Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
File: wngM_VepmGmT2_bA1r3u92tFGXI.mft (raw, json)
Hash identifier: yhJp8TPh7kQ3JoPhmaI0W2nzA4MZXx/xs51phh9QfVU=
Subject key identifier: 7B:5E:F8:01:2E:C6:83:0B:58:00:E6:DD:A7:3E:EF:F8:72:43:5F:C4
Authority key identifier: C2:78:0C:FD:57:A9:98:69:93:DB:F6:C0:D6:BD:EE:F7:6B:45:19:72
Certificate issuer: /CN=A91E007B/serialNumber=C2780CFD57A9986993DBF6C0D6BDEEF76B451972
Certificate serial: 0A3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
Manifest number: 0A31
Signing time: Fri 28 Mar 2025 19:59:19 +0000
Manifest this update: Fri 28 Mar 2025 19:59:19 +0000
Manifest next update: Fri 04 Apr 2025 19:59:19 +0000
Files and hashes: 1: wngM_VepmGmT2_bA1r3u92tFGXI.crl (hash: odNG78whBMVeHhZgpPWiAYkzYq0CGJEE2+/X9IKekc4=)
2: 828FBA521E3511EB800DB148C4F9AE02.roa (hash: bbsqzdWTrHCUcjDQ3qFOyBjJItBXTD8UAHJWnxMcjUg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2618 (0xa3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E007B
Validity
Not Before: Mar 28 19:59:19 2025 GMT
Not After : Apr 4 19:59:19 2025 GMT
Subject: CN=67e6ff97-46b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:98:58:c1:40:23:d3:7e:11:c6:65:8f:48:67:
d0:c1:88:56:48:07:da:45:b4:4f:52:5b:f3:2e:4e:
a5:bb:15:27:6c:88:46:57:7a:a9:25:3b:34:47:8e:
aa:27:ab:1f:46:65:34:59:6a:93:c0:e1:af:4c:a5:
40:7d:29:c9:88:b2:80:ca:ab:6e:cc:a6:14:57:15:
32:11:7a:c6:1c:fc:e9:2d:9a:35:b0:a6:62:7c:e9:
37:73:04:11:88:d5:be:de:16:a4:94:c2:6f:b4:5a:
5e:82:06:7a:ae:73:a9:c1:20:6f:35:aa:84:19:65:
51:68:4f:9d:f5:44:ae:cf:40:3f:db:79:1d:01:5e:
49:0b:1c:96:91:2b:47:68:49:a0:8b:b7:9d:00:0e:
4d:46:e8:5c:ad:30:bf:5f:f8:de:87:0c:6e:a1:d9:
cf:68:37:bd:61:73:e6:b2:90:4b:fe:de:b4:bf:67:
ea:55:44:47:06:1d:97:68:93:bf:e6:06:9b:9c:23:
dd:d7:22:37:4a:2a:06:7c:f8:59:44:1d:e4:61:ea:
2e:c6:0a:4e:3d:8a:90:18:a6:35:cc:b5:a5:e7:a4:
cf:26:4d:15:a3:8d:98:f5:56:66:e7:85:bd:b5:92:
93:0e:96:cd:be:76:c6:d6:c6:c5:7b:43:5e:08:26:
21:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5E:F8:01:2E:C6:83:0B:58:00:E6:DD:A7:3E:EF:F8:72:43:5F:C4
X509v3 Authority Key Identifier:
keyid:C2:78:0C:FD:57:A9:98:69:93:DB:F6:C0:D6:BD:EE:F7:6B:45:19:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:79:4e:0d:7b:aa:42:7a:22:29:4f:ce:02:e8:9b:3b:e6:ee:
e8:0f:18:c3:cb:83:f0:67:13:5f:d3:37:49:81:a9:f9:c1:6e:
0b:d5:54:18:8f:26:7e:de:61:fb:21:e4:b1:ea:06:a2:4a:2d:
6b:22:f2:32:f0:fb:04:7d:d8:42:94:bd:ad:13:9a:47:de:7d:
1d:88:9f:04:30:99:eb:83:37:0c:df:41:3b:41:51:c6:4d:7f:
fb:55:43:85:c7:a3:3b:cc:d8:06:d1:f6:98:31:12:15:e3:fe:
7c:eb:ed:0e:3d:8f:99:14:28:6a:4f:da:32:9c:37:06:61:54:
27:e0:4b:b6:40:7f:2f:9c:ea:7d:59:37:dc:a6:16:d6:21:d3:
79:f7:8d:b4:40:4b:b1:2b:d9:3a:05:b5:1b:d6:05:f8:b4:b2:
d0:52:d2:fa:1b:07:15:05:6e:2c:60:c5:dd:2c:da:3f:bf:47:
1d:2d:7e:9e:45:f5:1f:20:6f:d8:9d:b0:df:57:95:82:07:4c:
e0:c7:01:52:5d:b9:d0:3e:28:27:09:7f:14:13:8b:58:e1:c6:
a7:f6:cc:10:bc:1b:ab:93:45:c6:46:0a:d4:d3:12:d7:f1:a0:
79:a4:fa:b9:7a:38:e4:51:78:e5:87:46:c6:c1:dd:68:a0:04:
2f:9a:f4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:49:50 2025 by rpki-client