Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft
File: v_WBURjDvN2NWsIxfbvPo5l-NfY.mft (raw, json)
Hash identifier: RuHvvVcBWYPR7RlpzihA67kRno604TxIOGVLFDJx3xE=
Subject key identifier: 8E:91:29:18:0E:1A:0A:13:AD:8C:23:FC:3D:3A:05:92:BA:F7:2D:47
Authority key identifier: BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6
Certificate issuer: /CN=A916DAC0/serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft
Manifest number: C4
Signing time: Sat 29 Mar 2025 05:10:10 +0000
Manifest this update: Sat 29 Mar 2025 05:10:10 +0000
Manifest next update: Sat 05 Apr 2025 05:10:10 +0000
Files and hashes: 1: v_WBURjDvN2NWsIxfbvPo5l-NfY.crl (hash: 7tOjUBGIKkk1xljN8coR1BmEddgtv+l8t+IFKLMY6hQ=)
2: 489B8430DE8911EEB21B9B45C4F9AE02.roa (hash: 4ifq9H+2oUaf4XogyDcgufI74BbBk+/yBuSEMG4BFOQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DAC0
Validity
Not Before: Mar 29 05:10:10 2025 GMT
Not After : Apr 5 05:10:10 2025 GMT
Subject: CN=67e780b2-615f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:2c:ed:59:30:f8:44:5e:ed:64:9f:2d:50:
9f:c3:05:3a:04:6e:60:a8:ab:52:b4:16:8d:07:c4:
59:b8:c6:51:c8:c1:ba:ea:7c:cd:a3:ac:b3:ef:ad:
7e:6e:58:26:2e:4e:f5:20:37:1a:b3:c1:7b:c5:02:
22:63:01:bf:b5:a9:f2:38:3c:09:be:b0:e5:21:de:
c9:a0:72:88:e3:f2:d8:57:87:09:1d:07:be:e0:2e:
00:13:a4:bf:90:4e:3c:ac:7f:a4:cb:c0:37:6f:6b:
0a:28:25:54:43:4b:14:79:bc:e2:73:98:c6:3c:91:
40:04:9e:33:2f:93:a6:cf:e3:5c:c6:56:8f:26:6b:
ad:80:43:74:ca:05:c7:82:60:08:82:a5:8f:3c:cb:
35:8e:9d:71:fc:1a:2f:f8:55:a2:08:a5:48:93:f3:
ef:a3:f2:f9:77:53:3a:06:15:55:65:d3:da:db:db:
6b:6c:f0:75:61:7b:ee:99:4f:82:85:2b:8a:31:58:
46:f5:df:66:f9:58:d5:f4:cf:6b:6d:00:9c:d1:c9:
e8:64:cb:76:7a:90:07:4f:5e:e5:d0:8f:47:6b:f7:
43:eb:30:7a:dc:3b:1d:34:4c:19:81:d7:a5:b7:74:
23:46:bb:b3:d9:7f:74:77:94:43:15:2c:36:e3:0a:
96:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:91:29:18:0E:1A:0A:13:AD:8C:23:FC:3D:3A:05:92:BA:F7:2D:47
X509v3 Authority Key Identifier:
keyid:BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:27:42:2a:18:0f:2c:cf:28:05:75:9d:a3:2a:cc:56:4e:62:
21:05:7b:5a:3d:9e:f2:6b:c0:d7:91:62:d5:1a:3e:b8:64:9f:
8a:4c:8b:dc:bb:0b:8a:67:e6:a9:31:4b:3d:8d:bf:eb:1f:44:
3e:d2:13:01:98:f2:50:3f:c6:a0:5d:1d:e9:b3:ff:fe:16:b5:
a2:37:3b:16:32:d6:70:9f:2b:30:00:fa:8e:73:9c:46:d6:1b:
12:be:b8:d3:11:67:02:87:a8:31:0e:2e:e3:3c:e9:2d:2d:28:
42:d9:b4:35:71:45:ac:2b:45:52:61:7b:34:6a:37:98:fa:37:
56:da:a2:81:99:14:d0:21:88:b5:10:55:d6:ec:dd:c2:78:0d:
f5:59:2d:fc:2f:bc:2c:03:46:e3:43:64:9b:30:12:a0:88:ce:
fc:88:47:2d:d6:c2:3c:fc:4f:36:55:cc:5f:f2:17:62:dd:fe:
20:c9:cc:f1:03:80:bf:f6:cb:8a:71:51:da:e0:18:07:65:dc:
eb:90:dd:ae:28:75:bf:4f:b9:46:ee:fb:d2:cd:4a:5c:86:06:
53:37:92:e2:04:11:b7:64:e9:a6:13:c3:52:50:4e:fc:03:9e:
f3:80:12:95:e1:af:57:d7:52:1e:9e:de:54:bb:c4:fb:5b:52:
5f:de:fb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:01:53 2025 by rpki-client