Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.mft
File: wwhUyZUfLYZr_6nE1T05k3nYD6w.mft (raw, json)
Hash identifier: N5M+MLWrfnQDaJfn171cBQmxu0m3TgxjmCL468/zwPU=
Subject key identifier: 23:5A:A7:7A:22:7A:85:17:3F:BC:C0:13:5C:6E:5A:BF:86:BF:50:85
Authority key identifier: C3:08:54:C9:95:1F:2D:86:6B:FF:A9:C4:D5:3D:39:93:79:D8:0F:AC
Certificate issuer: /CN=A91C89A2/serialNumber=C30854C9951F2D866BFFA9C4D53D399379D80FAC
Certificate serial: 02B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wwhUyZUfLYZr_6nE1T05k3nYD6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.mft
Manifest number: 02B3
Signing time: Fri 31 Jan 2025 01:34:29 +0000
Manifest this update: Fri 31 Jan 2025 01:34:29 +0000
Manifest next update: Fri 07 Feb 2025 01:34:29 +0000
Files and hashes: 1: wwhUyZUfLYZr_6nE1T05k3nYD6w.crl (hash: iKHaLVRBMyX1y//j0WYgeU1u6h6jM4WDmeIMKOgvA5U=)
2: 2E5E44C40D7311ED90DA6411C4F9AE02.roa (hash: DAE4nA/YSJ+X4ohFS4FgtgN36rqtaSq7+XsAoE9m8Lw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696 (0x2b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C89A2/serialNumber=C30854C9951F2D866BFFA9C4D53D399379D80FAC
Validity
Not Before: Jan 31 01:34:29 2025 GMT
Not After : Feb 7 01:34:29 2025 GMT
Subject: CN=679c28a5-9bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:77:5a:cf:47:68:6d:a0:dd:a8:b2:9f:27:de:
33:8d:f2:5f:3c:37:55:08:5d:60:9e:7a:54:d2:5d:
fa:c1:0a:d7:27:f8:d4:cd:e1:7b:88:5c:ee:7d:d3:
c6:b2:57:b8:4f:04:6c:1d:6f:fb:5c:11:45:e4:fa:
a9:69:b0:8a:a4:c8:c6:9e:43:af:30:ab:d8:31:15:
48:92:36:ed:9b:94:0a:9e:d6:05:c5:15:bf:41:a7:
a2:c6:a6:ce:94:99:c4:b1:16:ab:56:d2:59:8b:06:
33:6d:e4:24:bd:70:c0:c7:f0:ec:26:e4:6c:b7:00:
c2:b9:b2:15:ca:97:8a:33:a0:c3:cf:ac:09:d2:13:
bf:cc:e6:97:c6:4f:5a:df:6a:1f:f2:5c:50:8d:e6:
2f:ce:9d:dd:a2:fb:36:9a:f0:a5:9d:7c:82:ee:1a:
df:c0:3b:2a:f2:27:60:f7:d8:88:87:28:44:1a:45:
5f:cd:81:37:ff:44:3a:44:e7:71:13:fa:d7:26:0e:
ba:d5:a0:15:c3:14:97:ca:9c:fd:02:cb:af:ef:c1:
af:7b:27:d7:49:1f:eb:5d:d1:81:d7:74:d6:7e:94:
8d:ad:38:a7:fa:4e:d7:6b:36:c1:fa:af:10:d0:2d:
b1:af:17:6f:27:11:81:00:7e:a2:ad:40:1b:7c:51:
6a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5A:A7:7A:22:7A:85:17:3F:BC:C0:13:5C:6E:5A:BF:86:BF:50:85
X509v3 Authority Key Identifier:
keyid:C3:08:54:C9:95:1F:2D:86:6B:FF:A9:C4:D5:3D:39:93:79:D8:0F:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wwhUyZUfLYZr_6nE1T05k3nYD6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:06:11:ff:75:75:ab:42:c8:c6:eb:04:04:b0:75:32:c5:d2:
4a:f5:36:c6:7d:a4:4d:db:45:a7:e5:7e:1a:2e:1f:44:ee:7b:
93:4c:2d:f9:f6:aa:8d:1a:4c:90:1f:1f:6d:02:97:ac:b6:70:
6d:ad:33:5b:97:12:15:4f:62:46:ab:c4:5b:38:5b:6d:dc:5e:
b2:3d:6f:2e:4e:c0:36:63:16:9f:0e:ae:91:40:64:0f:3e:91:
7e:43:12:40:e3:92:63:27:65:15:db:e3:8b:1f:48:f1:96:c5:
3c:5c:9c:55:6a:c0:bb:a8:54:cc:9b:c9:17:66:42:ab:4e:24:
12:73:3a:30:a5:fb:35:02:9c:ca:45:f7:ad:43:09:e8:95:40:
29:94:13:48:4e:ab:f9:55:b4:0d:50:2e:11:06:23:35:5b:50:
7b:a9:01:7d:36:9b:9c:b9:77:06:8e:b1:80:b1:fe:99:c6:cc:
e5:a8:79:aa:73:de:9a:83:03:ea:04:1a:07:24:38:5a:6b:38:
4f:34:b1:30:96:03:11:b0:ef:26:76:fe:9b:7a:80:4d:f6:24:
c8:ec:8a:4c:b1:56:57:4b:04:b9:84:06:c2:08:f3:32:8e:29:
6c:3f:1f:99:f7:0e:2d:4c:0a:a9:5b:21:ae:c4:41:39:ff:63:
db:c0:50:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:59 2025 by rpki-client