Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
File: wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft (raw, json)
Hash identifier: bz68U5uJISHrODpGPQAXs+SviFnmF7ifXC62h14NFOI=
Subject key identifier: 11:AF:A5:6D:79:29:ED:E1:A7:E3:D2:56:69:88:B6:7B:5F:45:B7:F9
Authority key identifier: C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B
Certificate issuer: /CN=A91B0B65/serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B
Certificate serial: 10ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
Manifest number: 10D9
Signing time: Fri 31 Jan 2025 17:18:49 +0000
Manifest this update: Fri 31 Jan 2025 17:18:49 +0000
Manifest next update: Fri 07 Feb 2025 17:18:49 +0000
Files and hashes: 1: wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl (hash: qKXW5AFgDysVMHDrYuVnVFiLhSzk7pvFYw646AKMlBM=)
2: CA7A6F1A157C11E9BB547B7AC4F9AE02.roa (hash: tE2E6js3kYa62zkqmiLT/NNljtVICethnlU6hDIPGMU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4333 (0x10ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0B65/serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B
Validity
Not Before: Jan 31 17:18:49 2025 GMT
Not After : Feb 7 17:18:49 2025 GMT
Subject: CN=679d05f9-2634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:4a:b7:cc:77:f4:21:32:88:d3:21:2e:f0:
7c:c6:99:81:92:eb:49:d3:99:76:85:b9:0a:8b:74:
c6:8a:77:eb:fc:ed:3e:f4:72:04:32:34:12:1c:f6:
14:77:39:0a:59:a3:0c:7e:74:d4:b0:b8:49:1c:3b:
51:55:c5:c1:f2:98:33:c1:f4:2f:a3:86:17:f5:81:
cc:b5:b2:44:0b:2c:6c:ad:cb:d3:6f:b3:62:5f:05:
7e:47:40:f5:4b:56:76:dc:e4:e9:70:c6:ea:7a:34:
cb:77:28:4d:45:2b:42:9e:ad:70:64:f7:f3:a2:10:
51:2b:e2:cf:dd:82:71:44:58:42:cc:3b:6b:e7:86:
39:9a:84:ad:37:d2:ca:06:6c:11:6c:91:f1:e9:7e:
45:36:06:34:9e:e8:a5:f0:2e:ee:4f:24:de:fe:43:
be:9d:e3:1b:bd:b6:76:66:75:d7:eb:25:ad:57:ef:
a9:0b:66:ad:dc:12:25:e6:45:e5:a5:46:f5:69:89:
92:08:01:61:5c:34:3d:8d:52:b2:ab:e5:26:eb:ac:
0d:89:75:06:db:60:2d:bf:c3:4f:29:2d:f3:05:5d:
07:da:aa:14:f9:86:91:b4:e7:d3:d1:89:e5:6e:98:
ea:1a:59:4f:34:18:56:89:ea:79:76:ce:d7:af:69:
93:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AF:A5:6D:79:29:ED:E1:A7:E3:D2:56:69:88:B6:7B:5F:45:B7:F9
X509v3 Authority Key Identifier:
keyid:C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:94:d4:4d:1f:bc:85:be:5b:07:00:b4:bd:92:93:02:91:22:
c2:a7:33:62:68:b8:db:93:2c:c0:0b:64:d4:82:f2:17:85:0b:
ba:ac:ff:6a:d3:20:fb:9b:aa:8b:5d:36:0f:9c:2e:8e:ac:40:
0a:a2:c6:4c:08:56:25:a4:33:7b:f2:bf:7a:aa:02:2e:c0:6d:
80:fa:fc:46:a9:85:53:df:66:23:b7:39:c4:0f:65:0c:cc:37:
f7:34:69:f5:07:ec:a0:6f:5b:a3:06:3d:cb:f8:a8:40:98:99:
b8:2c:8d:9c:d8:a6:17:ce:80:6c:e8:12:f2:d6:a5:8d:8d:e4:
4f:3a:3f:08:e6:80:ff:08:2f:2c:ef:ca:30:e8:7e:ad:46:74:
66:e7:7a:c2:9f:12:24:84:a6:89:6e:e5:7a:40:bd:c3:be:e4:
ae:f4:41:6b:b0:94:9e:34:e0:1c:02:00:9d:e5:67:fd:47:ed:
a7:92:40:2f:3c:85:a6:d9:5f:5c:7e:d4:d2:f3:85:a6:ee:ea:
39:9d:dd:12:b8:e5:65:1e:a4:c7:f7:63:83:e1:3c:87:e0:09:
e0:19:06:82:3b:2c:f3:a2:48:59:fb:32:32:06:8c:59:0d:c3:
83:fd:b8:34:3f:b0:03:26:18:77:b6:6e:80:aa:f0:fa:d5:87:
32:29:64:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:36:52 2025 by rpki-client