIqRmQA8z7H/A9zMzlH5mZUrBtsx347ElNTW0V0=
Subject key identifier: 0F:80:D0:F3:DE:40:18:84:79:E3:82:EF:9D:EB:B3:71:02:26:0E:91
Authority key identifier: B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8
Certificate issuer: /CN=A91A381A/serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
Certificate serial: EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
Manifest number: EB
Signing time: Fri 31 Jan 2025 04:29:53 +0000
Manifest this update: Fri 31 Jan 2025 04:29:53 +0000
Manifest next update: Fri 07 Feb 2025 04:29:53 +0000
Files and hashes: 1: s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl (hash: eVpZv/Is0FTAjr99SyS9rFyvOjGTYQGN5ys/uKhxDL8=)
2: EBB7A41AB4DA11EEBD650259C4F9AE02.roa (hash: l8sRE2YAPh1eQYlp9y5e6VCbUFJp+lvUI5lEd97/izs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A381A/serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
Validity
Not Before: Jan 31 04:29:53 2025 GMT
Not After : Feb 7 04:29:53 2025 GMT
Subject: CN=679c51c1-9e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:96:cb:73:65:ef:d7:5d:95:c4:ca:c0:55:00:
00:a9:11:ac:dc:03:fb:6e:c8:c5:cb:92:6e:fb:ee:
8f:92:75:a0:47:32:0b:6c:e8:bc:fb:a9:cb:92:b7:
a4:05:0c:2c:2e:97:3d:8d:03:9a:44:85:aa:80:20:
a6:46:7a:e7:3f:de:ee:db:81:b6:fd:7f:2b:e4:1f:
37:4c:81:8a:65:bc:c0:1f:55:f5:36:4a:b1:53:93:
33:cc:34:3f:91:87:2b:6c:0e:4f:e8:98:d4:5d:a8:
e7:ad:e5:99:3f:86:5a:40:35:ac:75:b1:64:fc:12:
34:4c:40:3d:9e:b1:5e:67:ff:be:f8:7d:aa:f0:2c:
df:9a:25:17:f6:a0:f7:76:5a:54:6d:0b:a9:3c:01:
37:9d:4d:40:44:08:27:b0:fc:1f:b8:fc:74:70:8d:
a7:01:e4:92:dc:df:cb:d1:e0:32:5e:08:b7:b9:d2:
ec:54:87:72:bd:2a:cc:9c:c7:33:d3:f4:60:67:fc:
f7:f6:d8:cd:fe:4d:ce:2b:31:4d:9b:66:46:1c:54:
02:98:c0:b1:16:33:b0:c1:41:7a:b6:d2:78:95:99:
b0:4b:22:99:01:d8:a8:1e:ae:a9:cd:30:86:98:65:
29:fe:44:31:26:8b:e2:ef:25:c3:3d:9b:21:cb:31:
78:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:80:D0:F3:DE:40:18:84:79:E3:82:EF:9D:EB:B3:71:02:26:0E:91
X509v3 Authority Key Identifier:
keyid:B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ac:2c:38:1c:88:68:54:e2:2d:08:3e:fc:27:81:46:01:84:
8f:31:73:db:03:94:13:b5:06:72:8e:0a:66:2d:6b:bf:b6:18:
30:b6:f1:4f:19:59:5b:98:e7:0c:7f:1b:ff:82:56:a4:d8:69:
f0:68:25:df:1f:18:43:f4:55:15:4b:48:60:4f:6e:e6:bf:61:
f8:32:48:4d:49:33:43:a7:e5:94:08:9c:69:82:ae:b5:1c:f1:
6a:48:fb:5f:78:ff:d5:81:0c:aa:84:88:5e:01:cf:60:71:aa:
96:4b:8e:72:f8:26:c0:97:54:5c:00:f0:60:c0:55:ad:39:77:
32:1c:21:19:2d:85:af:6a:bc:8f:90:50:e6:f3:bf:22:4b:8c:
88:81:e6:0a:89:39:9e:87:58:f0:0d:49:7c:3b:67:81:c6:75:
3c:35:fa:c5:4d:61:eb:bd:03:e0:b9:61:29:69:9e:f1:20:ab:
1f:69:8d:61:9e:52:db:5f:c5:51:2d:d4:6b:a7:7e:05:ff:7a:
11:46:39:5d:52:a4:29:8d:e3:b4:1d:58:50:6b:e9:41:70:0b:
d3:b0:6d:2a:82:ef:95:55:41:9c:f8:97:b9:26:85:d9:1b:3d:
34:40:9e:cd:2e:c0:9f:78:e7:e3:06:25:8d:7b:6c:e9:cc:22:
97:44:03:b9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTM4MUExMTAvBgNVBAUTKEIzRUMxRkY2QUQ1NTJBQTE2RUUxMDE5NTY0QkFEOUY3
NjFGREI1RDgwHhcNMjUwMTMxMDQyOTUzWhcNMjUwMjA3MDQyOTUzWjAYMRYwFAYD
VQQDEw02NzljNTFjMS05ZTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoJbLc2Xv112VxMrAVQAAqRGs3AP7bsjFy5Ju++6PknWgRzILbOi8+6nLkrek
BQwsLpc9jQOaRIWqgCCmRnrnP97u24G2/X8r5B83TIGKZbzAH1X1NkqxU5MzzDQ/
kYcrbA5P6JjUXajnreWZP4ZaQDWsdbFk/BI0TEA9nrFeZ/+++H2q8CzfmiUX9qD3
dlpUbQupPAE3nU1ARAgnsPwfuPx0cI2nAeSS3N/L0eAyXgi3udLsVIdyvSrMnMcz
0/RgZ/z39tjN/k3OKzFNm2ZGHFQCmMCxFjOwwUF6ttJ4lZmwSyKZAdioHq6pzTCG
mGUp/kQxJovi7yXDPZshyzF4sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+A0PPe
QBiEeeOC753rs3ECJg6RMB8GA1UdIwQYMBaAFLPsH/atVSqhbuEBlWS62fdh/bXY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzgxQS8yOEU4NkU0NDc5
RkYxMUVFQjMyQzIzNzlDNEY5QUUwMi9zLXdmOXExVktxRnU0UUdWWkxyWjkySDl0
ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Mtd2Y5cTFWS3FGdTRRR1ZaTHJaOTJIOXRkZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MzgxQS8yOEU4NkU0NDc5RkYxMUVFQjMyQzIzNzlDNEY5QUUwMi9zLXdmOXExVktx
RnU0UUdWWkxyWjkySDl0ZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB8rCw4HIhoVOItCD78J4FGAYSPMXPbA5QTtQZyjgpmLWu/thgwtvFP
GVlbmOcMfxv/glak2GnwaCXfHxhD9FUVS0hgT27mv2H4MkhNSTNDp+WUCJxpgq61
HPFqSPtfeP/VgQyqhIheAc9gcaqWS45y+CbAl1RcAPBgwFWtOXcyHCEZLYWvaryP
kFDm878iS4yIgeYKiTmeh1jwDUl8O2eBxnU8NfrFTWHrvQPguWEpaZ7xIKsfaY1h
nlLbX8VRLdRrp34F/3oRRjldUqQpjeO0HVhQa+lBcAvTsG0qgu+VVUGc+Je5JoXZ
Gz00QJ7NLsCfeOfjBiWNe2zpzCKXRAO5
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:08:23 2025 by rpki-client