Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
File: WaZHKO4B1q40_newHohZyCCX5X8.mft (raw, json)
Hash identifier: TJJyFKidiLh2TBE/jsNmWySnMnF+W1S4xOLNOz+6YLg=
Subject key identifier: 6A:A5:71:AA:1A:E7:2B:47:CA:E1:3B:E0:17:25:79:03:AA:D2:9B:B8
Authority key identifier: 59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F
Certificate issuer: /CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F
Certificate serial: 211E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
Manifest number: 2105
Signing time: Fri 31 Jan 2025 15:56:32 +0000
Manifest this update: Fri 31 Jan 2025 15:56:32 +0000
Manifest next update: Fri 07 Feb 2025 15:56:32 +0000
Files and hashes: 1: WaZHKO4B1q40_newHohZyCCX5X8.crl (hash: Sz3Vw7kqP2rCGalm3NAFq8I2GXTBBm/YiLVH1OHH0FU=)
2: 9B1ABC54486111E8AA9B1B45C4F9AE02.roa (hash: s53j2skJsnDb4ejjn3tNze/p8sESg8UDFgbdXAnasB4=)
3: 431D19069E8211EAAD86AC51C4F9AE02.roa (hash: P4AZv++I8EWWlQck4s2dxs4RaVdYX4EVzJLdNjcAR5E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8478 (0x211e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F
Validity
Not Before: Jan 31 15:56:32 2025 GMT
Not After : Feb 7 15:56:32 2025 GMT
Subject: CN=679cf2b0-d6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:12:d1:f6:67:aa:49:5d:e6:8f:21:c8:0f:df:
6e:2e:02:29:4b:e6:54:0d:c1:25:c4:23:6d:42:5e:
74:a7:00:4d:8e:15:5c:79:37:72:62:59:3d:55:87:
2e:25:8b:7b:e0:ed:ae:e0:82:c5:af:85:8c:75:82:
59:72:b3:e2:94:6c:2d:67:9a:8b:d5:57:71:52:b4:
07:dc:99:0c:ef:f9:51:e5:e5:72:df:6f:0a:33:0b:
b7:92:ff:fb:87:5d:f6:47:9e:19:29:46:c2:06:83:
c6:f9:de:92:e7:bf:32:ce:9a:d7:88:97:77:bb:68:
83:60:7f:0f:f4:a9:53:70:69:91:e3:c9:e9:28:71:
80:0f:ba:c8:13:66:6d:54:78:65:4a:09:b2:a3:97:
12:e5:a5:e7:43:86:fa:5d:87:bc:4a:0e:a1:e7:3d:
e0:b7:a5:67:81:f4:66:80:84:92:d9:4d:25:cb:0a:
fc:51:15:51:6e:a9:24:29:ef:52:d5:e1:2e:46:fa:
89:78:90:ad:31:e7:46:87:91:f0:28:c6:00:dd:a6:
5f:08:97:a8:3d:f4:76:45:c1:fb:99:0a:cc:fd:1b:
3b:ab:ed:a4:ee:28:d1:50:9c:b0:81:06:38:5a:f2:
f2:82:e2:74:8e:ee:19:3f:38:40:b3:d8:16:13:dc:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A5:71:AA:1A:E7:2B:47:CA:E1:3B:E0:17:25:79:03:AA:D2:9B:B8
X509v3 Authority Key Identifier:
keyid:59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:fd:bd:1c:60:fb:36:61:f2:80:7c:9e:76:fb:58:f7:a0:82:
82:5e:24:39:ea:b5:16:73:3a:82:02:cc:a2:a6:f0:c1:78:95:
3a:23:e1:de:8a:19:ca:6a:d6:5f:96:d3:f8:74:33:73:c3:84:
73:71:36:cb:9d:56:dd:b6:18:a0:94:c1:07:96:b8:89:55:11:
8e:a2:56:fc:16:48:25:7d:62:91:df:c8:ed:82:0b:d2:5b:05:
a3:3e:06:df:1f:47:bd:8e:ff:fe:c6:af:b6:f3:4b:40:ec:1f:
72:36:67:f5:b1:65:94:ba:d7:f6:20:c9:08:0b:57:d8:b5:05:
31:86:fc:ac:dd:c5:0d:f2:c1:d1:d3:0d:04:73:39:52:78:91:
54:ba:49:dc:ec:b3:9b:ac:ba:15:2d:a8:df:dd:dd:55:6c:81:
1c:7c:c5:55:54:59:39:f3:10:40:b1:a7:a0:d8:14:a7:ed:a7:
dd:de:83:90:e5:47:fd:a2:b0:d9:3b:1b:e2:62:2f:96:a3:ad:
a9:a7:4f:ec:e4:ce:c3:2a:47:0a:c1:ad:ea:25:c6:c8:33:bb:
f8:32:de:5c:50:ac:79:ef:a3:5a:28:31:d2:53:ed:34:39:d0:
7e:52:e2:95:5b:77:70:28:13:0f:76:40:07:d0:33:77:a4:88:
4a:9f:f1:c2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICIR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYyN0YxMTAvBgNVBAUTKDU5QTY0NzI4RUUwMUQ2QUUzNEZFNzdCMDFFODg1OUM4
MjA5N0U1N0YwHhcNMjUwMTMxMTU1NjMyWhcNMjUwMjA3MTU1NjMyWjAYMRYwFAYD
VQQDEw02NzljZjJiMC1kNmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoBLR9meqSV3mjyHID99uLgIpS+ZUDcElxCNtQl50pwBNjhVceTdyYlk9VYcu
JYt74O2u4ILFr4WMdYJZcrPilGwtZ5qL1VdxUrQH3JkM7/lR5eVy328KMwu3kv/7
h132R54ZKUbCBoPG+d6S578yzprXiJd3u2iDYH8P9KlTcGmR48npKHGAD7rIE2Zt
VHhlSgmyo5cS5aXnQ4b6XYe8Sg6h5z3gt6VngfRmgISS2U0lywr8URVRbqkkKe9S
1eEuRvqJeJCtMedGh5HwKMYA3aZfCJeoPfR2RcH7mQrM/Rs7q+2k7ijRUJywgQY4
WvLyguJ0ju4ZPzhAs9gWE9zLAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqlcaoa
5ytHyuE74BcleQOq0pu4MB8GA1UdIwQYMBaAFFmmRyjuAdauNP53sB6IWcggl+V/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI3Ri85QzMyNTZBMkU5
OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFxNDBfbmV3SG9oWnlDQ1g1
WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dhWkhLTzRCMXE0MF9uZXdIb2haeUNDWDVYOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjI3Ri85QzMyNTZBMkU5OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFx
NDBfbmV3SG9oWnlDQ1g1WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC2/b0cYPs2YfKAfJ52+1j3oIKCXiQ56rUWczqCAsyipvDBeJU6I+He
ihnKatZfltP4dDNzw4RzcTbLnVbdthiglMEHlriJVRGOolb8FkglfWKR38jtggvS
WwWjPgbfH0e9jv/+xq+280tA7B9yNmf1sWWUutf2IMkIC1fYtQUxhvys3cUN8sHR
0w0EczlSeJFUuknc7LObrLoVLajf3d1VbIEcfMVVVFk58xBAsaeg2BSn7afd3oOQ
5Uf9orDZOxviYi+Wo62pp0/s5M7DKkcKwa3qJcbIM7v4Mt5cUKx576NaKDHSU+00
OdB+UuKVW3dwKBMPdkAH0DN3pIhKn/HC
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:07:05 2025 by rpki-client