Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
File: WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft (raw, json)
Hash identifier: E9h9eNGNHrFOk0VCmEk/8bmTVBhjigqNNZO8D1J7Hng=
Subject key identifier: 28:D3:CD:27:72:F2:ED:FE:22:60:1B:6E:05:F4:31:2F:B3:2C:08:DE
Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
Certificate issuer: /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Certificate serial: 055D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
Manifest number: 0558
Signing time: Thu 30 Jan 2025 23:25:44 +0000
Manifest this update: Thu 30 Jan 2025 23:25:44 +0000
Manifest next update: Thu 06 Feb 2025 23:25:44 +0000
Files and hashes: 1: WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl (hash: iTcvEIA2aaVOwqlkyQTMOZNcC4P/6UsLkzfnh+OK1Bk=)
2: 92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (hash: uguUMCdjeeoR+3BZNUcz2rlEWQIIVlblf1lRNkNHvS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1373 (0x55d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Validity
Not Before: Jan 30 23:25:44 2025 GMT
Not After : Feb 6 23:25:44 2025 GMT
Subject: CN=679c0a78-93da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:cf:5d:9e:67:0d:ab:a4:85:14:81:32:b2:
e9:e0:e9:33:17:a1:c1:c7:23:7f:60:46:d4:13:6f:
8a:fc:0c:26:c9:74:ad:92:24:9f:3d:47:df:85:6c:
58:70:71:d6:b1:1a:18:38:bb:dd:2e:41:69:dd:35:
c6:22:4e:06:64:3d:2a:39:9d:9f:2a:85:91:0f:1b:
30:47:e9:06:a9:21:07:e0:d4:0a:84:5d:0a:4e:b7:
21:62:61:11:a3:2f:9d:16:65:1b:3d:3d:e1:a9:49:
e9:a1:a9:14:c6:bb:96:7e:7d:e6:4e:d2:13:ac:2b:
a9:b1:63:16:18:66:8f:09:d9:97:93:27:58:12:bf:
5e:55:6e:eb:91:53:ce:6e:ea:7b:1b:65:83:00:17:
69:d5:f0:21:ef:74:61:03:4a:b4:53:21:bb:91:59:
6e:2a:91:c5:5c:e9:4e:00:ca:7a:28:3d:68:07:e3:
ba:58:f1:83:50:f5:44:2c:af:73:e5:16:1d:1a:47:
fb:70:56:44:9a:56:53:23:9a:0b:9c:93:fb:28:0f:
94:76:49:0f:00:f0:d3:c4:61:83:03:8d:b5:19:0a:
57:45:db:3f:bc:4b:fc:21:7a:2d:38:33:7e:dc:f3:
e1:39:80:1f:66:6b:98:b7:6e:b4:63:d7:52:b5:cb:
3f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D3:CD:27:72:F2:ED:FE:22:60:1B:6E:05:F4:31:2F:B3:2C:08:DE
X509v3 Authority Key Identifier:
keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:f9:ee:ab:a2:87:3c:d1:8c:21:3d:49:e1:b4:bb:72:e7:30:
fe:47:4c:01:29:65:6f:17:27:64:d1:97:bc:bc:49:38:03:68:
19:55:13:2d:eb:02:83:2c:32:0a:56:ef:63:d4:ee:8e:cb:07:
64:cd:e9:d2:25:f5:50:8f:48:30:18:8b:f8:b1:d3:2c:d1:62:
b7:94:15:e9:87:e6:1f:fc:97:ba:2c:c2:79:d1:ad:2b:72:b2:
05:e2:d5:72:f0:17:fa:73:b9:c1:2b:e5:ce:dd:25:15:8f:53:
f1:49:0b:48:71:bc:54:22:5b:a3:2c:2b:ef:b1:27:02:cf:59:
6e:2f:3d:83:2b:72:45:95:82:57:fa:69:e5:ac:26:04:89:ff:
c1:0c:6c:01:b3:9d:0d:d0:61:ba:5c:29:f2:06:c1:6b:ee:ab:
4f:71:11:db:1d:4e:6d:ac:5c:c3:bc:68:2a:91:b0:09:72:e7:
4f:56:f1:9e:0b:61:a5:6d:8a:f9:0d:fe:3a:9a:39:88:7a:01:
19:67:83:26:5d:c3:59:c2:e3:34:35:27:2b:b8:ff:92:ff:0d:
bd:67:dc:d7:4c:f9:4a:7f:fa:94:20:ab:f1:2b:48:58:0a:2d:
31:8d:63:47:ef:32:21:c9:0b:f6:17:2a:e5:9c:34:33:90:39:
9b:60:a3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:39 2025 by rpki-client