Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
File: WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft (raw, json)
Hash identifier: 3fvadHP052Y+zicvf3bm+X7qgPw6TXbuG7OXLLs89+0=
Subject key identifier: 24:2B:9B:05:4E:8B:87:76:63:6D:48:41:10:9C:13:7A:91:D0:1A:9E
Authority key identifier: 5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04
Certificate issuer: /CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804
Certificate serial: 053F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
Manifest number: 053A
Signing time: Fri 28 Mar 2025 23:44:30 +0000
Manifest this update: Fri 28 Mar 2025 23:44:30 +0000
Manifest next update: Fri 04 Apr 2025 23:44:30 +0000
Files and hashes: 1: WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl (hash: JfL86da0dn3jJ4zqxzKCt0luWac8CyUOCslcrvheOpc=)
2: F2DDD4EEFB3211EB967B1759C4F9AE02.roa (hash: oSqY7LR2RimEPpc7yB9nwDJKZPsrgKKxfgWlADMHfYE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1343 (0x53f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137843
Validity
Not Before: Mar 28 23:44:30 2025 GMT
Not After : Apr 4 23:44:30 2025 GMT
Subject: CN=67e7345e-6d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:12:5f:76:c5:0b:e7:07:78:7a:50:7f:2c:03:
1d:7e:cc:06:0c:61:d1:74:56:b4:06:e9:2c:20:85:
36:aa:f9:8c:ff:99:c8:c7:58:86:ea:13:c9:48:c1:
5b:17:86:cd:60:4b:99:79:d4:11:7d:0b:01:96:8c:
88:bd:90:1e:83:78:5b:b0:1f:f4:d9:41:3d:f9:a0:
7b:6d:02:d0:9c:54:46:30:ca:55:0d:b2:e4:40:e8:
62:26:b9:c1:b8:64:2b:cd:49:67:32:35:43:83:3d:
4a:c1:56:22:27:c4:9e:cd:6f:74:94:ac:9a:5a:97:
75:90:ce:36:2e:e9:48:6b:a6:e7:92:18:dc:d0:7c:
db:8e:19:b3:47:58:3c:19:98:4a:07:6a:9c:77:33:
08:78:77:e7:74:f0:24:0e:f9:e4:52:e6:1b:e0:1e:
9b:40:7e:c8:00:3c:84:67:28:ce:5a:0a:56:4f:29:
1d:fd:f6:42:58:b8:51:5f:f4:d1:8f:87:b4:d6:d8:
6b:b6:10:a1:33:57:c9:f2:da:dd:7a:5c:50:3a:4f:
21:02:f3:50:d8:c9:8f:2c:e8:7a:10:8e:21:78:94:
ec:9b:b6:12:4f:94:82:dc:b1:27:cc:74:39:67:4e:
13:0d:bd:57:0a:23:2c:7d:2e:d4:a4:65:fa:2a:4a:
23:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2B:9B:05:4E:8B:87:76:63:6D:48:41:10:9C:13:7A:91:D0:1A:9E
X509v3 Authority Key Identifier:
keyid:5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:8e:bd:60:17:b8:7a:52:65:85:68:c5:98:d5:ac:b6:93:27:
cc:e8:73:36:4c:29:c8:57:6b:9e:39:4b:2e:62:79:5e:eb:ae:
a5:07:9a:8b:d8:8f:23:47:57:39:ed:2c:fa:74:76:fd:6e:00:
b0:6b:0f:73:a0:be:51:b9:c8:98:68:14:f6:4a:25:09:b0:e3:
a7:d0:03:40:73:27:b0:5e:5d:c8:08:fd:9e:87:3d:80:00:8b:
3a:67:6d:5f:43:51:0d:1f:99:ab:0b:de:98:9b:6b:9b:f2:e0:
96:fa:38:c8:5e:37:07:b3:54:93:00:ff:41:fe:b2:53:51:47:
4e:43:54:12:f7:cf:66:08:a8:02:6c:dd:4b:36:4e:7b:07:f9:
4b:c2:0c:bf:8b:30:06:0f:5e:58:63:1f:cf:30:d5:f5:01:40:
d3:1f:41:3e:98:e8:ca:e3:a1:40:a1:85:00:f4:85:34:01:5a:
a3:71:c4:88:df:a3:7b:20:c6:80:74:00:53:3b:be:c5:3d:1f:
28:a5:78:aa:7f:ed:4f:0c:5a:a6:28:5d:3f:9a:06:e8:a0:a0:
27:b1:fc:46:8d:06:e3:36:7c:79:33:fc:59:85:6e:24:5e:a3:
f7:e4:b7:01:b2:bd:23:24:de:3b:45:d6:22:dc:bb:82:ec:e5:
af:12:47:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:44:46 2025 by rpki-client