Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
File: wfSjmGHK0883hCGN7aegXoUvIn8.mft (raw, json)
Hash identifier: wh2SfUROmzZotVMOF5PW1reggDT1BcMiJvNVzaQuepg=
Subject key identifier: F3:DE:F2:A6:02:4D:8F:A3:39:45:1C:3B:2E:74:25:FD:25:47:28:29
Authority key identifier: C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F
Certificate issuer: /CN=A912DB97/serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F
Certificate serial: 05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
Manifest number: 04
Signing time: Sat 29 Mar 2025 07:33:23 +0000
Manifest this update: Sat 29 Mar 2025 07:33:23 +0000
Manifest next update: Sat 05 Apr 2025 07:33:23 +0000
Files and hashes: 1: wfSjmGHK0883hCGN7aegXoUvIn8.crl (hash: Dw77R0Ybvs2jtZg5wmwxja4N8J846A4ZLrrtJQEdJ+E=)
2: 28F87D180A1611F0BC8FD10DC4F9AE02.roa (hash: kwR4HiPzGhpK5SEPo+ThTcF7apxZuPZzTOyt4h1UDag=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DB97
Validity
Not Before: Mar 29 07:33:23 2025 GMT
Not After : Apr 5 07:33:23 2025 GMT
Subject: CN=67e7a243-5c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:69:5a:51:7a:04:03:fa:29:cf:db:c4:50:
2b:29:2c:fa:69:a7:28:96:1a:bd:ba:dc:81:02:6c:
90:05:3c:d6:47:5b:50:5d:44:31:c1:d8:63:cb:65:
a7:4d:55:fb:98:18:bf:89:06:37:eb:48:d0:4c:15:
bd:8a:1b:80:a6:4f:f3:87:95:e6:25:8c:53:f3:a3:
25:a8:5e:a7:92:44:63:89:85:76:5a:12:d0:7b:f0:
10:27:35:19:66:8c:0f:cf:66:0f:01:cb:67:03:b4:
cb:44:8f:1b:ac:91:56:65:39:04:14:8b:a9:bd:1a:
65:98:90:4e:01:1f:42:e9:bd:82:e0:3a:79:38:4a:
ff:ee:07:d6:23:79:51:cf:4e:c3:5a:e5:ad:1a:fe:
67:75:b0:0a:a0:a7:07:5e:96:17:0a:d0:b6:a6:4b:
cf:92:45:61:67:95:0d:23:ac:54:d0:cc:ac:8f:5a:
ba:67:b9:89:b0:e3:aa:bc:fa:8f:d1:19:f7:1b:44:
5d:71:83:ac:18:45:ba:20:db:43:1f:75:c5:42:3e:
ac:8e:bc:79:4b:b4:af:3b:e0:47:38:e6:86:4f:01:
9c:48:0b:33:26:6c:2e:ec:c9:79:41:d3:3f:c0:20:
54:48:63:35:a7:88:0b:6c:f7:82:f8:53:d1:e3:9a:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DE:F2:A6:02:4D:8F:A3:39:45:1C:3B:2E:74:25:FD:25:47:28:29
X509v3 Authority Key Identifier:
keyid:C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:22:d3:d4:70:b2:ea:6d:62:c8:ab:e5:7b:36:86:ae:ac:b9:
fc:d5:ce:19:be:b0:8e:33:55:31:11:af:5c:d8:25:c5:5e:32:
b3:21:fe:76:48:35:9c:50:24:99:f6:2c:44:31:52:40:0e:10:
68:6a:96:b5:35:76:bf:85:c0:b6:54:ec:02:08:3d:a8:80:80:
fe:79:1e:43:e7:7f:00:61:25:5c:7c:a3:23:5a:31:72:65:1b:
1c:a3:39:63:e6:d2:7b:a5:3f:c6:55:f4:b7:b3:0e:df:53:53:
6a:45:f8:63:20:c5:a0:d0:18:97:3a:80:53:64:7c:3f:6c:6c:
59:6e:21:b9:f9:ba:1c:13:57:ed:06:fe:4b:57:bf:45:5e:d7:
59:67:60:c1:63:98:78:00:8f:c6:94:b0:81:06:56:48:9e:99:
bf:04:6d:c4:6c:7b:c0:5e:f8:ce:1f:e6:d1:9f:7f:b8:9b:77:
56:e2:55:75:ce:0d:43:58:78:a7:f2:3c:81:72:9a:b8:69:f2:
60:86:41:89:73:6e:77:a0:bc:0d:a1:00:6e:c9:34:96:2f:35:
7e:fb:be:eb:57:f4:f6:3a:e2:e8:8b:e1:d8:97:76:08:52:29:
17:9b:48:f4:10:10:f6:59:f2:bc:6d:76:95:bd:d3:71:1c:6f:
aa:15:75:42
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
REI5NzExMC8GA1UEBRMoQzFGNEEzOTg2MUNBRDNDRjM3ODQyMThERURBN0EwNUU4
NTJGMjI3RjAeFw0yNTAzMjkwNzMzMjNaFw0yNTA0MDUwNzMzMjNaMBgxFjAUBgNV
BAMTDTY3ZTdhMjQzLTVjN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzR2laUXoEA/opz9vEUCspLPpppyiWGr263IECbJAFPNZHW1BdRDHB2GPLZadN
VfuYGL+JBjfrSNBMFb2KG4CmT/OHleYljFPzoyWoXqeSRGOJhXZaEtB78BAnNRlm
jA/PZg8By2cDtMtEjxuskVZlOQQUi6m9GmWYkE4BH0LpvYLgOnk4Sv/uB9YjeVHP
TsNa5a0a/md1sAqgpwdelhcK0LamS8+SRWFnlQ0jrFTQzKyPWrpnuYmw46q8+o/R
GfcbRF1xg6wYRbog20MfdcVCPqyOvHlLtK874Ec45oZPAZxICzMmbC7syXlB0z/A
IFRIYzWniAts94L4U9HjmijRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU897ypgJN
j6M5RRw7LnQl/SVHKCkwHwYDVR0jBBgwFoAUwfSjmGHK0883hCGN7aegXoUvIn8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJEQjk3LzVEOEI1MjY0MEEx
NDExRjBCNDNEQzU4NkM0RjlBRTAyL3dmU2ptR0hLMDg4M2hDR043YWVnWG9Vdklu
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvd2ZTam1HSEswODgzaENHTjdhZWdYb1V2SW44LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJE
Qjk3LzVEOEI1MjY0MEExNDExRjBCNDNEQzU4NkM0RjlBRTAyL3dmU2ptR0hLMDg4
M2hDR043YWVnWG9VdkluOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAsi09RwsuptYsir5Xs2hq6sufzVzhm+sI4zVTERr1zYJcVeMrMh/nZI
NZxQJJn2LEQxUkAOEGhqlrU1dr+FwLZU7AIIPaiAgP55HkPnfwBhJVx8oyNaMXJl
GxyjOWPm0nulP8ZV9LezDt9TU2pF+GMgxaDQGJc6gFNkfD9sbFluIbn5uhwTV+0G
/ktXv0Ve11lnYMFjmHgAj8aUsIEGVkiemb8EbcRse8Be+M4f5tGff7ibd1biVXXO
DUNYeKfyPIFymrhp8mCGQYlzbnegvA2hAG7JNJYvNX77vutX9PY64uiL4diXdghS
KRebSPQQEPZZ8rxtdpW903Ecb6oVdUI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:54:31 2025 by rpki-client