Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
File: mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft (raw, json)
Hash identifier: W+9HggVJPE+uVSaKYpoGafhBggFjq/eLeLMGNiomPzg=
Subject key identifier: 88:F5:16:BB:AD:D2:4E:C0:25:4A:25:33:CB:7C:65:6D:08:1C:84:AF
Authority key identifier: 9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9
Certificate issuer: /CN=A91F3B6C/serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9
Certificate serial: 0538
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
Manifest number: 0532
Signing time: Thu 30 Jan 2025 23:33:02 +0000
Manifest this update: Thu 30 Jan 2025 23:33:01 +0000
Manifest next update: Thu 06 Feb 2025 23:33:01 +0000
Files and hashes: 1: mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl (hash: fdludLSVhqhYoxpDt5QdWKLfcqqJ766Pey9YGaN5C7k=)
2: C4CB04C4E2A911EBB4631960C4F9AE02.roa (hash: /IQosXeTs3yKI2PYcZx2uhrQ/iH7sT08Mb2D4+fQ4bg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1336 (0x538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B6C/serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9
Validity
Not Before: Jan 30 23:33:01 2025 GMT
Not After : Feb 6 23:33:01 2025 GMT
Subject: CN=679c0c2e-4ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:19:eb:ae:f1:2d:8b:7a:02:a8:51:c3:fd:
55:5b:9b:1b:d7:ec:62:e1:0b:45:47:23:d2:53:10:
78:c4:76:2b:41:c2:bb:d6:0a:4e:1d:7e:48:65:06:
96:eb:e1:2a:08:e2:b1:cc:36:70:43:96:f8:22:2a:
38:67:c0:ba:6a:67:d3:d2:02:64:86:d6:86:78:72:
3e:64:67:a1:6d:e9:01:d2:f4:fa:89:09:c5:bc:10:
5b:64:26:d1:94:f6:2e:a2:97:bd:9c:d4:b7:e4:bc:
33:b1:15:b6:18:0b:05:41:42:55:c6:d4:9a:05:df:
68:80:0f:36:24:b3:7f:d4:ac:5b:b3:e6:72:b2:0c:
4e:dd:db:70:c4:4a:32:1f:e0:aa:7c:10:fa:d5:ef:
f2:a3:62:9c:f2:b1:76:2d:e3:5f:40:e8:fa:cd:b5:
cd:c7:fb:9c:35:fe:ed:37:d7:3e:a1:3c:96:25:dc:
de:91:38:2e:b0:06:b3:5a:bd:fd:ae:78:e3:54:63:
3c:47:b5:4e:1b:e1:21:80:5b:46:07:23:73:48:df:
60:46:58:cc:14:bc:ee:e5:c1:8c:7c:c2:22:84:b9:
9a:b2:ea:eb:c0:d1:be:1c:81:2d:1b:93:c9:cd:37:
4f:36:b0:af:cf:7d:a1:04:d2:ce:23:26:3a:df:07:
c5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F5:16:BB:AD:D2:4E:C0:25:4A:25:33:CB:7C:65:6D:08:1C:84:AF
X509v3 Authority Key Identifier:
keyid:9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f0:53:33:bc:29:1e:9c:24:28:f0:a2:3d:fb:01:9a:9e:b5:
bc:67:52:f1:fa:cc:d2:40:a0:80:a1:59:2f:08:d7:83:17:91:
4d:da:8d:7e:8a:d6:b6:1d:f7:36:77:d1:51:ee:d6:8c:67:e7:
5e:c7:32:dc:0c:79:13:21:70:d8:cb:d3:91:b6:b6:3e:08:dc:
f4:e5:26:a9:64:87:9a:ee:da:c8:56:2b:4a:18:84:33:78:92:
b9:af:d3:88:83:23:96:cf:a3:76:90:29:50:98:e4:5b:75:04:
07:b2:cc:36:5d:2c:5f:3c:1b:34:17:62:67:8b:7b:42:75:8e:
df:fa:88:b9:ea:3f:c0:84:b0:22:fa:4c:4c:16:28:7c:09:b7:
88:bc:a5:40:21:61:bc:ba:83:66:23:da:4e:90:2b:7c:52:28:
8d:26:b9:9e:3f:9e:db:60:39:06:68:22:4e:94:3e:31:da:0f:
c5:b7:d3:73:aa:97:23:fb:e8:35:a8:a9:7e:73:de:49:06:da:
0b:9c:54:db:4f:55:3e:72:d0:06:8c:63:c8:b8:3a:6c:37:fc:
3b:c1:d1:dc:3b:b6:9d:a2:bc:d6:6c:52:d2:e5:b6:a4:de:65:
2f:4a:5a:8c:06:ef:af:3a:3a:54:d8:7b:19:55:a4:71:9e:ca:
0e:0c:df:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:07 2025 by rpki-client