Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft
File: WCfkvYcCd-3w6xBWOptBweS-fIE.mft (raw, json)
Hash identifier: aave7beHmNNG0Uc5nrjKAzWQ8pDDVP7xnsKFzVqQjuo=
Subject key identifier: 59:74:D3:E7:48:DE:16:51:48:61:B5:12:36:6E:B3:BE:50:56:5F:00
Authority key identifier: 58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81
Certificate issuer: /CN=A91A7D85/serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81
Certificate serial: 0B30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft
Manifest number: 0B1B
Signing time: Thu 30 Jan 2025 19:17:22 +0000
Manifest this update: Thu 30 Jan 2025 19:17:22 +0000
Manifest next update: Thu 06 Feb 2025 19:17:22 +0000
Files and hashes: 1: WCfkvYcCd-3w6xBWOptBweS-fIE.crl (hash: pVfpqDvN37D0xyZ+IUJq1mO48slHvqXbUly9rla+0tw=)
2: D8FCAB6C750611EFAE4AA240C4F9AE02.roa (hash: BNtUgizLuW7VE24IioUopOhcnv7kySphvSn8ooQaevk=)
3: 4CDACDE4623711EA981B4B0DC4F9AE02.roa (hash: E4bzrx7poQwdk1jQHWl7doZB/UzexRVv4xP96OZmdAY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2864 (0xb30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7D85/serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81
Validity
Not Before: Jan 30 19:17:22 2025 GMT
Not After : Feb 6 19:17:22 2025 GMT
Subject: CN=679bd042-916e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:8d:a4:80:da:8f:92:b8:d6:41:93:a5:5b:
32:a5:5c:7a:53:fc:cb:6f:ed:d3:56:e4:68:6a:2a:
9a:ac:03:bd:7e:45:a5:4a:8f:5b:56:4e:fc:ab:b6:
f5:72:a2:cb:03:ae:2f:01:10:e3:a2:11:b3:0b:3b:
6c:c5:76:18:9e:14:90:89:80:0e:20:67:36:aa:5c:
89:48:06:31:ab:48:76:e9:de:32:1c:00:3a:19:8c:
49:86:fa:af:27:4d:7d:c4:22:04:c9:f8:3d:09:4d:
93:44:bc:fa:70:7b:3d:25:4e:c8:76:6c:40:46:dd:
27:76:7e:e0:c2:58:71:01:d3:cb:ae:05:3f:90:ae:
d1:f7:2f:65:57:f6:44:de:62:cd:da:0f:50:7d:35:
22:38:73:5f:83:65:38:95:53:66:35:10:3d:53:01:
66:db:3f:85:e3:2e:ea:80:17:d9:d3:e0:db:5a:23:
01:d2:f9:7c:6c:38:d2:8b:3c:35:44:ca:67:ca:16:
3c:0e:4c:23:11:cd:66:bc:a8:8b:2a:d3:d6:84:c8:
85:3d:30:b0:91:8c:70:5e:bb:76:bd:f7:d5:45:43:
0a:7e:a6:36:e5:30:a0:39:61:ed:46:6e:67:8c:5e:
3b:ff:04:86:cc:45:a6:06:77:dd:62:a1:36:a0:e7:
4d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:74:D3:E7:48:DE:16:51:48:61:B5:12:36:6E:B3:BE:50:56:5F:00
X509v3 Authority Key Identifier:
keyid:58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:eb:8b:f3:3f:22:55:a5:e9:27:0c:6a:9d:2e:b5:c3:2e:c0:
da:e1:9d:ef:b5:61:b5:64:89:d9:ee:27:d6:39:df:d6:71:50:
a7:80:64:16:a4:05:ef:63:d2:43:60:d4:8e:34:6c:83:6f:eb:
e9:a0:a5:dd:f6:64:b3:80:48:8a:01:eb:d2:d3:9a:4b:53:9f:
2f:93:c7:e4:9e:0b:b1:9b:54:04:61:78:2e:9d:df:e4:26:38:
9a:5d:9b:25:c6:89:bb:41:f6:37:f2:d0:0f:2a:3b:e5:32:a4:
51:08:4b:64:3f:99:f5:a6:bd:d0:d9:50:89:e2:9d:1e:4f:04:
d8:c7:a8:f4:d5:a7:0e:53:7f:db:a7:dd:1d:46:66:25:e5:07:
a3:32:9f:d0:51:a8:d3:08:ca:fc:ea:8d:ee:84:9b:30:3d:5a:
09:36:b5:d6:37:a9:bd:9b:df:ff:e6:35:66:87:46:5e:81:ae:
4a:2e:62:ab:4f:06:65:d9:d2:c8:3a:a9:95:ae:fc:12:36:0f:
d3:7c:8c:47:58:0f:10:e2:64:e8:ed:a0:8a:00:7f:58:7e:00:
41:e7:6e:76:8f:8e:2e:fb:e2:3e:5d:f0:d7:ce:7e:8e:70:92:
a2:5f:14:a6:c3:cf:46:c2:23:c8:07:68:13:e8:8a:f6:d2:11:
63:0f:eb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:16 2025 by rpki-client