Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
File: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft (raw, json)
Hash identifier: yOoeWh2SyLXe4TdxZ1HARao2F815T+5l/BNKy2Ln7nY=
Subject key identifier: 28:92:1E:4D:60:BB:16:EF:C9:34:CE:90:4B:3A:2D:72:3C:EF:C7:CD
Authority key identifier: C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD
Certificate issuer: /CN=A91E2176/serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD
Certificate serial: 083D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
Manifest number: 083B
Signing time: Fri 28 Mar 2025 21:01:37 +0000
Manifest this update: Fri 28 Mar 2025 21:01:37 +0000
Manifest next update: Fri 04 Apr 2025 21:01:37 +0000
Files and hashes: 1: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl (hash: CJ7SjUxTeKn+/+rKnQbIapFm7GmxI1V3Oquad78yuB8=)
2: 4A9F953EE29611EF8E06890AC4F9AE02.roa (hash: 75Xx9HK/DSb6cqMFmlY3w1Yvea4hRHDh6jcfeq7uocg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2109 (0x83d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2176
Validity
Not Before: Mar 28 21:01:37 2025 GMT
Not After : Apr 4 21:01:37 2025 GMT
Subject: CN=67e70e31-766e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:01:cd:7b:20:aa:47:74:1a:40:1c:7e:95:
6a:9d:f3:74:7e:62:a9:40:97:73:ea:73:cc:cf:98:
e5:06:86:98:4f:53:d9:01:f2:9c:23:14:0a:6e:5b:
d3:ea:e1:51:ed:d2:af:e9:3c:95:ae:43:8d:23:4c:
39:57:77:00:88:33:3b:64:3c:01:a6:74:af:0b:9d:
d5:66:3b:ad:f5:01:3c:54:25:ae:24:0f:60:cf:b4:
c3:e2:32:ab:64:4f:77:67:23:b9:82:58:7f:ad:a7:
99:5f:58:30:61:d4:9f:c3:80:14:25:81:2f:99:8c:
c7:b0:33:9b:e1:2b:72:6e:0a:ed:13:dd:25:ff:8c:
d6:c6:bf:37:20:0e:70:d7:84:c9:8f:df:7e:2f:bd:
cb:0e:dd:d2:45:2f:19:b4:0f:b8:37:6c:20:76:11:
f0:df:c9:05:1c:4f:cb:6d:58:5a:8a:c3:32:53:b1:
43:1a:2b:48:5d:98:c7:d7:c7:79:99:cf:b2:aa:0f:
ab:9c:17:5a:28:e0:7d:a6:27:27:8e:74:5e:17:b0:
da:cd:d0:bd:59:cd:dd:26:d7:6e:ef:c0:aa:45:53:
0d:a5:ff:b1:cd:40:04:1b:2f:8f:32:6c:bd:3b:70:
5d:5b:cd:80:4a:fc:70:b4:0d:e7:82:c8:16:72:7c:
7e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:92:1E:4D:60:BB:16:EF:C9:34:CE:90:4B:3A:2D:72:3C:EF:C7:CD
X509v3 Authority Key Identifier:
keyid:C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:a5:65:bc:0b:18:bf:8c:e0:c8:e4:59:b4:71:cd:72:b3:e2:
b9:88:55:5f:e3:4b:14:8c:00:63:f6:b1:b1:8b:a4:68:69:fb:
47:99:81:51:17:27:f2:26:0b:8d:0d:dd:b0:4e:0b:70:f4:7d:
fe:88:12:dc:de:f1:4b:32:c6:70:6d:66:6f:71:10:60:47:0b:
97:36:61:f1:0b:e7:23:27:f3:d4:95:b5:5a:cc:fc:9b:80:d5:
af:03:5b:64:62:fd:d2:26:e7:d1:02:da:76:b3:51:6d:4b:bd:
b2:20:53:70:26:0e:4b:c3:f7:68:b7:57:df:bb:87:6b:fe:37:
58:e2:8c:b9:1f:67:5e:9d:f5:17:d6:4d:d2:ff:32:56:a9:25:
df:d8:50:cf:89:70:a2:14:29:0c:23:08:24:ee:4c:73:06:50:
44:6f:e2:f9:7d:30:92:1f:93:41:87:4f:04:53:5c:83:e1:f1:
e0:47:c6:2a:8d:8a:c8:15:53:3e:a1:53:15:ce:37:26:a5:76:
9e:e8:4b:8a:9f:ad:e1:80:a2:58:67:6e:1b:f6:2d:70:15:9d:
2e:b6:ca:0c:c2:39:d6:0d:36:15:c2:09:54:5c:ed:17:52:63:
f7:4d:03:8d:08:c4:bb:e8:20:f4:ad:50:dd:d3:a7:d8:fc:81:
08:d6:7d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:44:18 2025 by rpki-client