Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json)
Hash identifier: ijlR2yoaozH4gwPTfxWW4C8al2XahahN07TcytIO4zs=
Subject key identifier: 25:88:F1:6A:74:A8:82:53:26:E4:49:BE:AF:DD:AF:4B:C5:8D:39:0B
Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Certificate serial: 34DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
Manifest number: 348A
Signing time: Fri 28 Mar 2025 14:26:35 +0000
Manifest this update: Fri 28 Mar 2025 14:26:34 +0000
Manifest next update: Fri 04 Apr 2025 14:26:34 +0000
Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: yjFSrQ3OtijyV/iocYAuRPrgiq/RqtELzk3DH4OCcWY=)
2: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 6Ne7hQRkoimBuuEaTeZdl5fhQ7yZ46EDX0Sh7Chvt50=)
3: 8C333A4E6B9E11EDB0DCC676C4F9AE02.roa (hash: yA6Epbo7Tb7g6a4bRXGgsFN40BNWR1FgOiUmsWkDrGY=)
4: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: /pyPonPmEFKa1hXT9c5EeNmCysabzskN0N3q8itE/yQ=)
5: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: e7zDDov11JCBn6iOfgz7E7SYErzUY0Kc8T1oGkGpfCQ=)
6: BBF1AAB475DE11E8B55A1C47C4F9AE02.roa (hash: Hw/97Nckkj5k8EOTbZ1dABRBDvHmajYpZ+iqkTDOE9U=)
7: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: S1GxLRyW9jbWfhzDlGsZRExghMXH5ph382L3rO+OSJc=)
8: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: XeOwCDJC/7tDXVlR92gvvBxO2ZkUMPl9GnCUEv+guSA=)
9: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: ntvcTrpEA6rCyuNYSDHVsCeHSVzEDugmmxfTLFHpT0E=)
10: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: y6Utban/MDhZmVm58zbd+GMT3Mgg7LB6jXrEukFmHX0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13535 (0x34df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129E3A
Validity
Not Before: Mar 28 14:26:34 2025 GMT
Not After : Apr 4 14:26:34 2025 GMT
Subject: CN=67e6b19a-0d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:cc:b3:40:d6:b6:59:ec:05:d2:66:d6:e2:
bd:81:08:46:5c:65:3b:08:36:45:7b:3e:54:93:19:
68:c1:b3:e0:40:67:71:1a:89:93:bf:49:9f:b4:28:
f8:a6:7c:1e:5d:c4:16:f2:c2:0a:61:fa:c8:f2:ae:
d4:68:51:57:d5:b1:7a:03:7e:60:d0:ca:b1:16:28:
d6:f1:a4:59:0f:8f:17:e0:df:3c:7c:a7:e4:40:3b:
03:3c:38:79:18:e0:88:bc:c1:c3:1f:3d:b7:4c:93:
d7:b2:0b:e6:88:06:55:8e:f2:40:cf:08:14:07:af:
2c:3e:5f:b7:88:35:e7:b2:1a:20:83:a4:28:9e:ed:
2e:60:21:ad:48:2f:b9:6c:f2:72:07:8c:e2:b4:32:
a0:dd:c5:8d:33:bc:10:09:c5:84:2f:b0:87:7b:93:
ef:2f:7a:c0:3c:a8:42:f6:21:bd:54:d3:63:0b:a0:
18:cc:a8:00:7f:19:f0:50:09:94:7e:e6:ed:3f:94:
43:60:3a:00:4f:1c:85:3f:56:b4:e7:16:8f:f5:e9:
c8:07:49:25:9d:b7:e2:76:de:5c:ac:30:d5:71:87:
64:90:bd:66:3f:28:58:35:9d:6c:19:d2:b2:8c:ca:
27:03:67:28:5a:10:7c:ea:0f:40:a3:72:cb:18:5f:
2d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:88:F1:6A:74:A8:82:53:26:E4:49:BE:AF:DD:AF:4B:C5:8D:39:0B
X509v3 Authority Key Identifier:
keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:f3:d2:96:d2:fc:b0:85:ef:99:ad:ef:31:09:96:f3:65:8d:
01:0f:cf:af:e4:d0:e1:2f:24:bf:f2:f3:1c:c2:ea:8c:de:f7:
da:b7:e8:a8:10:69:b7:20:d1:9c:98:65:6f:72:e9:b3:29:3d:
23:fe:74:ef:96:5b:a1:fd:9f:13:b4:7a:1b:ff:bc:cb:77:59:
34:e2:fa:99:ac:f9:16:a7:c1:a5:7a:f5:eb:3b:5e:8e:ee:f3:
4b:36:55:ec:d6:62:b8:16:35:73:9f:6c:19:a6:0b:0c:da:77:
2b:c4:f8:39:d0:23:2a:68:a6:a2:7f:7d:d1:11:ea:19:e4:8c:
02:a5:84:5a:5a:40:55:23:3b:31:05:a0:63:7a:c1:75:19:99:
ac:c7:17:d4:89:02:1b:15:4f:09:be:9c:cd:6f:5f:71:c6:a0:
36:45:fa:cd:0d:e4:ea:8c:5a:e9:19:66:70:3e:01:5e:bc:28:
be:d0:d3:5b:5e:91:af:4b:96:82:89:9e:12:26:11:9f:a3:33:
70:23:06:aa:a0:cb:b5:69:16:a6:c7:04:48:44:d5:04:d4:cc:
bc:de:84:87:82:6d:49:a9:d4:45:7b:8a:ce:19:6c:29:7f:c5:
6b:7f:62:3f:44:a7:88:ef:fa:e0:09:79:d5:15:cf:cd:92:3e:
ca:ac:1d:63
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw
NERBMTJGOUQwHhcNMjUwMzI4MTQyNjM0WhcNMjUwNDA0MTQyNjM0WjAYMRYwFAYD
VQQDEw02N2U2YjE5YS0wZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsx3Ms0DWtlnsBdJm1uK9gQhGXGU7CDZFez5UkxlowbPgQGdxGomTv0mftCj4
pnweXcQW8sIKYfrI8q7UaFFX1bF6A35g0MqxFijW8aRZD48X4N88fKfkQDsDPDh5
GOCIvMHDHz23TJPXsgvmiAZVjvJAzwgUB68sPl+3iDXnshogg6Qonu0uYCGtSC+5
bPJyB4zitDKg3cWNM7wQCcWEL7CHe5PvL3rAPKhC9iG9VNNjC6AYzKgAfxnwUAmU
fubtP5RDYDoATxyFP1a05xaP9enIB0klnbfidt5crDDVcYdkkL1mPyhYNZ1sGdKy
jMonA2coWhB86g9Ao3LLGF8tOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWI8Wp0
qIJTJuRJvq/dr0vFjTkLMB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE
ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM
NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OUUzQS8xOTdFQzBCNjFEODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpK
VFpJNTFTcnpXc0VFMmhMNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAU89KW0vywhe+Zre8xCZbzZY0BD8+v5NDhLyS/8vMcwuqM3vfat+io
EGm3INGcmGVvcumzKT0j/nTvlluh/Z8TtHob/7zLd1k04vqZrPkWp8GlevXrO16O
7vNLNlXs1mK4FjVzn2wZpgsM2ncrxPg50CMqaKaif33REeoZ5IwCpYRaWkBVIzsx
BaBjesF1GZmsxxfUiQIbFU8JvpzNb19xxqA2RfrNDeTqjFrpGWZwPgFevCi+0NNb
XpGvS5aCiZ4SJhGfozNwIwaqoMu1aRamxwRIRNUE1My83oSHgm1JqdRFe4rOGWwp
f8Vrf2I/RKeI7/rgCXnVFc/Nkj7KrB1j
-----END CERTIFICATE-----
Generated at Fri Apr 11 15:08:44 2025 by rpki-client