Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft
File: WkoaHy2STehVVccdPbZrm7DkNkM.mft (raw, json)
Hash identifier: 4O9/33EEx++1Ej5KZIeq78hAviPDD3/IknkWDbZUBBw=
Subject key identifier: FA:36:31:B4:94:A9:73:2B:1A:BA:1F:33:6F:22:6B:E3:1B:B8:FC:96
Authority key identifier: 5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43
Certificate issuer: /CN=A91C2E87/serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643
Certificate serial: 0BDF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft
Manifest number: 0BC7
Signing time: Fri 31 Jan 2025 18:43:32 +0000
Manifest this update: Fri 31 Jan 2025 18:43:31 +0000
Manifest next update: Fri 07 Feb 2025 18:43:31 +0000
Files and hashes: 1: WkoaHy2STehVVccdPbZrm7DkNkM.crl (hash: 5PAct4BG+PhU9RV7mEKvkJIMOnzX43zdWDLxbmvlIzs=)
2: 4EB9FBD63CDE11EAB553996BC4F9AE02.roa (hash: 5Pl69Ojf2kmCxfLr0FSueU3iqe1LbesPtFydiCfx1IQ=)
3: 4F4A22E23CDE11EAB553996BC4F9AE02.roa (hash: 5dNjtUvyRJQ8rKds7M86B2djQAg4WheDaP9EfyZTla8=)
4: 504C179A3CDE11EAB553996BC4F9AE02.roa (hash: bqf4/Z70iNIgP7UdmtL9Kr8ESUyHQDpHnkrIZZGc+Nc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3039 (0xbdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2E87/serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643
Validity
Not Before: Jan 31 18:43:31 2025 GMT
Not After : Feb 7 18:43:31 2025 GMT
Subject: CN=679d19d3-9c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0c:d5:60:7a:82:0a:14:16:f9:1d:96:15:13:
62:b8:e4:33:6c:da:9a:cd:a7:45:03:09:86:22:0a:
84:a3:f0:8a:c0:fa:04:ea:ac:ba:cd:c6:2d:79:45:
13:29:95:87:94:56:6d:cd:75:1a:c0:be:7a:57:e5:
74:34:27:4b:ef:8d:d5:08:e2:1b:a1:97:28:2a:a4:
22:b1:d7:03:73:3d:a6:d2:b1:4e:d5:7e:72:ce:0e:
93:62:80:b5:3b:e1:73:3b:16:c3:8e:cc:20:f8:13:
5f:c7:c9:da:87:77:9e:e7:3e:04:a1:b1:be:99:ec:
c3:e0:bd:70:77:88:3e:00:90:bf:7d:09:b1:c7:55:
2b:df:c0:16:a5:39:78:fc:3f:a4:06:cd:0e:e2:19:
94:4e:41:97:fe:9a:3d:b6:ef:13:60:b2:42:dc:98:
b7:d0:86:49:87:c8:2d:39:1c:73:39:6c:46:39:7e:
83:78:8d:64:d8:ce:13:40:a1:2f:6a:78:cf:ee:8d:
3f:fe:6e:c9:31:c5:22:d7:b5:aa:1b:a3:83:f8:7c:
5c:54:89:98:4c:2a:20:8d:ec:c8:78:97:ab:22:46:
88:6b:b9:58:d3:34:b5:5b:bc:71:ab:d3:ae:99:42:
06:9d:07:33:d9:38:6d:f1:39:0b:86:5f:eb:56:b3:
db:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:36:31:B4:94:A9:73:2B:1A:BA:1F:33:6F:22:6B:E3:1B:B8:FC:96
X509v3 Authority Key Identifier:
keyid:5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:f2:d7:11:cf:87:d2:49:5f:7e:c6:25:1b:d5:8a:2e:67:37:
9b:18:56:be:c1:02:20:c9:bb:4d:91:94:07:a2:3c:38:49:84:
87:40:ea:6d:e0:8a:77:59:ea:c5:d2:71:b5:c1:03:10:1c:60:
5f:98:e5:56:c7:40:47:f3:c6:f3:e5:35:52:85:86:58:cb:53:
ff:4d:27:ab:84:cb:1e:8b:c0:27:2f:33:c2:96:25:9f:50:b5:
5e:a5:97:45:ca:b3:a1:37:bd:68:73:86:5e:55:b1:4f:ef:10:
1f:63:ae:86:49:e0:a3:a0:3c:c1:61:61:19:0e:be:98:2c:82:
0d:68:5f:1e:87:85:74:94:58:7d:68:cd:6d:2b:86:24:56:d5:
ae:cd:b4:65:7f:f3:40:f7:81:08:58:3d:68:7e:17:bf:0e:0a:
50:79:07:c9:75:36:75:09:5b:fc:87:d8:ee:69:46:fa:79:96:
05:f9:22:2a:ec:c3:32:9c:82:d2:8d:af:fe:63:1a:1d:ed:15:
fd:eb:5b:93:14:85:50:d1:fb:33:2d:3e:a8:31:be:02:63:89:
01:32:56:12:d6:88:e6:b4:cf:34:3e:3f:b8:8b:1a:74:5c:5e:
15:b2:80:4c:dd:06:43:0f:1d:ac:5f:3b:53:4b:9a:27:8f:43:
52:d8:08:b7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJFODcxMTAvBgNVBAUTKDVBNEExQTFGMkQ5MjRERTg1NTU1QzcxRDNEQjY2QjlC
QjBFNDM2NDMwHhcNMjUwMTMxMTg0MzMxWhcNMjUwMjA3MTg0MzMxWjAYMRYwFAYD
VQQDEw02NzlkMTlkMy05YzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAogzVYHqCChQW+R2WFRNiuOQzbNqazadFAwmGIgqEo/CKwPoE6qy6zcYteUUT
KZWHlFZtzXUawL56V+V0NCdL743VCOIboZcoKqQisdcDcz2m0rFO1X5yzg6TYoC1
O+FzOxbDjswg+BNfx8nah3ee5z4EobG+mezD4L1wd4g+AJC/fQmxx1Ur38AWpTl4
/D+kBs0O4hmUTkGX/po9tu8TYLJC3Ji30IZJh8gtORxzOWxGOX6DeI1k2M4TQKEv
anjP7o0//m7JMcUi17WqG6OD+HxcVImYTCogjezIeJerIkaIa7lY0zS1W7xxq9Ou
mUIGnQcz2Tht8TkLhl/rVrPbTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPo2MbSU
qXMrGrofM28ia+MbuPyWMB8GA1UdIwQYMBaAFFpKGh8tkk3oVVXHHT22a5uw5DZD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU4Ny9BOUYzQzZFRTEy
OUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1RlaFZWY2NkUGJacm03RGtO
a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1drb2FIeTJTVGVoVlZjY2RQYlpybTdEa05rTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MkU4Ny9BOUYzQzZFRTEyOUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1Rl
aFZWY2NkUGJacm03RGtOa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBh8tcRz4fSSV9+xiUb1YouZzebGFa+wQIgybtNkZQHojw4SYSHQOpt
4Ip3WerF0nG1wQMQHGBfmOVWx0BH88bz5TVShYZYy1P/TSerhMsei8AnLzPCliWf
ULVepZdFyrOhN71oc4ZeVbFP7xAfY66GSeCjoDzBYWEZDr6YLIINaF8eh4V0lFh9
aM1tK4YkVtWuzbRlf/NA94EIWD1ofhe/DgpQeQfJdTZ1CVv8h9juaUb6eZYF+SIq
7MMynILSja/+Yxod7RX961uTFIVQ0fszLT6oMb4CY4kBMlYS1ojmtM80Pj+4ixp0
XF4VsoBM3QZDDx2sXztTS5onj0NS2Ai3
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:39:54 2025 by rpki-client