Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
File: WKmVh9VjjYaIwliQx4QfMlG0ltc.mft (raw, json)
Hash identifier: KDUqcJatMuQoV0M2YuSzX9eXQUHqZpB6kCAxC6gWel0=
Subject key identifier: 9A:D3:6F:0C:BC:B2:5D:3A:7C:B1:1E:9F:30:41:F2:D9:50:0D:9D:1D
Authority key identifier: 58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7
Certificate issuer: /CN=A91AB740/serialNumber=58A99587D5638D8688C25890C7841F3251B496D7
Certificate serial: 067D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
Manifest number: 2C5D
Signing time: Fri 31 Jan 2025 15:44:11 +0000
Manifest this update: Fri 31 Jan 2025 15:44:11 +0000
Manifest next update: Fri 07 Feb 2025 15:44:11 +0000
Files and hashes: 1: WKmVh9VjjYaIwliQx4QfMlG0ltc.crl (hash: oqvuAZM7iuwY5+kO7HU6eiOTBrsYRpcPTi0YNpQpn+M=)
2: 182057F63ACE11EC8987F871C4F9AE02.roa (hash: cju0VYTCW5l5cCttT6iUNk+nPOjz7EuL15pDsjAAXc4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1661 (0x67d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB740/serialNumber=58A99587D5638D8688C25890C7841F3251B496D7
Validity
Not Before: Jan 31 15:44:11 2025 GMT
Not After : Feb 7 15:44:11 2025 GMT
Subject: CN=679cefcb-0531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:e0:c6:0f:3d:56:99:2d:aa:fe:97:dd:ce:
51:c3:cd:af:9d:19:15:01:f9:31:b6:65:c9:e8:6c:
e1:53:a6:3d:f6:88:7c:ba:93:f1:2f:1e:10:93:c5:
97:b2:d7:f6:9e:32:07:21:eb:6a:ea:7e:e7:b3:db:
2c:2a:cb:38:e1:17:09:e3:90:f7:23:d0:2a:f0:23:
82:03:0b:72:7d:47:0d:1c:1d:67:ca:1d:ef:26:d8:
fa:53:d8:f2:56:9d:c8:5f:43:1c:70:28:9c:20:4e:
df:ae:21:4b:43:95:50:c3:d3:9a:b4:b3:c7:60:63:
b4:82:48:39:9f:35:08:d8:e3:30:c7:5f:2b:9a:a8:
77:62:65:16:29:f0:c6:ad:93:35:6d:e6:3f:3c:1c:
70:6e:2f:d1:f1:a7:5f:72:0f:21:97:52:80:e1:3e:
05:83:ad:c7:7b:11:a0:dc:06:f0:e6:b8:76:16:74:
6d:f7:b7:36:ce:81:7e:b2:20:d1:d5:67:6f:3b:86:
3e:e8:07:88:ef:1b:00:41:3b:09:a4:07:de:95:6b:
7b:6e:1c:08:fe:f9:8a:82:d8:ff:32:d3:06:d9:a2:
e9:e9:31:c3:d0:3b:13:f5:89:45:0a:4a:99:81:3c:
d3:a7:20:46:65:54:1a:bd:60:b6:e2:6d:5f:68:0b:
8e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D3:6F:0C:BC:B2:5D:3A:7C:B1:1E:9F:30:41:F2:D9:50:0D:9D:1D
X509v3 Authority Key Identifier:
keyid:58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:4a:a2:81:1a:b7:25:c5:2e:8b:00:67:2f:b9:19:1e:36:46:
11:85:df:3f:43:21:56:79:df:d2:66:fd:06:91:a3:87:70:25:
f0:08:91:10:f0:b1:b7:e1:3e:a5:e8:17:76:4b:12:fd:bd:6e:
4a:23:14:5c:15:c7:5b:26:2f:84:8d:c6:0b:6c:fb:5f:6f:6f:
a5:0b:a5:17:67:5f:ec:99:3e:8d:b5:9e:bb:6f:09:9d:6f:bf:
86:52:58:cd:e8:e9:5a:94:4d:21:e4:08:94:9f:6a:3d:f5:dd:
9e:b8:09:73:72:22:65:c3:7a:29:d3:f2:0f:e9:a9:b0:1a:4c:
e0:5d:4c:e8:a0:4f:7a:ac:02:89:e2:af:4e:9b:2e:66:0c:c8:
8b:c8:24:7d:50:15:dd:7a:ce:cd:24:87:ac:36:0c:4d:a2:9a:
25:c5:2e:a2:74:ed:dd:dd:53:27:8b:7f:cd:7a:6f:be:8d:31:
48:2e:36:c5:8d:52:44:9f:6d:f9:a5:fb:44:a1:38:dd:dc:26:
b5:cc:c1:7f:a5:6b:4c:81:f6:f9:0e:8d:0f:cd:dd:0b:af:0f:
57:07:20:fc:76:77:c3:82:ab:86:e6:44:9c:64:38:2f:59:75:
b9:ff:85:ad:b5:f7:e1:45:6a:1f:2e:ba:e0:4a:80:8e:07:b9:
e0:a4:0c:dd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUI3NDAxMTAvBgNVBAUTKDU4QTk5NTg3RDU2MzhEODY4OEMyNTg5MEM3ODQxRjMy
NTFCNDk2RDcwHhcNMjUwMTMxMTU0NDExWhcNMjUwMjA3MTU0NDExWjAYMRYwFAYD
VQQDEw02NzljZWZjYi0wNTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsa7gxg89Vpktqv6X3c5Rw82vnRkVAfkxtmXJ6GzhU6Y99oh8upPxLx4Qk8WX
stf2njIHIetq6n7ns9ssKss44RcJ45D3I9Aq8COCAwtyfUcNHB1nyh3vJtj6U9jy
Vp3IX0MccCicIE7friFLQ5VQw9OatLPHYGO0gkg5nzUI2OMwx18rmqh3YmUWKfDG
rZM1beY/PBxwbi/R8adfcg8hl1KA4T4Fg63HexGg3Abw5rh2FnRt97c2zoF+siDR
1WdvO4Y+6AeI7xsAQTsJpAfelWt7bhwI/vmKgtj/MtMG2aLp6THD0DsT9YlFCkqZ
gTzTpyBGZVQavWC24m1faAuOUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrTbwy8
sl06fLEenzBB8tlQDZ0dMB8GA1UdIwQYMBaAFFiplYfVY42GiMJYkMeEHzJRtJbX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjc0MC82RTVBQzQ1NEZE
MkIxMUU0QkI5MzlCNDNDNEY5QUUwMi9XS21WaDlWampZYUl3bGlReDRRZk1sRzBs
dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dLbVZoOVZqallhSXdsaVF4NFFmTWxHMGx0Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Qjc0MC82RTVBQzQ1NEZEMkIxMUU0QkI5MzlCNDNDNEY5QUUwMi9XS21WaDlWampZ
YUl3bGlReDRRZk1sRzBsdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZSqKBGrclxS6LAGcvuRkeNkYRhd8/QyFWed/SZv0GkaOHcCXwCJEQ
8LG34T6l6Bd2SxL9vW5KIxRcFcdbJi+EjcYLbPtfb2+lC6UXZ1/smT6NtZ67bwmd
b7+GUljN6OlalE0h5AiUn2o99d2euAlzciJlw3op0/IP6amwGkzgXUzooE96rAKJ
4q9Omy5mDMiLyCR9UBXdes7NJIesNgxNopolxS6idO3d3VMni3/Nem++jTFILjbF
jVJEn235pftEoTjd3Ca1zMF/pWtMgfb5Do0Pzd0Lrw9XByD8dnfDgquG5kScZDgv
WXW5/4WttffhRWofLrrgSoCOB7ngpAzd
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:29:49 2025 by rpki-client