Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft
File: WbbWzXMF8t7sK45hPF2PSUJeADk.mft (raw, json)
Hash identifier: n/oOSAIoer1M3sJwCGQcRJAxHGcRDXSS5yuJqb6ZV4M=
Subject key identifier: BF:7A:7B:9E:24:EB:0F:0E:7E:2E:F7:89:E1:7A:DC:CD:F1:04:BF:4B
Authority key identifier: 59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39
Certificate issuer: /CN=A9185FD0/serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft
Manifest number: 0152
Signing time: Sat 29 Mar 2025 03:37:36 +0000
Manifest this update: Sat 29 Mar 2025 03:37:36 +0000
Manifest next update: Sat 05 Apr 2025 03:37:36 +0000
Files and hashes: 1: WbbWzXMF8t7sK45hPF2PSUJeADk.crl (hash: /UkJvuz49SvyaA8XJyXOjEpbB6+Eqh2vssNIRVQVysk=)
2: 9E5F4D0060E111EEBD81AD43C4F9AE02.roa (hash: CtHJodJQnL5Xz0yuYtNWAz2VQ1bux6VI2UVz4UoYjHI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185FD0
Validity
Not Before: Mar 29 03:37:36 2025 GMT
Not After : Apr 5 03:37:36 2025 GMT
Subject: CN=67e76b00-a4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:6d:b7:fe:10:ef:10:23:78:a6:58:26:7b:
7d:18:de:ac:e7:af:84:13:0c:78:c5:18:42:98:7d:
3e:64:ec:54:65:32:b8:6c:90:2f:e8:22:a6:d5:9e:
e5:3d:73:81:81:f4:99:1a:19:32:7b:3f:45:f0:13:
17:fc:61:bd:42:48:8b:94:02:f7:ab:87:09:62:21:
5f:81:e8:d8:21:f5:df:66:17:7d:be:2e:ec:e7:4a:
1a:74:b8:d8:e2:e7:70:1e:9c:5e:bb:f6:08:00:92:
7f:bb:c2:43:ae:c4:fa:cb:1e:1c:18:69:94:0c:c1:
fa:e8:c6:4b:14:75:8d:eb:f0:28:01:4b:07:ee:0a:
96:29:a8:89:c9:c2:38:05:3b:b4:2d:ae:39:b1:60:
c1:8d:a1:4f:8e:46:ed:03:11:31:2c:fa:18:27:08:
1e:3b:7c:03:7a:f9:92:99:20:88:18:f2:a1:0d:c2:
cc:f6:96:f6:9f:cf:2f:b0:31:9e:cc:9e:53:91:53:
dd:d4:60:77:4b:13:2a:16:21:d8:3c:b8:55:d5:80:
ca:6d:e2:00:9a:82:e5:99:0e:74:bf:85:03:b1:67:
9f:c4:3e:ad:54:8d:d5:bf:9d:13:93:4b:54:c0:f1:
fa:59:5e:c4:c3:29:5c:81:09:e8:82:3b:a5:d3:c3:
6d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7A:7B:9E:24:EB:0F:0E:7E:2E:F7:89:E1:7A:DC:CD:F1:04:BF:4B
X509v3 Authority Key Identifier:
keyid:59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:15:f9:33:d0:02:a9:76:ea:9f:a8:fc:f8:a7:53:f9:50:38:
d6:e2:3a:f8:d4:1a:b7:c7:09:63:b1:f4:fe:43:5e:c6:92:1b:
51:fc:5a:75:e3:6b:68:8f:da:25:87:5f:00:03:9f:b1:a4:8f:
17:05:1f:01:18:ba:ac:4d:33:ff:0b:7a:18:62:2b:84:e2:61:
c7:a0:7a:51:ea:76:6b:e3:36:ba:f1:39:fe:2a:a7:55:f7:18:
4c:59:5a:5f:c3:38:11:41:80:fa:59:e3:0d:a8:7f:5b:95:44:
ad:94:1c:8a:cb:05:6d:37:87:75:69:56:9c:81:79:00:34:37:
14:60:e2:8d:2c:fb:2c:84:40:6b:2b:41:ad:0a:02:3a:e4:15:
16:bf:dd:0f:77:c4:fb:93:41:3b:51:be:d4:0a:05:ed:c1:ee:
7a:4e:e9:8e:d5:ed:6f:1b:75:83:ef:ce:06:2d:32:04:99:f6:
99:d0:be:20:e6:9f:2d:3d:8c:17:bc:3e:18:7f:3f:82:1c:1e:
99:c5:31:30:12:8d:73:77:4f:ba:98:b9:b3:95:a4:79:a1:2b:
43:00:22:69:6c:77:40:be:34:8a:6d:2e:cf:b0:72:a2:0e:06:
61:9a:5c:36:33:fe:85:4d:01:70:28:70:c0:94:42:a0:54:2d:
de:d7:7b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:37 2025 by rpki-client