Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.mft
File: wFrpU0_TnWSMKEQ8SNURu6moyv4.mft (raw, json)
Hash identifier: nzGih7q7cMnt5RAsFTRpYjIcBbECVmgv9CYXdSitkV8=
Subject key identifier: EB:69:AA:36:F3:FE:99:C0:65:86:2C:B6:57:49:CE:AD:74:A4:54:FC
Authority key identifier: C0:5A:E9:53:4F:D3:9D:64:8C:28:44:3C:48:D5:11:BB:A9:A8:CA:FE
Certificate issuer: /CN=A917C11F/serialNumber=C05AE9534FD39D648C28443C48D511BBA9A8CAFE
Certificate serial: 05D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFrpU0_TnWSMKEQ8SNURu6moyv4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.mft
Manifest number: 05D4
Signing time: Fri 28 Mar 2025 23:16:27 +0000
Manifest this update: Fri 28 Mar 2025 23:16:26 +0000
Manifest next update: Fri 04 Apr 2025 23:16:26 +0000
Files and hashes: 1: wFrpU0_TnWSMKEQ8SNURu6moyv4.crl (hash: fptfgQLW2xeEbsrsepNkejXM7BmVA7oZxoOyaCKwaNU=)
2: 2E7B4D90ACD411EBA8C2F944C4F9AE02.roa (hash: 8uYkCiymUELl7yje/MrXgP65UB4+pcTju8RUmqC2c10=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1496 (0x5d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C11F
Validity
Not Before: Mar 28 23:16:26 2025 GMT
Not After : Apr 4 23:16:26 2025 GMT
Subject: CN=67e72dcb-6dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c9:ef:e7:d4:d2:06:b4:cf:e1:9f:8e:23:4d:
89:1c:6c:96:63:f6:1f:32:73:2b:4f:ab:5b:ea:a7:
95:e9:f5:db:82:b8:6a:66:b6:82:4e:41:d9:4b:e0:
4a:32:56:e1:cb:7a:7d:d6:fc:16:83:36:c8:1c:09:
3d:b2:57:23:4d:99:87:01:0b:13:1e:4c:02:7d:ab:
d4:c6:31:e1:3f:4f:f8:47:20:a0:4b:e3:5a:a0:4a:
2a:fe:1d:1a:d5:d5:b1:11:c6:bf:c0:5f:6c:f7:7b:
6b:c2:e8:09:06:d4:02:22:ac:22:1c:fc:c2:97:4c:
d9:65:c2:19:6b:cc:64:7d:e0:f5:fb:2e:a6:55:99:
5a:19:47:b4:ec:24:d5:ed:0e:34:e7:c0:63:e4:8d:
08:8c:a3:31:eb:28:07:77:c8:47:48:b0:60:04:63:
e3:e7:3d:14:77:b5:62:c7:86:5f:aa:33:62:24:6b:
4f:c7:e8:53:f9:42:a2:65:07:ed:eb:b1:a4:6d:66:
88:99:2c:42:ce:cd:9e:9e:38:bd:ca:5d:b1:2d:7d:
69:ed:dd:23:9f:a4:b3:05:ed:d9:d3:7e:46:e2:ce:
dd:e0:ad:5e:04:fd:b4:73:71:7d:7f:81:38:13:a9:
ce:b8:4d:21:9b:d6:2f:07:04:bb:31:62:41:17:e3:
7f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:69:AA:36:F3:FE:99:C0:65:86:2C:B6:57:49:CE:AD:74:A4:54:FC
X509v3 Authority Key Identifier:
keyid:C0:5A:E9:53:4F:D3:9D:64:8C:28:44:3C:48:D5:11:BB:A9:A8:CA:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFrpU0_TnWSMKEQ8SNURu6moyv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:b1:64:82:5a:31:b0:c3:cf:b9:ac:6a:9e:9a:23:68:de:3d:
f2:e8:ad:d5:55:38:f1:20:36:28:6c:30:c4:18:ec:94:bf:fd:
f1:c9:41:58:98:85:6c:b4:3a:65:94:fe:fc:65:f4:79:e4:c2:
78:61:de:81:81:de:87:6a:5f:4a:7b:4d:88:27:6a:16:dd:00:
b1:2f:7d:38:84:10:e5:0c:56:7d:b9:11:21:30:d4:d0:60:00:
86:c0:4a:8a:e5:69:e7:b4:ef:8d:2f:c6:88:da:8a:57:d2:b1:
33:a8:3e:c0:0a:5f:b2:a8:e7:30:45:93:3e:83:3a:fb:48:d6:
60:7a:4f:a2:18:4c:57:0b:59:3e:66:2d:7c:98:47:e8:3a:bf:
25:48:56:51:23:17:05:a5:d4:55:cf:48:ce:5f:3a:6b:14:18:
61:f0:99:76:ca:68:e1:da:ad:f5:75:2c:b6:18:74:5b:5b:61:
bd:f4:4f:d2:72:21:49:2f:45:80:8a:af:24:d8:7b:8d:1a:20:
54:a4:95:77:6e:3a:b4:99:eb:cb:17:0d:64:56:8f:62:94:e0:
b2:73:fd:f4:66:ea:f7:5e:c0:96:73:f8:1f:e0:21:05:02:cf:
8f:c5:cc:6c:01:6f:58:e4:33:e7:ea:1c:09:f7:f3:a6:e0:02:
78:e5:0d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:28:00 2025 by rpki-client