Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
File: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft (raw, json)
Hash identifier: EJW5qgIXM8/Uxfgx5fpOlZNtzx7p3+XLu9EefM2CZnk=
Subject key identifier: C1:E1:47:A1:D9:14:4F:FE:8B:2D:0A:5D:D3:47:AB:D4:AE:BA:A8:84
Authority key identifier: 59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2
Certificate issuer: /CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
Certificate serial: 042B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
Manifest number: 0429
Signing time: Sat 29 Mar 2025 00:34:33 +0000
Manifest this update: Sat 29 Mar 2025 00:34:33 +0000
Manifest next update: Sat 05 Apr 2025 00:34:33 +0000
Files and hashes: 1: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl (hash: XMg/W5CtPmlOyf7crtM7cLhCJcPbS7tYkw1AOH8uLO0=)
2: 94FA2A66174B11EF84A2715AC4F9AE02.roa (hash: eatKOCejKXvfU8SPSsA1QwT7IjJRshkBsQk4DWD5N0U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1067 (0x42b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147016
Validity
Not Before: Mar 29 00:34:33 2025 GMT
Not After : Apr 5 00:34:33 2025 GMT
Subject: CN=67e74019-aebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:5e:06:01:27:0b:bb:9a:05:66:2e:c6:6c:d9:
35:5e:50:94:28:7a:52:2c:58:fe:66:93:31:1a:c5:
5e:40:98:50:9a:f0:0a:4f:a9:98:67:b9:da:e3:19:
11:e7:ee:bb:6c:1d:81:0e:a6:77:8e:73:39:1e:d5:
4a:c9:1c:00:2e:da:4f:b3:19:fa:8e:07:28:42:65:
e2:6a:53:6e:c4:a3:63:a4:1a:8f:38:65:67:d6:f6:
30:c1:8f:4f:29:3b:df:37:df:73:8c:7a:60:fa:7d:
0f:ad:34:ec:9f:88:5e:fe:84:00:11:74:37:06:4c:
41:d3:32:61:76:a8:a0:83:e4:29:88:10:7a:64:73:
1e:31:cc:2d:fc:4c:a8:11:55:96:9f:cd:37:12:c1:
bc:a5:cc:a7:14:05:20:a4:b3:53:39:6f:a1:1e:d7:
5f:03:0f:ab:47:1b:ca:6c:4f:36:26:dc:ae:5a:88:
47:7a:30:19:9d:3b:bb:dd:27:7b:de:22:bc:9c:0c:
21:b6:48:c1:c3:ca:c6:df:cb:1c:66:4b:d0:35:19:
1f:92:46:99:49:96:c4:1c:7b:25:63:31:d4:7a:25:
74:9b:84:f7:4b:94:ec:7d:78:5b:b7:55:68:23:ae:
84:a2:9d:aa:4e:64:cd:c4:56:d9:26:a7:26:99:84:
0f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E1:47:A1:D9:14:4F:FE:8B:2D:0A:5D:D3:47:AB:D4:AE:BA:A8:84
X509v3 Authority Key Identifier:
keyid:59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:ef:37:5d:60:7c:80:81:db:12:b3:0e:c9:7f:5e:26:73:d0:
02:78:13:95:78:97:62:23:02:a2:5d:6e:7a:a7:6b:bb:5d:3c:
97:3c:f8:78:b3:e3:01:67:aa:64:94:28:b0:fa:07:05:84:ce:
b6:c6:20:88:68:f3:22:d7:f6:8b:a4:81:68:87:31:ed:a2:56:
f9:16:ac:58:b9:a2:5c:53:a6:1f:17:fe:82:b2:82:a8:6c:ab:
9f:e4:b2:93:93:7f:0e:53:d8:79:45:2a:6c:d2:1b:d1:0d:16:
00:10:ae:f4:3c:c7:15:d4:a9:a1:68:61:28:81:3b:d6:9a:6f:
44:79:99:a7:ef:b2:40:7f:d6:ee:bc:24:5a:2f:2a:47:a7:88:
a8:80:b4:26:cc:c2:9c:7d:8c:13:4e:67:5d:75:d5:67:3e:ff:
1f:e1:f5:2b:c4:69:f4:07:a2:a7:1a:f1:58:b1:c3:69:ab:97:
10:47:a8:c7:e7:84:21:c2:86:74:3a:80:62:47:a4:e4:1c:67:
78:0e:ba:2f:43:c5:74:dc:78:74:1f:08:c0:2b:55:19:d3:5a:
6a:97:f6:ff:41:02:ff:cf:a9:56:6f:f7:39:ee:c9:94:0f:4a:
90:1d:42:51:e3:01:e0:72:57:7a:29:ba:04:72:55:23:40:3d:
e1:33:02:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:58:25 2025 by rpki-client