Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft
File: wH1plEfeirTddOwzDml3qwMZJmI.mft (raw, json)
Hash identifier: cjQLTGvtPl01oBE9SI8OVlZL/k2LE6cQygLZtv0rw+4=
Subject key identifier: 66:61:CE:1E:34:3F:1C:6A:68:B6:07:01:BC:0E:70:26:4E:03:08:28
Authority key identifier: C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62
Certificate issuer: /CN=A91A92D6/serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662
Certificate serial: 015B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft
Manifest number: 0158
Signing time: Sat 29 Mar 2025 03:33:20 +0000
Manifest this update: Sat 29 Mar 2025 03:33:19 +0000
Manifest next update: Sat 05 Apr 2025 03:33:19 +0000
Files and hashes: 1: wH1plEfeirTddOwzDml3qwMZJmI.crl (hash: g8m3IeaNwnBNti4NiwLU5yk5/a9bjhDffynaAEr5gFI=)
2: 6065A88AFE0011ED89B23949C4F9AE02.roa (hash: GQuRICCeDjjGixJ45rH35u2ONJ6slmeUzZUnxu6QOIk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A92D6
Validity
Not Before: Mar 29 03:33:19 2025 GMT
Not After : Apr 5 03:33:19 2025 GMT
Subject: CN=67e769ff-9966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:15:64:fb:0d:67:bf:45:49:0c:4b:ff:0c:
67:ae:1b:00:84:45:f7:0a:6d:38:d5:8f:01:9e:4e:
89:f3:80:7f:74:82:eb:a0:cd:1b:5c:b5:b9:25:f0:
4b:11:f9:c9:9a:90:fc:01:f9:6a:f8:7b:ad:8c:de:
0b:b4:2d:4f:52:49:22:0f:4c:d5:9b:0f:ec:bb:3a:
68:3c:bc:7f:36:a6:26:e1:d8:6a:83:3e:d6:2c:85:
9b:de:5b:18:5e:66:a4:7e:fc:bd:f2:69:a6:bf:fa:
ae:7f:7d:56:b3:dc:62:13:03:49:29:61:eb:78:8e:
c9:ee:0e:0e:bb:9f:7e:ee:c8:e3:d6:d7:00:a5:3e:
f6:b6:99:02:7b:81:28:0f:a0:77:4e:70:e9:1d:4b:
ff:60:62:85:22:f9:d4:50:f0:de:fe:e0:7c:fd:d2:
6d:ea:a9:99:c3:b7:f2:4e:21:61:da:e0:da:09:1a:
64:bd:fc:9e:e6:bd:e2:c6:44:22:36:d8:ef:e8:7f:
be:19:5d:04:9d:40:e7:4f:10:aa:67:89:cd:ba:83:
cd:82:a0:ef:a0:a1:db:d5:49:e1:42:65:df:9b:16:
4e:58:ce:be:46:14:07:9e:6a:87:e7:8e:f5:29:48:
2c:f1:de:5c:0d:9b:d7:07:9f:6e:22:89:09:a7:39:
5a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:61:CE:1E:34:3F:1C:6A:68:B6:07:01:BC:0E:70:26:4E:03:08:28
X509v3 Authority Key Identifier:
keyid:C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:b7:cd:6b:49:2e:73:7e:3c:93:84:f0:47:9f:2a:e9:e0:a1:
63:7f:b1:7b:93:6c:58:71:81:c0:39:dc:08:50:67:39:bc:93:
c1:cd:0b:e9:01:35:3d:65:7f:97:f5:60:b6:9b:8e:91:f3:cc:
cc:ef:59:d5:2b:65:05:60:2b:cc:51:24:8b:c9:8f:a5:e5:9b:
3f:9f:25:22:b1:b7:df:21:4b:45:72:be:2c:4a:2c:c7:83:3c:
39:9c:ae:36:9c:c3:a5:15:f8:d2:87:c8:d8:9c:1a:16:24:38:
ad:f4:46:e3:b3:18:31:11:d6:e9:ff:aa:46:1f:75:f2:ef:c2:
73:f4:0d:f4:a6:7c:d2:c4:91:36:d1:75:23:3f:6a:ea:20:a9:
9d:28:58:19:4c:35:bf:e9:01:87:07:8e:1a:44:f9:a3:04:4a:
a6:7f:4e:94:5c:6d:d3:f0:f5:76:8c:f7:ad:08:a1:c0:02:0e:
25:b3:ec:f7:d3:c8:65:72:03:70:d2:37:7e:3d:13:0f:0d:d6:
81:25:22:6e:0d:41:3c:0f:45:06:75:d6:08:ab:4e:6a:61:14:
a5:ba:45:c7:58:af:2f:e7:14:40:62:69:6b:57:8f:93:52:91:
67:e0:ed:b9:81:2e:3c:c5:f1:e6:00:02:4c:70:4b:14:3b:29:
9f:eb:db:97
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkyRDYxMTAvBgNVBAUTKEMwN0Q2OTk0NDdERThBQjRERDc0RUMzMzBFNjk3N0FC
MDMxOTI2NjIwHhcNMjUwMzI5MDMzMzE5WhcNMjUwNDA1MDMzMzE5WjAYMRYwFAYD
VQQDEw02N2U3NjlmZi05OTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt1sVZPsNZ79FSQxL/wxnrhsAhEX3Cm041Y8Bnk6J84B/dILroM0bXLW5JfBL
EfnJmpD8Aflq+HutjN4LtC1PUkkiD0zVmw/suzpoPLx/NqYm4dhqgz7WLIWb3lsY
Xmakfvy98mmmv/quf31Ws9xiEwNJKWHreI7J7g4Ou59+7sjj1tcApT72tpkCe4Eo
D6B3TnDpHUv/YGKFIvnUUPDe/uB8/dJt6qmZw7fyTiFh2uDaCRpkvfye5r3ixkQi
Ntjv6H++GV0EnUDnTxCqZ4nNuoPNgqDvoKHb1UnhQmXfmxZOWM6+RhQHnmqH5471
KUgs8d5cDZvXB59uIokJpzlaNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZhzh40
PxxqaLYHAbwOcCZOAwgoMB8GA1UdIwQYMBaAFMB9aZRH3oq03XTsMw5pd6sDGSZi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTJENi8wREQ5RkRDQUZE
RjkxMUVEQTY5QUMzN0VDNEY5QUUwMi93SDFwbEVmZWlyVGRkT3d6RG1sM3F3TVpK
bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dIMXBsRWZlaXJUZGRPd3pEbWwzcXdNWkptSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTJENi8wREQ5RkRDQUZERjkxMUVEQTY5QUMzN0VDNEY5QUUwMi93SDFwbEVmZWly
VGRkT3d6RG1sM3F3TVpKbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBHt81rSS5zfjyThPBHnyrp4KFjf7F7k2xYcYHAOdwIUGc5vJPBzQvp
ATU9ZX+X9WC2m46R88zM71nVK2UFYCvMUSSLyY+l5Zs/nyUisbffIUtFcr4sSizH
gzw5nK42nMOlFfjSh8jYnBoWJDit9EbjsxgxEdbp/6pGH3Xy78Jz9A30pnzSxJE2
0XUjP2rqIKmdKFgZTDW/6QGHB44aRPmjBEqmf06UXG3T8PV2jPetCKHAAg4ls+z3
08hlcgNw0jd+PRMPDdaBJSJuDUE8D0UGddYIq05qYRSlukXHWK8v5xRAYmlrV4+T
UpFn4O25gS48xfHmAAJMcEsUOymf69uX
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:25 2025 by rpki-client