Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.mft
File: wVykEPC8_6LEyIu2QkHBtuBZb-k.mft (raw, json)
Hash identifier: veMKLF49/eLrY4XS2sQgTrAwQIAoNaiosLloUByxm3o=
Subject key identifier: B6:EA:4F:CD:35:38:F5:9E:D2:A1:F5:59:00:EA:E5:73:B3:F0:C2:2C
Authority key identifier: C1:5C:A4:10:F0:BC:FF:A2:C4:C8:8B:B6:42:41:C1:B6:E0:59:6F:E9
Certificate issuer: /CN=A91906A1/serialNumber=C15CA410F0BCFFA2C4C88BB64241C1B6E0596FE9
Certificate serial: 0620
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVykEPC8_6LEyIu2QkHBtuBZb-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.mft
Manifest number: 061C
Signing time: Fri 28 Mar 2025 22:59:52 +0000
Manifest this update: Fri 28 Mar 2025 22:59:52 +0000
Manifest next update: Fri 04 Apr 2025 22:59:52 +0000
Files and hashes: 1: wVykEPC8_6LEyIu2QkHBtuBZb-k.crl (hash: v8K6HAoWCym9AI9ozSufcVHy+UZ52OVOh1bbjTpcGF8=)
2: 7217203E913011EBB9AC2466C4F9AE02.roa (hash: 8O0NT4WsIyLGWkotGvknnyMK66iuMQbtOR/6QObC27U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1568 (0x620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91906A1
Validity
Not Before: Mar 28 22:59:52 2025 GMT
Not After : Apr 4 22:59:52 2025 GMT
Subject: CN=67e729e8-c48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:66:ff:66:23:f8:f6:34:22:fb:0d:bc:9d:39:
c2:85:c6:2c:7b:31:5e:39:58:e9:95:de:b6:d1:07:
18:14:19:88:0b:de:50:91:b1:aa:43:6d:7a:c8:b0:
df:a6:80:b8:1d:d8:b2:b8:5f:39:4e:ef:bb:93:2d:
10:e1:c4:80:da:67:78:f8:f2:66:8f:02:6d:0c:3b:
4c:22:28:c9:9d:ec:4a:1e:e5:75:42:93:03:66:de:
37:e3:b2:0d:0e:f6:5e:a6:c1:4e:fa:0d:1c:ef:02:
bf:7b:5f:4e:42:d0:e5:6d:15:07:a5:8a:5d:ab:cd:
51:8a:96:87:1e:a5:2d:94:76:e2:d3:ee:6f:1f:8c:
cc:71:f8:a3:35:e2:9d:24:ab:88:0c:3f:8e:e7:ff:
90:f0:2f:f5:2a:1d:4e:16:05:ec:d1:d7:e1:62:02:
05:ad:36:7d:8b:fd:36:df:37:d5:e3:6f:16:76:3e:
1b:0b:7c:42:11:54:bb:16:ed:81:85:47:6b:53:4a:
ba:63:2f:c6:e4:4d:9c:2d:72:52:9c:d1:98:c7:be:
1a:5c:db:18:ce:9f:7e:b4:f3:62:52:2c:39:8a:8e:
ec:8a:8f:2d:01:ce:77:ed:6d:20:6c:59:a5:22:e6:
d0:9d:b3:fe:1b:8f:36:8e:9f:44:4b:60:6a:69:78:
73:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EA:4F:CD:35:38:F5:9E:D2:A1:F5:59:00:EA:E5:73:B3:F0:C2:2C
X509v3 Authority Key Identifier:
keyid:C1:5C:A4:10:F0:BC:FF:A2:C4:C8:8B:B6:42:41:C1:B6:E0:59:6F:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVykEPC8_6LEyIu2QkHBtuBZb-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:52:bd:79:2d:7a:53:51:2d:52:4e:7c:b9:88:f5:b4:2e:ef:
e2:11:aa:41:c6:2a:1f:6f:29:62:1c:c4:70:37:2e:61:6b:68:
fa:ee:ba:0e:3c:01:3e:b7:4d:9a:e7:00:05:ea:c0:6c:db:81:
26:fa:5c:f1:33:d9:4a:8d:63:41:eb:0b:f2:c5:0c:b0:62:13:
7d:f3:c8:37:bb:97:d6:d3:e2:8d:61:3c:50:77:cf:da:14:8f:
f9:3f:1b:61:d9:5c:ce:dd:02:f6:96:56:97:4e:5a:f5:7c:ce:
33:51:ba:0f:0c:15:7d:dd:56:bb:20:8c:c1:8d:a0:8b:cb:b0:
c6:f2:59:40:95:0c:75:ba:cc:75:34:03:6b:23:13:b8:ea:29:
72:c1:3d:fd:d2:5b:57:fd:e7:4a:8a:78:03:d1:a6:d7:71:95:
92:35:1c:f7:2c:e3:35:50:b4:aa:c3:2f:48:07:4b:32:95:60:
ee:b8:97:2e:84:3f:95:f2:45:f2:39:1f:c2:2b:4a:e9:53:b3:
4c:3f:21:41:df:13:86:5a:50:0c:2f:b8:bd:38:dd:76:b1:7d:
a5:d1:fb:72:fc:fb:b2:eb:a3:ed:9f:ad:3d:db:f1:c7:99:fb:
d3:28:d3:67:2f:dc:8f:97:35:90:de:15:bb:64:6d:1d:55:eb:
98:d7:aa:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:36:17 2025 by rpki-client