Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/wtD9BoMuxNu3G5uxZbvylkCs72g.mft
File: wtD9BoMuxNu3G5uxZbvylkCs72g.mft (raw, json)
Hash identifier: S5EGA/c9eHen+U9JLu6VR/lFWPON8iAlDRKIie4717E=
Subject key identifier: 06:5A:EF:94:55:90:4C:5D:9C:D1:C4:54:8D:DE:93:71:C4:43:0B:DD
Authority key identifier: C2:D0:FD:06:83:2E:C4:DB:B7:1B:9B:B1:65:BB:F2:96:40:AC:EF:68
Certificate issuer: /CN=A91E3DA6/serialNumber=C2D0FD06832EC4DBB71B9BB165BBF29640ACEF68
Certificate serial: 069E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wtD9BoMuxNu3G5uxZbvylkCs72g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/wtD9BoMuxNu3G5uxZbvylkCs72g.mft
Manifest number: 0698
Signing time: Thu 30 Jan 2025 22:14:34 +0000
Manifest this update: Thu 30 Jan 2025 22:14:33 +0000
Manifest next update: Thu 06 Feb 2025 22:14:33 +0000
Files and hashes: 1: wtD9BoMuxNu3G5uxZbvylkCs72g.crl (hash: 5XdfuVD7NGbpDfRfHwYdv5cvUn84XeltjSQzlFaM0Dg=)
2: 339BE48C554111EBAE1AA47BC4F9AE02.roa (hash: qjVSrkRyvnMbrPeElNzTYnbOYThbM8dR4zsheJBUbFc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1694 (0x69e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3DA6/serialNumber=C2D0FD06832EC4DBB71B9BB165BBF29640ACEF68
Validity
Not Before: Jan 30 22:14:33 2025 GMT
Not After : Feb 6 22:14:33 2025 GMT
Subject: CN=679bf9ca-13af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:8b:9e:ba:49:18:ed:a0:0f:ab:f1:c8:13:
14:2f:db:f2:f5:3f:0d:b5:81:9f:d1:15:f9:ea:bc:
4b:34:85:15:da:6a:de:b8:7e:cc:bb:fd:98:16:5e:
15:4c:ac:67:94:8b:e1:43:fb:f5:44:59:4c:54:e0:
48:b3:e9:09:42:7f:60:c9:48:dd:9d:43:4b:27:7e:
fb:d8:04:96:6c:3e:f8:1f:71:6a:25:1a:32:cb:c7:
3f:59:e2:49:ba:40:1d:d7:ca:54:5a:a1:82:75:17:
70:52:1e:08:74:97:86:eb:70:d7:a6:1c:21:b5:be:
8e:25:d1:3d:16:e5:65:6a:44:c8:b9:71:00:10:ae:
50:07:e9:29:c1:06:30:0b:80:2a:64:5a:71:39:27:
2f:42:ae:63:a1:92:80:52:b4:31:f0:c5:c9:f2:99:
d2:5b:fa:d8:c0:bd:83:66:09:ac:70:c6:ff:03:ba:
d0:88:49:9c:c1:5a:c2:dc:1c:cd:ec:9d:ab:fb:dd:
42:54:9c:6e:94:e7:9d:ce:71:9d:2b:d9:0c:4f:22:
d4:a9:8f:6b:4c:53:fb:86:16:6f:1d:a8:25:93:d1:
58:c6:69:ea:e6:1d:9c:e9:37:01:cb:ec:47:54:2b:
7a:24:b4:3e:10:e3:e3:db:e3:ed:cc:57:ef:a8:dd:
87:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5A:EF:94:55:90:4C:5D:9C:D1:C4:54:8D:DE:93:71:C4:43:0B:DD
X509v3 Authority Key Identifier:
keyid:C2:D0:FD:06:83:2E:C4:DB:B7:1B:9B:B1:65:BB:F2:96:40:AC:EF:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/wtD9BoMuxNu3G5uxZbvylkCs72g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wtD9BoMuxNu3G5uxZbvylkCs72g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/wtD9BoMuxNu3G5uxZbvylkCs72g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d3:7c:6a:d8:00:27:c4:7f:0a:ce:fa:b7:a5:c1:22:d8:9f:
45:b8:a7:68:34:3b:d9:f5:12:85:68:28:b9:3d:a4:b0:50:9d:
80:37:99:ed:d5:ba:77:90:94:09:5c:b1:33:3f:6b:90:c7:05:
84:02:95:f5:78:5c:d4:67:52:6c:13:0f:4d:4f:8d:0c:0e:a4:
37:da:af:17:fe:3f:bb:be:a1:29:08:f4:7e:ba:35:42:26:de:
1a:4f:95:19:42:6b:17:cf:c4:d1:9b:24:8f:81:7f:b3:5c:74:
2b:52:0a:e2:13:4e:33:b9:ce:3d:39:ae:ec:35:75:d2:68:86:
bd:02:86:31:e2:3d:f8:83:68:80:6a:b6:b6:36:2b:1f:fd:18:
43:a2:af:a3:81:b1:5b:64:15:13:13:45:9c:29:13:09:1e:7b:
81:00:27:b5:04:5d:27:33:f6:14:86:ec:9c:ca:ca:87:9a:72:
61:d3:2f:f1:e8:68:db:87:93:07:93:62:db:d1:8c:1f:97:b5:
da:36:6a:26:89:f2:60:a8:ac:06:29:75:7c:89:4c:85:b2:6d:
22:e5:f8:1d:4c:fa:5f:6d:c6:28:c2:d3:b3:e4:58:bd:11:45:
b5:c2:ff:03:4d:47:c6:12:06:23:fa:f9:e4:97:af:43:63:64:
f8:c1:57:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:32 2025 by rpki-client