Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft
File: wzct4f6eU8GLMFFtlkxDZyLrPss.mft (raw, json)
Hash identifier: Ez4yOjOg+9xvxsHwsVyWR/VCUQtwX7PXEITtdQ1rN6A=
Subject key identifier: 33:64:F6:E3:DD:69:0B:59:C0:07:FE:96:51:98:72:39:30:39:1C:6F
Authority key identifier: C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB
Certificate issuer: /CN=A911C7CD/serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft
Manifest number: 78
Signing time: Sat 29 Mar 2025 06:07:43 +0000
Manifest this update: Sat 29 Mar 2025 06:07:43 +0000
Manifest next update: Sat 05 Apr 2025 06:07:43 +0000
Files and hashes: 1: wzct4f6eU8GLMFFtlkxDZyLrPss.crl (hash: Jqq8ndBKsABn9oK39WVdf+UK7DBpOX53pv5gGUji11E=)
2: 5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa (hash: DGhCmBwIVuA1yV2BSzBBRg3ZffQWFG7MuOhn3OP/r+0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C7CD
Validity
Not Before: Mar 29 06:07:43 2025 GMT
Not After : Apr 5 06:07:43 2025 GMT
Subject: CN=67e78e2f-8523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9d:1d:e8:35:38:b7:e4:12:b7:d1:8f:a7:a8:
06:14:2f:55:33:1d:a8:c6:57:3b:4e:30:b8:d9:b2:
21:96:6d:95:27:7b:b1:e5:cb:3b:63:ac:6a:c8:9c:
20:1b:0b:c8:2d:74:4a:b2:ed:2d:00:28:b6:7f:a9:
43:9d:4a:84:41:a1:97:1f:37:67:78:12:bb:56:b8:
70:f9:ba:11:e8:b8:5f:5c:29:5d:08:40:19:df:88:
40:93:b4:9f:8a:17:bf:0f:ad:22:1e:d8:50:be:98:
ab:6e:65:53:05:19:16:36:bc:fc:c7:2a:eb:1d:d8:
f3:9f:7c:d2:f6:b9:d2:83:53:9b:d2:8b:8d:e1:c9:
2b:02:54:88:bd:3d:48:71:bf:e5:38:1e:4f:be:43:
06:de:2f:89:b5:3f:a7:20:ce:72:9d:d5:7f:05:59:
ef:89:ab:1f:04:8c:dc:9a:09:6c:67:a0:dc:c4:5c:
c3:0d:89:bb:67:2d:65:27:40:59:78:00:90:83:1d:
db:e8:c5:93:03:f3:82:31:82:2a:4b:42:86:2f:4c:
90:d4:de:45:99:5d:1a:a8:a0:2e:42:2d:19:02:37:
74:79:99:17:f8:f4:06:77:f0:d1:ff:46:2c:88:b2:
75:85:90:69:3e:ba:10:8e:49:f4:8c:d7:31:09:1d:
ca:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:64:F6:E3:DD:69:0B:59:C0:07:FE:96:51:98:72:39:30:39:1C:6F
X509v3 Authority Key Identifier:
keyid:C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:93:36:6d:55:a3:1f:ee:7a:53:79:08:2f:51:8d:4c:1b:d2:
b0:8f:37:25:73:e3:08:0b:c0:db:40:2c:7b:fa:bf:5d:1b:48:
7b:90:d5:85:2b:39:9f:ce:df:cd:12:a1:67:28:23:8f:68:97:
cf:2f:c9:36:07:97:aa:5d:83:18:83:86:3e:b6:b3:83:f2:f0:
39:d7:9f:f9:20:d1:ec:7c:6b:10:62:86:39:95:be:fe:45:d3:
7f:56:66:e9:43:ca:d1:2c:22:f6:e6:2c:7d:4d:66:a3:12:48:
34:a4:e3:7e:23:81:7a:bf:64:67:f7:c8:2a:be:7d:99:df:f4:
db:45:48:65:e1:f1:74:9e:c2:fc:c8:ea:c5:48:31:35:e0:ac:
cc:d8:e7:55:0f:b7:ce:b6:b9:54:fa:73:82:e7:78:dd:85:a2:
cd:df:86:bb:f5:a8:ce:e4:3f:ba:d8:c7:94:96:c1:aa:f9:43:
30:a8:af:a2:a1:37:ef:b1:ee:d8:90:5e:19:f9:ac:8b:f4:81:
ae:ff:d0:1f:70:37:bd:1e:b0:75:2c:e8:27:c2:0d:3d:f9:2e:
b2:25:7b:bd:76:ba:0c:f5:20:16:1d:c1:b6:29:42:eb:87:aa:
4a:c8:4d:a5:da:d1:10:88:cf:ec:4c:85:07:53:b4:28:ef:9d:
9e:1e:85:06
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
QzdDRDExMC8GA1UEBRMoQzMzNzJERTFGRTlFNTNDMThCMzA1MTZEOTY0QzQzNjcy
MkVCM0VDQjAeFw0yNTAzMjkwNjA3NDNaFw0yNTA0MDUwNjA3NDNaMBgxFjAUBgNV
BAMTDTY3ZTc4ZTJmLTg1MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLnR3oNTi35BK30Y+nqAYUL1UzHajGVztOMLjZsiGWbZUne7HlyztjrGrInCAb
C8gtdEqy7S0AKLZ/qUOdSoRBoZcfN2d4ErtWuHD5uhHouF9cKV0IQBnfiECTtJ+K
F78PrSIe2FC+mKtuZVMFGRY2vPzHKusd2POffNL2udKDU5vSi43hySsCVIi9PUhx
v+U4Hk++QwbeL4m1P6cgznKd1X8FWe+Jqx8EjNyaCWxnoNzEXMMNibtnLWUnQFl4
AJCDHdvoxZMD84IxgipLQoYvTJDU3kWZXRqooC5CLRkCN3R5mRf49AZ38NH/RiyI
snWFkGk+uhCOSfSM1zEJHcqpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUM2T2491p
C1nAB/6WUZhyOTA5HG8wHwYDVR0jBBgwFoAUwzct4f6eU8GLMFFtlkxDZyLrPssw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDN0NEL0Q2NEExRkI0NUVB
MjExRUZCMTY3NzI0M0M0RjlBRTAyL3d6Y3Q0ZjZlVThHTE1GRnRsa3hEWnlMclBz
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvd3pjdDRmNmVVOEdMTUZGdGxreERaeUxyUHNzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD
N0NEL0Q2NEExRkI0NUVBMjExRUZCMTY3NzI0M0M0RjlBRTAyL3d6Y3Q0ZjZlVThH
TE1GRnRsa3hEWnlMclBzcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBALOTNm1Vox/uelN5CC9RjUwb0rCPNyVz4wgLwNtALHv6v10bSHuQ1YUr
OZ/O380SoWcoI49ol88vyTYHl6pdgxiDhj62s4Py8DnXn/kg0ex8axBihjmVvv5F
039WZulDytEsIvbmLH1NZqMSSDSk434jgXq/ZGf3yCq+fZnf9NtFSGXh8XSewvzI
6sVIMTXgrMzY51UPt862uVT6c4LneN2Fos3fhrv1qM7kP7rYx5SWwar5QzCor6Kh
N++x7tiQXhn5rIv0ga7/0B9wN70esHUs6CfCDT35LrIle712ugz1IBYdwbYpQuuH
qkrITaXa0RCIz+xMhQdTtCjvnZ4ehQY=
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:05:00 2025 by rpki-client