Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
File: wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft (raw, json)
Hash identifier: 78x0uRxmLu6TvuT6qZzwihGOUJNz+zmeqLiTWsxANcA=
Subject key identifier: 7A:C6:2C:D5:70:F3:A4:C3:83:8E:4B:D7:47:17:3F:95:40:CE:EB:BA
Authority key identifier: C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED
Certificate issuer: /CN=A91AA618/serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED
Certificate serial: 19
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
Manifest number: 18
Signing time: Fri 31 Jan 2025 05:56:33 +0000
Manifest this update: Fri 31 Jan 2025 05:56:32 +0000
Manifest next update: Fri 07 Feb 2025 05:56:32 +0000
Files and hashes: 1: wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl (hash: Iyho+0sKYHp5JmHVrJTTlAZr0ZjtlIDGMZO/GiXSPDI=)
2: C20F79C4BEC711EFB3955851C4F9AE02.roa (hash: VTGuDVySoTaiWxAbdd/1KW1PWx6PDU5QdYkfoW8ucbc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA618/serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED
Validity
Not Before: Jan 31 05:56:32 2025 GMT
Not After : Feb 7 05:56:32 2025 GMT
Subject: CN=679c6611-6eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2e:22:57:0a:89:f4:11:45:66:bc:0e:b0:d5:
c1:7f:39:42:c7:52:8a:6a:55:a0:a6:61:53:7a:54:
01:26:c6:f8:88:e6:62:0c:ca:21:b9:60:7b:1e:1b:
b4:fd:6e:b2:08:cd:78:0a:b4:74:69:95:cc:35:3e:
ce:86:72:79:6f:78:4c:e2:5c:38:b6:15:95:07:0c:
a0:5a:03:d3:f2:e1:36:1c:ea:76:3f:27:cd:da:a5:
1d:06:66:fc:ac:63:f3:31:4c:b9:7c:fa:40:f3:64:
b6:73:1d:26:54:4f:23:86:b9:b4:6a:7f:f8:f7:e8:
50:da:15:ab:75:d2:07:5d:c1:fa:4c:3c:37:3e:ed:
34:63:04:ad:25:28:ac:8b:6f:0f:9f:2e:48:f0:fa:
d0:66:56:6d:df:d4:d3:f3:3b:72:6d:09:ac:fc:f2:
84:17:49:28:ce:c0:0b:0d:3b:17:b4:0c:6e:c5:20:
3c:da:b7:8f:c7:a4:a0:76:cb:36:15:26:50:7e:26:
65:59:cd:df:12:c4:26:c8:df:a0:4d:26:af:fa:14:
0b:3c:50:2f:39:dd:9d:46:50:e3:d9:1d:af:8d:f1:
80:6b:22:77:d9:26:39:91:29:9d:bd:23:ea:1d:a0:
2a:ec:01:4b:97:d5:91:0f:06:c5:64:98:42:b7:e7:
76:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C6:2C:D5:70:F3:A4:C3:83:8E:4B:D7:47:17:3F:95:40:CE:EB:BA
X509v3 Authority Key Identifier:
keyid:C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:d0:0a:32:0c:6b:9f:42:2c:83:df:a3:e2:4b:e9:cf:f6:90:
20:20:53:be:38:fb:f6:ab:9f:96:b2:fe:a0:b4:0b:fd:fc:48:
b6:ba:2b:19:82:85:92:d6:4e:db:ad:dc:6d:ab:26:7f:ef:b0:
dc:b0:4e:15:2a:d0:a0:73:1e:9f:b4:c0:03:68:2c:39:8d:f4:
46:6d:2e:44:08:64:d5:e5:d5:19:92:67:14:c9:89:87:ff:2d:
62:53:fd:df:63:2b:d2:f7:23:48:04:e6:27:7b:a7:e1:3c:ec:
84:a2:2c:2f:cf:5a:a1:82:24:80:e5:5c:02:64:7e:ec:f6:38:
c0:51:54:f0:21:bb:d6:bb:5e:ba:07:62:ae:de:3d:9d:ae:7d:
07:98:da:d4:e3:01:f0:cd:e0:9b:b4:96:8a:c8:99:0c:d2:07:
67:f8:0e:94:d9:e3:3b:5e:2b:28:07:e2:19:b1:df:ec:2d:ec:
07:72:d4:28:f5:cf:c1:50:09:77:90:97:24:80:30:07:79:9d:
88:8d:1c:ff:a5:96:b4:45:23:62:60:03:3f:75:a4:b1:29:08:
c1:55:af:75:88:48:a9:11:53:55:10:6b:3b:55:72:72:19:f8:
5c:8b:eb:2e:7d:bd:ca:ef:36:ac:7b:5f:61:0e:a9:34:43:04:
e4:1c:e3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:11:46 2025 by rpki-client