Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
File: wN0sVYV6kv_nzcuilJmD1IpCudg.mft (raw, json)
Hash identifier: zOOLrGDM+6Xf1vV27Cp639wBwVvCVBUuVjjlX9bpDG0=
Subject key identifier: 8C:D8:1B:32:8F:A5:B0:04:B0:A3:87:DB:63:44:A0:5A:60:BB:9F:7B
Authority key identifier: C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8
Certificate issuer: /CN=A91326FF/serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8
Certificate serial: 73
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
Manifest number: 72
Signing time: Sat 29 Mar 2025 06:08:37 +0000
Manifest this update: Sat 29 Mar 2025 06:08:37 +0000
Manifest next update: Sat 05 Apr 2025 06:08:37 +0000
Files and hashes: 1: wN0sVYV6kv_nzcuilJmD1IpCudg.crl (hash: nCFa2wgnRL1PWW7FS31tFYQlAd7DmYIAVEQSQcJZD4I=)
2: 002622285F8F11EF9D02A046C4F9AE02.roa (hash: 1n7jLRYTaVw5u2mwQ6NatrZ/xHlr3ZhbJEnbXC5Rplo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91326FF
Validity
Not Before: Mar 29 06:08:37 2025 GMT
Not After : Apr 5 06:08:37 2025 GMT
Subject: CN=67e78e65-185a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:2f:c2:e3:c8:95:d0:f9:c4:05:b4:14:6d:
6a:88:c6:37:b7:8e:0d:3c:0c:76:3f:00:d1:57:37:
3d:93:a5:df:12:26:66:fd:eb:26:fe:9b:eb:f6:cc:
57:c6:5a:c4:04:b3:a2:57:27:da:bc:07:73:d7:ab:
3b:47:6c:ab:da:01:2b:11:a4:17:e2:85:31:e4:97:
14:59:94:12:18:e0:23:83:4d:79:c2:b5:67:18:33:
7f:56:a4:5e:b9:ce:7a:3d:b1:54:c8:f2:77:9a:e2:
7b:28:bc:37:bb:01:65:04:e2:05:bf:1e:26:51:fa:
ee:c1:19:02:7c:06:5b:3d:b2:b0:5e:45:3b:61:45:
89:8c:b4:13:d5:e6:5c:43:ef:c8:41:82:25:db:1b:
a9:74:f7:b3:4b:89:28:58:00:72:4a:53:34:c9:1b:
a3:46:70:66:f8:9c:5c:29:80:61:2d:6b:91:97:bd:
79:5c:2c:1c:2b:eb:45:bb:da:3e:2b:2f:14:54:30:
f3:bc:66:ea:66:9c:f0:c2:01:ec:80:a4:97:5a:c2:
4c:f0:ec:4e:87:ac:2f:76:88:d8:98:8b:4e:9e:b4:
e0:45:68:03:ad:8b:8a:47:20:6c:63:34:67:70:eb:
19:05:95:45:9e:3b:89:83:6e:d1:a7:1e:e7:c7:77:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D8:1B:32:8F:A5:B0:04:B0:A3:87:DB:63:44:A0:5A:60:BB:9F:7B
X509v3 Authority Key Identifier:
keyid:C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:9b:a1:c5:60:65:f2:db:ff:d0:30:5e:80:d8:ea:f3:70:e5:
c5:bf:36:9e:41:4f:b6:fd:d6:73:f0:76:ed:e9:3f:31:d3:6b:
b8:2e:ac:4f:f7:60:d3:78:2b:c2:57:25:21:80:34:9a:6d:0f:
c5:78:63:d1:2b:6c:4f:c1:7e:eb:59:d1:47:37:47:7b:6e:b2:
22:f4:de:0f:12:37:35:1a:90:28:92:1a:a5:21:49:60:3d:4e:
43:ec:db:13:01:97:97:89:7d:21:64:eb:25:c3:e4:32:12:bf:
e1:71:b9:32:61:82:2f:b4:fe:f4:93:8b:d7:56:af:ad:02:39:
f6:86:76:d5:a7:7e:d0:19:b9:3c:cf:8f:0a:8a:2a:c8:cc:7b:
ad:dc:84:ce:72:4a:22:f3:a2:b0:45:0b:99:64:97:fb:04:e5:
30:31:44:b7:02:4e:2f:bf:1c:ca:07:8a:08:56:ed:05:d6:22:
27:92:ba:0e:c9:f4:fc:13:6f:af:96:89:3e:a0:37:ae:65:a7:
b8:37:06:12:95:9a:77:b7:87:18:6c:a2:d0:fc:d6:6c:cc:73:
3d:45:ea:55:21:79:5a:f6:76:b4:83:6c:d8:aa:6a:48:99:5f:
74:68:73:6a:cb:c3:f4:97:87:e8:41:7a:b5:b5:4a:dd:17:90:
e1:2b:3d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:27:54 2025 by rpki-client