Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
File: wTdkoKY6d2fzpHXXqBro3xiv4I0.mft (raw, json)
Hash identifier: 1K7XgZMYv8ec3uWldAY8OXUGwRwxuWvqMUK9gYZgAvg=
Subject key identifier: D5:12:4A:BE:65:15:3E:A0:6B:C4:89:3C:CF:E0:8C:66:14:C0:58:6B
Authority key identifier: C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D
Certificate issuer: /CN=A919941E/serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D
Certificate serial: 019D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
Manifest number: 019A
Signing time: Sat 29 Mar 2025 02:56:14 +0000
Manifest this update: Sat 29 Mar 2025 02:56:13 +0000
Manifest next update: Sat 05 Apr 2025 02:56:13 +0000
Files and hashes: 1: wTdkoKY6d2fzpHXXqBro3xiv4I0.crl (hash: 6FY6PeDT4M89mlhToI7iIvQGGk33kjQFDFL0O7keZ1o=)
2: 7FB6349E967111ED94CA8D6AC4F9AE02.roa (hash: IkBbAKpYbcppJK4s7Lux0mr/S6wEZBpwnFhMZ3gHdyY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413 (0x19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919941E
Validity
Not Before: Mar 29 02:56:13 2025 GMT
Not After : Apr 5 02:56:13 2025 GMT
Subject: CN=67e7614d-1bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:80:01:ee:6a:11:6b:42:e5:0d:00:3b:ba:7f:
68:8d:2a:89:d1:08:cf:0d:92:a4:6f:fd:18:3f:cb:
ad:1a:6b:05:e8:46:9c:b3:d5:75:1d:9f:31:7a:4a:
7c:c3:e5:b3:f7:3d:01:21:68:e3:ed:59:80:1f:a0:
58:e5:5c:2c:58:19:4f:bd:23:a0:e5:33:b6:ca:93:
fc:65:fe:c8:04:97:34:70:bf:19:71:ef:25:16:70:
6f:82:c6:59:1b:55:dd:5c:63:1c:08:cc:a4:2f:93:
ec:9b:98:b2:79:44:f5:83:85:d6:da:de:bc:17:e6:
e5:7d:f2:7f:11:47:06:6e:c3:60:ca:94:ce:0a:25:
a1:84:68:34:0a:63:6d:81:1f:76:b4:48:64:f1:02:
6a:76:25:72:b4:71:47:3e:38:e9:5a:8d:58:27:3e:
89:a4:ea:8b:41:f0:77:0f:ca:df:af:b7:be:2f:ec:
46:b2:94:c6:c7:31:3f:76:3e:61:b7:5f:9e:a5:1e:
05:21:42:41:8f:45:dc:26:54:0f:25:4a:92:fe:2c:
d1:39:38:16:c1:0f:c4:40:ae:ea:61:0d:0a:2f:2e:
c9:d0:07:a4:69:52:eb:8c:00:5f:fc:11:aa:f1:40:
85:34:4b:b4:4f:c1:c3:5c:02:57:72:1b:2a:75:54:
5e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:12:4A:BE:65:15:3E:A0:6B:C4:89:3C:CF:E0:8C:66:14:C0:58:6B
X509v3 Authority Key Identifier:
keyid:C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:40:68:5f:7e:8e:b8:b8:eb:00:5a:71:e5:8d:11:62:23:4b:
60:33:c3:c8:1e:54:0a:93:36:90:80:5a:6f:9f:d0:25:5d:9f:
0f:5a:bc:1a:e9:55:e8:7a:a0:32:03:d5:8f:63:0c:f1:da:5d:
05:73:0e:05:db:77:03:dd:e1:92:ab:5a:c6:ea:ce:08:e7:6a:
3b:c7:5b:76:c1:15:e6:7a:99:83:10:9b:19:7f:8f:79:66:0f:
39:75:84:2d:1a:c9:04:d2:d8:74:0e:6f:74:89:75:24:2d:24:
cc:67:da:42:7b:c6:1c:d9:bd:19:d5:d1:89:ca:22:6b:cd:f3:
c2:11:52:d5:bc:de:1b:8e:7f:70:19:d8:c5:1c:b7:4d:23:2d:
c7:3b:ee:ed:25:ca:79:86:87:13:b3:64:5f:7e:f3:cc:8d:be:
97:c1:81:10:8a:53:5d:22:f2:0d:9a:66:1b:db:2c:4b:6d:12:
3c:25:6d:4f:db:bf:ef:72:11:af:03:e3:5f:74:e2:65:20:97:
f0:dd:f3:5f:7d:99:71:80:4f:0f:a9:ec:57:dc:82:93:74:6b:
e5:58:70:8c:05:bf:45:56:b2:c5:75:23:87:8c:cb:59:f4:2e:
69:50:af:8a:bd:cf:a2:c5:c6:eb:db:92:7a:d2:8d:70:54:37:
57:e3:b5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:26:21 2025 by rpki-client