Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft
File: wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft (raw, json)
Hash identifier: beDfrx/llUZaORi+GUg5DJ/q9L21npHIc11c4yG6X5w=
Subject key identifier: F5:98:1D:ED:84:2B:DB:B2:A0:A1:A9:30:33:5F:95:A8:85:41:4B:B5
Authority key identifier: C1:CB:08:AD:3E:B8:66:D3:CD:64:7C:13:5D:0F:52:FA:ED:25:46:C4
Certificate issuer: /CN=A91B0BA1/serialNumber=C1CB08AD3EB866D3CD647C135D0F52FAED2546C4
Certificate serial: 012C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft
Manifest number: 012A
Signing time: Fri 31 Jan 2025 03:45:03 +0000
Manifest this update: Fri 31 Jan 2025 03:45:03 +0000
Manifest next update: Fri 07 Feb 2025 03:45:03 +0000
Files and hashes: 1: wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl (hash: Ql4QxN/pr0oF3O/Gv916aAMb5AyznVter9DBNMCQs9s=)
2: 8839CA50174911EEB005A134C4F9AE02.roa (hash: 87jyq80/7TFEo0ZjtNAlfKQCEGSGhXKCvcBSYItfaWs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0BA1/serialNumber=C1CB08AD3EB866D3CD647C135D0F52FAED2546C4
Validity
Not Before: Jan 31 03:45:03 2025 GMT
Not After : Feb 7 03:45:03 2025 GMT
Subject: CN=679c473f-bd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:65:02:6f:c7:7d:19:4c:ff:b4:2b:1c:9e:
1c:52:98:73:e6:e7:b9:c2:f9:8b:9c:a0:9b:23:08:
2d:83:04:f6:61:98:79:9c:05:9c:25:60:69:0c:b7:
0c:0f:ae:09:a9:c1:6a:5d:c5:54:33:11:99:77:e3:
b0:15:15:f7:dc:98:d8:b9:e2:e5:72:1f:0a:04:8a:
40:20:35:cf:25:80:4d:98:2c:ba:2d:d9:74:4d:e1:
df:70:6e:cc:01:c6:d6:86:bf:56:f3:d8:b8:4d:bb:
f0:38:06:41:91:f0:db:74:41:5b:79:0e:c0:9b:40:
0f:5d:49:e8:c6:52:22:c4:c8:7d:9d:ce:5d:5b:39:
d9:34:30:8b:63:d9:7e:37:cb:3e:34:15:a0:61:03:
d4:d6:03:de:c2:db:3a:57:91:f3:ad:72:87:05:36:
00:3c:fa:fb:7e:b5:bb:7a:02:69:2f:c3:f4:6c:cf:
06:67:37:1a:23:fe:11:f9:6f:52:88:c1:36:5b:1c:
81:fb:c0:1d:8f:ed:62:3d:5a:d8:00:d4:6e:75:20:
4e:7e:35:e7:15:d5:35:37:95:91:da:c4:9e:ee:0e:
e6:be:2c:7d:83:70:1a:a2:3f:88:73:ea:16:38:c3:
67:c2:5e:f2:4d:6e:2f:ab:56:76:05:27:04:05:21:
f3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:98:1D:ED:84:2B:DB:B2:A0:A1:A9:30:33:5F:95:A8:85:41:4B:B5
X509v3 Authority Key Identifier:
keyid:C1:CB:08:AD:3E:B8:66:D3:CD:64:7C:13:5D:0F:52:FA:ED:25:46:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:d6:38:50:eb:95:2a:3f:97:1b:75:db:c3:13:3c:ee:d2:da:
5b:51:16:9a:c4:1b:0f:dd:6c:a3:b8:93:74:e5:99:32:60:59:
75:a8:51:e6:3a:78:63:a5:7a:de:f8:34:8a:67:1e:e3:00:ef:
1b:d9:35:ee:0b:f5:02:a4:b2:b2:c9:34:71:6a:ef:7d:da:c1:
00:ca:81:ce:73:e7:1e:59:a9:e5:f0:25:b1:ee:b1:ef:62:1c:
a8:93:85:e0:e3:fd:67:13:3d:09:64:fa:70:bc:7c:c1:f4:1e:
65:71:50:5c:72:3a:49:8d:08:22:ad:bd:b6:c3:39:74:5a:2d:
1a:7f:49:fe:e8:42:4c:2f:bc:79:1d:6d:fe:64:d5:f7:34:48:
09:35:ce:17:fa:a5:6d:00:2c:2c:b3:d1:d8:e3:73:36:5b:0b:
3e:09:32:99:c2:7c:dd:7a:ab:a8:c9:29:c4:83:24:9d:80:e7:
6d:20:97:e4:b3:ff:f7:a9:73:22:cf:d5:b6:3a:b8:f5:f2:29:
5e:96:e3:8f:41:23:23:42:e2:a6:da:8f:7f:8b:56:6e:2c:de:
6a:a0:f1:f3:b3:74:44:30:fe:63:16:29:9c:38:65:83:41:e0:
14:8a:5c:41:a1:ed:7c:17:b1:a8:57:b0:68:39:ea:91:f8:c6:
14:cc:c5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:06 2025 by rpki-client