Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft
File: WkoaHy2STehVVccdPbZrm7DkNkM.mft (raw, json)
Hash identifier: 4F7rydgdOJ5YwRwS4kTSrVmvS340K7ZOxC1rlETgDpQ=
Subject key identifier: 5F:43:AD:EC:7D:54:C7:0B:5C:33:B9:1F:6A:62:B0:24:5E:49:0C:E8
Authority key identifier: 5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43
Certificate issuer: /CN=A91C2E87/serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643
Certificate serial: 0BFB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft
Manifest number: 0BE3
Signing time: Fri 28 Mar 2025 18:57:59 +0000
Manifest this update: Fri 28 Mar 2025 18:57:59 +0000
Manifest next update: Fri 04 Apr 2025 18:57:59 +0000
Files and hashes: 1: WkoaHy2STehVVccdPbZrm7DkNkM.crl (hash: X40eNc/sCHPDIWDPPwYDngVDfv95pdjZks/3QvrK/Kk=)
2: 4EB9FBD63CDE11EAB553996BC4F9AE02.roa (hash: 5Pl69Ojf2kmCxfLr0FSueU3iqe1LbesPtFydiCfx1IQ=)
3: 4F4A22E23CDE11EAB553996BC4F9AE02.roa (hash: 5dNjtUvyRJQ8rKds7M86B2djQAg4WheDaP9EfyZTla8=)
4: 504C179A3CDE11EAB553996BC4F9AE02.roa (hash: bqf4/Z70iNIgP7UdmtL9Kr8ESUyHQDpHnkrIZZGc+Nc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3067 (0xbfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2E87
Validity
Not Before: Mar 28 18:57:59 2025 GMT
Not After : Apr 4 18:57:59 2025 GMT
Subject: CN=67e6f137-01db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:95:ed:71:ac:34:56:44:c0:c4:7e:4f:64:
70:a9:e0:72:2e:da:7c:f6:bd:92:15:61:40:ea:0e:
ba:ee:91:70:fe:8e:8f:82:da:f1:06:3d:8a:23:c9:
20:9c:79:07:db:5f:ff:f1:6c:1c:98:8a:4f:99:e8:
af:a4:2a:57:c9:56:bc:22:1f:c3:00:c7:c2:8a:9e:
59:39:9b:41:b3:f5:91:44:f5:6e:ea:fb:5e:b9:65:
9b:1c:f1:18:69:c6:15:87:e1:06:11:9f:2d:08:b1:
bd:47:cf:ad:ea:68:a4:91:1e:9d:1d:ee:0e:6f:ae:
0a:ae:41:4f:e6:62:ed:09:27:92:73:20:56:fa:36:
a4:68:87:63:e2:2d:ba:9f:ea:cd:28:5f:a2:fe:45:
49:ec:8d:00:36:fd:c4:9a:46:8b:a1:7f:08:a6:66:
cb:d0:75:24:bc:84:0c:e6:6e:10:4c:2a:6e:16:bf:
48:27:7e:16:4b:c4:98:e6:49:f2:1b:fd:c7:3d:16:
a4:ad:4e:f8:ad:cb:65:a9:b1:78:68:6f:d1:c4:a6:
2d:7f:a9:f9:f0:e1:5f:9f:28:3a:da:f0:5d:61:35:
82:ec:7b:ea:1f:28:82:27:01:18:ea:67:98:5a:25:
5d:65:20:70:8d:26:d9:4d:6b:0c:94:9a:56:c8:20:
12:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:43:AD:EC:7D:54:C7:0B:5C:33:B9:1F:6A:62:B0:24:5E:49:0C:E8
X509v3 Authority Key Identifier:
keyid:5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:fd:ac:3f:51:80:8d:cd:2c:18:96:4d:a7:0c:f5:b9:e0:73:
48:86:4b:27:99:08:cc:50:31:5a:5e:b2:5f:da:85:ec:ff:81:
9a:68:25:9e:4a:5b:6b:26:52:f4:6a:57:e7:ab:6a:2e:36:65:
d7:98:98:ed:b9:49:54:39:be:8d:11:c6:76:d1:a3:6a:2e:18:
ad:91:e2:86:72:a2:e1:09:22:a1:70:a0:b7:f5:a3:f1:de:58:
fd:9f:e4:f1:5e:99:81:c5:6d:d2:2e:f4:6a:8c:ae:6c:6e:ac:
11:18:b4:c5:75:aa:f3:8f:98:c0:5e:09:e1:92:e0:3f:ea:3b:
87:97:cd:97:6d:3b:2b:a0:dd:d2:81:68:9e:e8:32:8a:5f:52:
2f:f0:2d:10:c9:b3:8f:26:ce:e5:19:0f:ba:61:80:ac:87:85:
8b:b4:64:57:94:ec:6d:50:85:26:ef:c0:b1:f6:82:32:f8:39:
eb:90:2f:44:6e:a8:40:f5:75:55:eb:69:f6:23:c4:30:8c:24:
b5:9a:cb:70:a0:a9:6a:f2:b9:a8:28:61:d0:76:c6:b5:84:53:
0b:e5:4c:c3:b6:80:49:78:ee:43:e0:00:c8:35:a6:c8:ff:ee:
90:e1:a2:05:a3:3b:12:d2:01:11:5a:a7:14:46:73:00:b3:34:
d2:14:f7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:30:21 2025 by rpki-client