Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft
File: WWynM84d0W-O7zIxnqXTqLIvkMk.mft (raw, json)
Hash identifier: g7zD/7Anpic1xEnIaH2B08ubf1C0Fg05hLj2oksq8/o=
Subject key identifier: 2C:15:CD:2C:7B:BB:CD:5B:1D:61:60:2A:4A:53:FE:AB:4B:B9:66:CC
Authority key identifier: 59:6C:A7:33:CE:1D:D1:6F:8E:EF:32:31:9E:A5:D3:A8:B2:2F:90:C9
Certificate issuer: /CN=A917126B/serialNumber=596CA733CE1DD16F8EEF32319EA5D3A8B22F90C9
Certificate serial: 07F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft
Manifest number: 07EB
Signing time: Fri 28 Mar 2025 21:10:16 +0000
Manifest this update: Fri 28 Mar 2025 21:10:15 +0000
Manifest next update: Fri 04 Apr 2025 21:10:15 +0000
Files and hashes: 1: WWynM84d0W-O7zIxnqXTqLIvkMk.crl (hash: F6FXf7RmkZHEDBpG61Zp8L7sr4mteBvK8zyxZpAFWf0=)
2: CF4D7C70DADE11EABE8DD41DC4F9AE02.roa (hash: bnHHifqyfmIvk8onUg2t/SyKb3Qse0OgPOBOI1YqMW8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2032 (0x7f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917126B
Validity
Not Before: Mar 28 21:10:15 2025 GMT
Not After : Apr 4 21:10:15 2025 GMT
Subject: CN=67e71037-946a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:c2:f5:6f:b7:9e:d4:ca:22:0f:52:57:e8:
26:8f:99:0d:e5:db:9b:e4:2e:64:c7:54:a7:14:89:
cc:c8:ef:fd:25:b9:3c:1b:d5:92:51:3f:14:6b:59:
79:55:21:d1:45:0b:99:8c:3f:18:70:dc:f3:6c:c7:
63:ec:bf:a1:dd:59:4e:0e:4b:9e:f0:d5:98:0d:10:
57:67:f7:78:4c:3b:6f:de:34:10:f7:3f:f6:b7:2e:
ab:e7:77:b6:ea:e8:5c:8c:44:28:ce:5f:6e:b6:6d:
55:fc:db:e1:80:12:3d:9e:b9:95:09:34:b5:04:6d:
24:5e:9f:94:67:cb:cb:28:36:29:da:2f:95:31:a3:
7f:06:73:c7:79:49:bd:13:e8:ad:0a:17:bc:71:6a:
71:8b:46:29:76:33:74:fb:98:d5:25:3c:29:db:d2:
78:cb:fd:99:4e:2f:57:3b:86:1b:3d:bf:95:07:a6:
d0:5c:ba:6f:c9:83:27:bf:68:cd:1b:6a:bc:4d:26:
c8:23:12:c9:54:fc:e0:0c:37:ff:aa:17:fe:92:0a:
a0:55:a0:36:2f:fb:90:44:d1:63:45:20:55:d1:a0:
ec:c3:af:df:85:65:bc:d2:d8:78:84:b9:6a:5e:a5:
25:13:fd:e3:41:c6:0d:a5:f6:c5:cf:32:ed:cf:72:
bb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:15:CD:2C:7B:BB:CD:5B:1D:61:60:2A:4A:53:FE:AB:4B:B9:66:CC
X509v3 Authority Key Identifier:
keyid:59:6C:A7:33:CE:1D:D1:6F:8E:EF:32:31:9E:A5:D3:A8:B2:2F:90:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:27:e8:8f:81:13:70:db:ae:74:31:7d:a1:5b:ea:1c:7f:5a:
0b:62:13:7d:82:a1:52:7e:e1:cb:48:ca:fa:6f:f4:55:fd:7c:
62:d3:e8:d6:18:30:e7:bb:f6:e5:b4:d5:e8:65:81:59:6c:c1:
56:d3:89:db:5f:fe:d9:c2:31:9a:e3:3a:53:6c:e9:b6:2f:e4:
a6:9d:df:17:fa:50:51:9b:80:8a:3f:7b:90:b2:91:00:8f:d3:
97:e4:a5:77:2d:39:83:2a:34:10:55:1d:cc:6d:c4:4c:bb:94:
7d:b0:17:33:c9:b1:56:22:23:e3:9e:7b:b7:fc:1b:d7:e5:f7:
3e:98:d5:4e:a8:fe:18:8d:6a:0a:66:8b:f3:e3:3b:8c:59:b2:
be:6c:31:10:79:3d:f6:a4:e0:7a:2e:c6:69:e1:2b:f8:51:5d:
c9:c4:be:29:21:93:e4:8a:42:80:32:c2:89:40:5c:73:8b:c2:
bb:29:2f:e0:21:5a:5d:ef:8f:c1:cb:41:ee:fa:52:91:8f:3a:
f3:7f:2b:d7:6f:1f:cb:1e:a4:f6:d8:59:c3:6b:13:18:57:12:
80:fa:da:20:2a:2d:3c:08:c4:f1:3f:e5:7e:82:78:96:c8:b1:
a1:37:d3:40:e2:ce:fa:af:fe:26:b8:80:fb:0d:8e:e5:78:f5:
45:b2:40:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:41 2025 by rpki-client