Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
File: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft (raw, json)
Hash identifier: 0dFGAZ4NHi0Kfc5ucshB5vnlyALwESj6Uzv/tqdGR7k=
Subject key identifier: A8:98:6F:7F:7E:4E:B6:89:22:EC:56:63:65:4F:F7:E7:19:D3:8B:DA
Authority key identifier: 5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4
Certificate issuer: /CN=A9188D0C/serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4
Certificate serial: 02C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
Manifest number: 02C5
Signing time: Sat 29 Mar 2025 01:41:09 +0000
Manifest this update: Sat 29 Mar 2025 01:41:08 +0000
Manifest next update: Sat 05 Apr 2025 01:41:08 +0000
Files and hashes: 1: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl (hash: bjQFXbUC5TNePdqaxdaFTHB1puXx7XNr1Tfymf1NDZ4=)
2: 42CD71AEE33511EC9EDB371BC4F9AE02.roa (hash: 0dbqZkJLEDn7V9Hw0/4drKsR2U3rKU1wM+bwlHy41IA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 713 (0x2c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188D0C
Validity
Not Before: Mar 29 01:41:08 2025 GMT
Not After : Apr 5 01:41:08 2025 GMT
Subject: CN=67e74fb4-157a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:ea:de:bb:67:f8:28:f9:43:8d:ad:0c:80:
15:6e:c0:03:7b:b7:36:8b:62:86:ff:19:47:2c:c7:
a6:40:0d:ff:00:70:cd:6f:bc:cf:f9:24:f8:0e:ce:
24:4d:d7:8c:75:25:45:87:76:9e:84:1b:13:3e:c7:
e9:ea:9f:4c:10:d4:44:2f:07:3d:75:55:a8:55:42:
c3:b3:e9:43:c5:05:aa:9e:be:42:14:dc:3b:12:60:
df:fe:20:f8:18:8d:21:60:12:00:ce:dd:89:b6:c7:
d2:b7:b3:fb:a9:28:0e:59:79:54:fa:1d:31:93:14:
7a:dc:8a:16:19:47:0c:45:ee:8a:c6:2a:fb:10:b4:
86:19:7c:d4:24:41:91:66:05:2e:a8:dc:77:e6:7e:
68:5f:c6:aa:e4:70:fa:ca:c3:5b:83:c2:e9:86:bb:
f2:a2:b0:4c:b7:80:5b:85:36:0c:cc:87:ec:20:de:
5a:32:52:6b:87:60:dc:c5:55:7a:76:d1:f3:4e:ea:
d3:e0:31:cd:3d:44:a1:e1:a8:f2:25:34:90:11:62:
db:a9:05:9f:7d:9f:23:ab:47:4e:dd:cb:4c:b4:31:
75:1d:05:81:d7:bd:b8:44:d4:97:50:a9:29:b0:50:
3b:00:48:05:ca:0a:69:b8:6c:ad:82:2b:bf:bf:04:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:98:6F:7F:7E:4E:B6:89:22:EC:56:63:65:4F:F7:E7:19:D3:8B:DA
X509v3 Authority Key Identifier:
keyid:5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d0:d3:21:2c:97:3a:7b:2f:52:f7:1c:ab:0c:c6:22:8c:9a:
44:a5:9e:75:2f:11:cb:0d:79:00:7f:c0:0b:29:44:97:9e:b4:
36:0c:c9:62:77:1a:3b:55:05:24:ad:ff:f5:13:cb:31:91:eb:
97:61:59:cb:c8:ee:ee:45:e6:8f:93:f8:25:a4:26:e2:e8:54:
a4:b3:86:61:8c:f6:d1:36:78:14:da:27:86:8c:33:93:4c:e8:
ab:10:ad:58:de:8c:d0:23:96:e3:67:ef:b6:82:06:07:dd:b4:
44:62:91:36:e6:5a:16:ff:2d:fb:99:33:8c:72:fb:fb:ca:d5:
a6:1b:8e:b4:76:f3:bd:9c:02:45:d1:2f:09:02:47:1a:13:45:
0b:6e:33:4c:52:df:0b:f5:6b:1c:cc:3e:d3:0a:4a:a8:af:16:
87:32:4f:7a:c1:e1:71:56:8e:12:c9:2b:40:d5:89:92:fa:9b:
b4:03:b4:29:b2:2d:23:f3:ac:7c:4a:48:b2:8b:f8:d3:48:08:
18:39:df:93:d0:30:86:e2:60:76:e0:f9:6b:b2:51:4a:15:eb:
6c:6b:bb:62:b0:26:68:8f:36:55:d7:69:dd:41:bc:18:ba:c2:
2e:20:35:9e:db:c0:73:da:ac:5d:58:c8:a4:d9:cd:fd:25:23:
d1:59:ef:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:35:00 2025 by rpki-client