Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft
File: wekLXRHZAbDQSjQmCADU4p8cYqw.mft (raw, json)
Hash identifier: /QVNGmmdkf8UEQUnBmyIqQwBMeWAgxcggqgLkxlwezs=
Subject key identifier: 91:9D:A8:BE:B3:4E:BD:E5:1F:9D:DB:5D:20:EA:85:EF:CE:46:9D:C5
Authority key identifier: C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC
Certificate issuer: /CN=A91CB3A5/serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC
Certificate serial: 0755
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft
Manifest number: 0750
Signing time: Thu 30 Jan 2025 21:30:08 +0000
Manifest this update: Thu 30 Jan 2025 21:30:07 +0000
Manifest next update: Thu 06 Feb 2025 21:30:07 +0000
Files and hashes: 1: wekLXRHZAbDQSjQmCADU4p8cYqw.crl (hash: KV48ReOHSK0VJWbaM0tlMpG5sM/kElMNblNi+31SF+o=)
2: 5B213DB20F8D11EBACF1BE19C4F9AE02.roa (hash: /CO3yu+8isjuDc/p5etccwYJHfw/FsP334mLJY5Rh+I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1877 (0x755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB3A5/serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC
Validity
Not Before: Jan 30 21:30:07 2025 GMT
Not After : Feb 6 21:30:07 2025 GMT
Subject: CN=679bef60-1511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:00:cf:56:66:63:29:8f:3c:f2:66:45:30:
ab:13:f7:77:c4:6d:f4:8a:b5:a5:8c:2b:67:45:6a:
ba:63:44:08:aa:56:fb:8a:da:6b:51:2f:3e:c3:29:
51:24:30:6f:1d:f3:60:8e:94:c4:e7:bf:53:cc:6d:
23:3b:1c:9e:25:9e:12:dc:3e:3b:db:2e:29:69:89:
2a:41:31:3a:a4:ea:16:5e:93:da:5e:a5:9c:75:97:
a7:40:4b:1b:6c:d9:eb:48:b5:bc:dd:f5:05:92:1f:
e6:f0:8b:22:fd:10:aa:d4:77:90:a9:d2:52:6d:ce:
51:ec:d8:c4:3a:46:76:49:13:af:a0:2b:5e:7e:a8:
87:3c:8e:91:52:bb:8e:ea:30:cc:24:c1:c3:5f:40:
53:cd:92:61:3f:c7:57:cf:02:67:14:28:34:04:3c:
cc:af:50:fe:9c:9e:46:3a:a4:2c:a0:0e:41:c8:c8:
fd:67:4f:c0:2c:d3:68:82:16:03:a1:92:67:6d:f7:
24:5d:12:00:5e:b6:b7:54:9c:d7:78:c4:c7:17:75:
1f:c7:0b:78:73:51:2d:f3:39:5f:93:89:7d:a1:c9:
f6:3f:d1:72:bd:08:ef:b5:d5:db:cc:72:a0:d4:0e:
fc:34:93:b5:f5:70:67:2e:a7:e7:31:ba:d4:75:36:
7f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9D:A8:BE:B3:4E:BD:E5:1F:9D:DB:5D:20:EA:85:EF:CE:46:9D:C5
X509v3 Authority Key Identifier:
keyid:C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:30:80:5d:98:e1:46:3d:45:f1:45:54:8e:c3:d0:24:ad:0f:
17:4f:8a:1d:8f:46:5b:8c:aa:12:9b:e5:85:2d:a1:52:d4:0b:
b2:6a:ef:ac:54:f3:78:1c:26:ea:9c:2e:81:94:52:70:85:ad:
29:01:5d:02:f8:b7:3e:52:a0:2a:69:8f:b9:c4:ad:b4:68:a4:
02:99:eb:b6:16:b2:40:f2:a0:dd:8d:57:cd:21:b9:44:d3:b1:
cc:01:2e:58:f2:14:da:70:ed:a2:97:dd:0f:6a:af:23:8c:1d:
5a:76:14:58:0a:a8:c1:4c:76:9b:6c:bc:cf:ec:9d:fa:25:61:
67:59:6a:f4:5e:f7:90:ba:49:21:96:bb:97:54:bd:75:f8:21:
99:ae:1d:e0:e1:71:71:ae:dc:21:89:2f:68:74:08:eb:87:86:
80:d3:0c:09:0f:d9:40:f9:67:bb:44:00:fd:0d:b6:d9:b3:41:
2b:b8:2a:e8:da:af:56:46:e6:67:8f:1f:d9:c5:9b:e8:02:0f:
e2:b5:81:e4:d2:05:95:27:44:82:1c:b1:c8:de:12:21:bd:60:
a8:50:84:1d:ad:42:6a:26:e3:d3:e7:4c:8b:38:5e:f8:25:c7:
68:14:1a:de:e9:1b:7a:15:59:24:e0:62:d0:b8:0c:e9:9b:4c:
21:f2:ea:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:43:12 2025 by rpki-client