Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
File: wUIqDEz_JI1Rc1jr33tOgCuswOc.mft (raw, json)
Hash identifier: UT0wPMPbLm9btSQxRsQlt4N7mpD5VOz9obcsX5HvCO4=
Subject key identifier: BA:00:A2:FF:6A:19:55:3B:1F:C0:45:2B:20:4A:76:A0:6B:ED:A4:49
Authority key identifier: C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7
Certificate issuer: /CN=A91EB45A/serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7
Certificate serial: 345C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
Manifest number: 3452
Signing time: Fri 31 Jan 2025 15:08:41 +0000
Manifest this update: Fri 31 Jan 2025 15:08:40 +0000
Manifest next update: Fri 07 Feb 2025 15:08:40 +0000
Files and hashes: 1: wUIqDEz_JI1Rc1jr33tOgCuswOc.crl (hash: WGzkDUbfL8CyCEAv93Gv42RuY7i3NerRbe421MdE2PM=)
2: 17BB4C20F17E11EAA3CC597BC4F9AE02.roa (hash: GHc32dmD8PGI6ypRydRPnBnTyP57BJjF/HmqnaNiKdw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13404 (0x345c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB45A/serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7
Validity
Not Before: Jan 31 15:08:40 2025 GMT
Not After : Feb 7 15:08:40 2025 GMT
Subject: CN=679ce779-fac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:e2:26:34:ec:c6:fb:38:7f:f0:16:9d:59:
9e:01:d4:a0:52:fc:70:5f:9b:e2:1a:3c:18:2a:ec:
c9:65:02:70:af:bf:d2:84:42:af:e6:7c:3f:09:96:
6f:bf:58:03:30:67:14:71:46:7c:99:93:12:b4:b1:
dc:84:1b:9e:68:67:86:66:88:b3:45:b9:2e:5a:8e:
ed:24:f0:50:16:a5:28:25:01:80:cb:29:2a:31:de:
0b:73:35:87:7b:9a:59:44:a9:1d:2b:e8:de:39:41:
6a:d0:06:61:95:f0:e7:f0:d4:14:d0:86:4b:93:0a:
c7:c9:b5:59:3c:96:80:79:af:1b:d7:03:c3:bd:8e:
b2:42:67:72:0f:ad:ce:d3:cc:1b:85:f9:e8:a4:16:
36:61:dd:45:a7:d5:12:b1:ec:7d:c8:fd:b0:44:fc:
f3:d7:dd:33:71:38:28:0b:c8:08:27:b1:0e:a8:fd:
66:66:1f:67:0b:90:ed:c0:7b:73:cd:17:2f:58:b9:
28:db:f4:20:a9:b3:fc:3e:38:a5:98:90:4a:82:54:
a3:5d:ee:ec:26:53:ff:20:0d:25:3a:b5:24:d1:2c:
fe:d3:24:a8:d4:6d:f5:f5:43:d6:68:d4:ee:be:e6:
ad:aa:db:ed:9d:0e:59:e9:a7:a4:1f:9f:bf:d0:66:
a1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:00:A2:FF:6A:19:55:3B:1F:C0:45:2B:20:4A:76:A0:6B:ED:A4:49
X509v3 Authority Key Identifier:
keyid:C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b6:5e:4c:fe:9f:3c:bd:75:bd:14:e4:76:02:e4:79:6b:94:
13:d1:8f:c2:f6:bf:96:52:9c:0e:dc:1a:2a:f1:5a:8e:2b:a0:
89:16:a2:46:d3:30:a4:6f:03:b2:b8:22:a9:30:bc:72:d1:03:
7d:27:af:48:a2:d8:42:c2:dc:a0:e2:ed:fc:4d:a1:df:5b:93:
08:6b:18:cc:ed:bb:da:b8:58:bb:87:10:b6:76:cf:80:c5:92:
44:d6:c7:21:1a:33:61:53:ea:a8:dc:f5:7a:be:d8:27:60:dc:
77:9d:08:5a:b2:45:f9:0e:c0:49:d0:23:49:ca:3c:e0:bd:e7:
61:63:86:4f:78:ab:af:e5:6b:b4:0f:cc:a6:fd:c1:13:38:5a:
16:bd:03:f4:9c:4d:33:4f:0c:b3:a1:26:ce:02:fa:42:47:a5:
88:60:e4:31:ac:91:5c:b5:a6:e5:71:ca:8a:d8:a3:e4:1f:92:
64:aa:86:3e:c7:e3:69:3d:9b:9d:1a:f9:e4:6c:e0:e9:0b:05:
98:5a:f0:dd:ab:59:28:ca:d4:df:6d:5a:ed:9d:7b:bd:18:1d:
6a:4f:1a:7c:3b:2c:98:8c:23:a6:da:60:c2:11:f8:28:b8:f9:
8d:7a:3e:49:54:6e:45:97:9c:30:f1:5b:2a:c0:d0:67:cf:0a:
e6:84:d6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:52:08 2025 by rpki-client