Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/wtD9BoMuxNu3G5uxZbvylkCs72g.mft
File: wtD9BoMuxNu3G5uxZbvylkCs72g.mft (raw, json)
Hash identifier: d7zHYuF3EdSQpzHYUwzr0TBQj0vegTNtPzmkqUlxw+A=
Subject key identifier: 9C:65:02:CA:B3:AD:15:06:6C:01:BC:97:73:EB:B2:E6:CE:73:2E:F3
Authority key identifier: C2:D0:FD:06:83:2E:C4:DB:B7:1B:9B:B1:65:BB:F2:96:40:AC:EF:68
Certificate issuer: /CN=A91E3DA6/serialNumber=C2D0FD06832EC4DBB71B9BB165BBF29640ACEF68
Certificate serial: 06A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wtD9BoMuxNu3G5uxZbvylkCs72g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/wtD9BoMuxNu3G5uxZbvylkCs72g.mft
Manifest number: 069D
Signing time: Thu 06 Feb 2025 21:42:14 +0000
Manifest this update: Thu 06 Feb 2025 21:42:13 +0000
Manifest next update: Thu 13 Feb 2025 21:42:13 +0000
Files and hashes: 1: wtD9BoMuxNu3G5uxZbvylkCs72g.crl (hash: 5OfCZtJHeoQrmdWcNFbQVcZ5OnRuxrIYHgcC4njYV4U=)
2: 339BE48C554111EBAE1AA47BC4F9AE02.roa (hash: qjVSrkRyvnMbrPeElNzTYnbOYThbM8dR4zsheJBUbFc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1699 (0x6a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3DA6
Validity
Not Before: Feb 6 21:42:13 2025 GMT
Not After : Feb 13 21:42:13 2025 GMT
Subject: CN=67a52cb6-842b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:b5:8a:4d:73:06:cf:a3:b8:70:79:6c:df:
65:f6:7a:f2:66:3a:1d:e4:cc:be:5d:2a:ad:b0:9d:
16:9d:83:75:56:00:93:08:52:08:9c:5d:9a:fc:ac:
3e:d4:de:36:c1:2b:74:bf:b0:6a:0b:ae:a1:65:a5:
ba:4c:60:3d:fe:44:10:29:b3:7c:f5:70:0c:5c:73:
df:d2:c1:bc:a1:31:c1:8d:d0:c0:a1:35:b1:1b:f1:
70:e4:93:02:ca:4f:ef:3a:7f:60:47:28:19:87:52:
ac:6a:7b:46:cf:1f:7b:7d:df:a7:50:36:6d:20:7a:
24:cc:74:96:ef:92:e5:9b:0f:14:6c:18:66:ef:45:
d4:8d:48:ff:5a:1f:7e:ce:3a:b8:94:91:fa:06:bf:
f0:e0:49:77:ab:16:ea:c7:48:5f:40:65:cc:64:e6:
27:36:a2:53:55:c0:c6:49:0b:d8:63:0e:e6:b6:45:
9d:c1:08:a7:cb:0c:8c:69:c7:d5:e2:ba:e5:2a:31:
0c:cf:cd:72:7e:7d:31:6c:d6:60:2d:6b:df:5c:a3:
c8:09:ab:65:fb:c6:67:62:4a:20:37:ce:e5:b1:f7:
d3:ed:9a:3c:ba:4e:88:c6:d9:1b:b5:4c:97:42:16:
eb:28:5b:bf:b9:7f:81:11:51:4b:6b:82:85:4a:94:
b9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:65:02:CA:B3:AD:15:06:6C:01:BC:97:73:EB:B2:E6:CE:73:2E:F3
X509v3 Authority Key Identifier:
keyid:C2:D0:FD:06:83:2E:C4:DB:B7:1B:9B:B1:65:BB:F2:96:40:AC:EF:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/wtD9BoMuxNu3G5uxZbvylkCs72g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wtD9BoMuxNu3G5uxZbvylkCs72g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/wtD9BoMuxNu3G5uxZbvylkCs72g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b6:dd:51:a8:34:60:c6:68:4e:df:7c:bc:75:d3:9d:60:4a:
2a:b8:8f:ff:91:47:91:f0:4a:79:52:db:b4:82:3e:e8:c8:43:
11:b3:4a:19:78:cb:54:37:23:63:c9:06:a6:4c:69:aa:58:6c:
3b:ce:f5:20:9c:88:bf:63:77:c6:a6:81:a9:5b:71:b2:f7:54:
81:fd:ec:1b:fb:9d:48:a3:f6:69:b3:33:f9:88:45:2c:a9:f7:
e2:fd:88:0a:ee:99:33:af:41:a5:cf:79:18:b1:96:cd:8a:ae:
5d:ac:67:61:64:b9:0f:8f:32:b6:77:be:0c:ff:b8:0d:f8:04:
cb:c2:96:00:ff:ff:9c:67:59:93:06:4a:c6:1b:d0:df:78:a1:
22:88:5b:c5:a0:b0:81:db:21:9e:35:8b:dc:44:9b:73:c6:d7:
f7:a8:9a:8b:ad:75:28:c9:5d:08:e2:87:ce:ce:fb:ed:ed:b7:
3c:f0:43:e4:64:ee:65:57:c4:03:c9:54:cc:6e:b9:d0:52:6b:
f8:30:14:12:35:19:61:db:08:67:5a:e7:9d:93:7a:42:2a:22:
db:9f:a5:a3:15:65:b4:d0:35:d8:1b:9c:54:b6:3d:a7:c3:63:
26:25:e2:2a:1e:73:12:6d:a4:dc:a7:c6:45:59:88:23:bd:e1:
51:a1:1b:c5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTNEQTYxMTAvBgNVBAUTKEMyRDBGRDA2ODMyRUM0REJCNzFCOUJCMTY1QkJGMjk2
NDBBQ0VGNjgwHhcNMjUwMjA2MjE0MjEzWhcNMjUwMjEzMjE0MjEzWjAYMRYwFAYD
VQQDEw02N2E1MmNiNi04NDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyW+1ik1zBs+juHB5bN9l9nryZjod5My+XSqtsJ0WnYN1VgCTCFIInF2a/Kw+
1N42wSt0v7BqC66hZaW6TGA9/kQQKbN89XAMXHPf0sG8oTHBjdDAoTWxG/Fw5JMC
yk/vOn9gRygZh1KsantGzx97fd+nUDZtIHokzHSW75Llmw8UbBhm70XUjUj/Wh9+
zjq4lJH6Br/w4El3qxbqx0hfQGXMZOYnNqJTVcDGSQvYYw7mtkWdwQinywyMacfV
4rrlKjEMz81yfn0xbNZgLWvfXKPICatl+8ZnYkogN87lsffT7Zo8uk6IxtkbtUyX
QhbrKFu/uX+BEVFLa4KFSpS59wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxlAsqz
rRUGbAG8l3PrsubOcy7zMB8GA1UdIwQYMBaAFMLQ/QaDLsTbtxubsWW78pZArO9o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0RBNi84Q0EwMzcxMDU1
M0YxMUVCOTJDMTkxN0FDNEY5QUUwMi93dEQ5Qm9NdXhOdTNHNXV4WmJ2eWxrQ3M3
MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3d0RDlCb011eE51M0c1dXhaYnZ5bGtDczcyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
M0RBNi84Q0EwMzcxMDU1M0YxMUVCOTJDMTkxN0FDNEY5QUUwMi93dEQ5Qm9NdXhO
dTNHNXV4WmJ2eWxrQ3M3MmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCett1RqDRgxmhO33y8ddOdYEoquI//kUeR8Ep5Utu0gj7oyEMRs0oZ
eMtUNyNjyQamTGmqWGw7zvUgnIi/Y3fGpoGpW3Gy91SB/ewb+51Io/ZpszP5iEUs
qffi/YgK7pkzr0Glz3kYsZbNiq5drGdhZLkPjzK2d74M/7gN+ATLwpYA//+cZ1mT
BkrGG9DfeKEiiFvFoLCB2yGeNYvcRJtzxtf3qJqLrXUoyV0I4ofOzvvt7bc88EPk
ZO5lV8QDyVTMbrnQUmv4MBQSNRlh2whnWuedk3pCKiLbn6WjFWW00DXYG5xUtj2n
w2MmJeIqHnMSbaTcp8ZFWYgjveFRoRvF
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:29 2025 by rpki-client