Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft
File: W1n8tlNB_TN4m_uvqWN98M5ATas.mft (raw, json)
Hash identifier: LxO39cZgwXuCKdkuTlK5CrO2OF/OQjQd4a+4EP46Dz0=
Subject key identifier: 20:A3:0D:D6:F6:FA:28:DB:0D:0C:7A:47:F5:23:AF:F1:26:09:8D:0D
Authority key identifier: 5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB
Certificate issuer: /CN=A91FA5A2/serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft
Manifest number: FC
Signing time: Sat 29 Mar 2025 04:40:25 +0000
Manifest this update: Sat 29 Mar 2025 04:40:24 +0000
Manifest next update: Sat 05 Apr 2025 04:40:24 +0000
Files and hashes: 1: W1n8tlNB_TN4m_uvqWN98M5ATas.crl (hash: aziwtOARhEHK6iGL00GGjtbGJm5hRYD+7uC0Wi3w8VY=)
2: D61299F2D8C011EFB41E1319C4F9AE02.roa (hash: scuWPF8fyZMdaSfCNBdTGSbSe43VNo97CkMVeZgVKFs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA5A2
Validity
Not Before: Mar 29 04:40:24 2025 GMT
Not After : Apr 5 04:40:24 2025 GMT
Subject: CN=67e779b8-c7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:be:1e:03:22:83:f8:fd:99:0c:3b:37:bc:
e4:27:89:36:0b:24:cf:2a:89:ef:64:59:d4:b8:10:
ab:0a:0a:eb:f8:e9:4c:1b:38:0c:cf:2e:fd:d9:96:
3d:b4:09:65:d1:14:40:7b:cc:3e:1f:af:b6:f7:02:
3d:06:a9:8e:e1:c3:31:4a:9a:ce:28:65:b8:83:94:
17:49:7f:53:3c:9b:d4:70:d6:c6:ce:c1:51:4e:5a:
c7:23:17:9e:61:b8:0e:64:74:58:d0:16:01:c4:41:
ff:cc:8b:91:45:bd:6c:fa:95:f7:e2:fe:a4:93:14:
f9:17:33:73:04:c8:87:8f:0e:9c:e4:5e:4d:48:01:
73:b3:8c:13:a7:7a:5e:09:a3:1f:27:29:89:f7:ca:
e5:c3:47:c6:6f:42:21:10:de:40:ea:65:61:90:b7:
80:7c:5a:97:ed:03:d9:be:b6:e3:e3:a6:68:30:22:
5b:0e:62:43:3d:83:33:c2:e7:3a:44:9f:b3:41:f3:
88:29:99:2f:b0:16:b8:97:08:88:0f:a2:81:14:1b:
20:16:1f:11:5c:12:7f:cf:72:bd:46:63:28:2f:f9:
a5:9e:45:ad:be:87:29:5c:79:2b:cb:68:a0:43:c1:
27:e1:86:6c:26:77:40:db:36:82:00:3e:12:14:94:
e0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A3:0D:D6:F6:FA:28:DB:0D:0C:7A:47:F5:23:AF:F1:26:09:8D:0D
X509v3 Authority Key Identifier:
keyid:5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:80:c9:61:6d:9b:5a:6c:2a:98:9d:09:70:7c:a4:2c:ed:2d:
98:c7:a4:d0:4b:8e:a2:dc:e1:56:c5:d2:c7:c9:0e:6a:78:bf:
83:d8:4d:1c:cf:d2:f6:71:0e:61:f3:5c:40:5d:33:00:0d:75:
d1:b3:1c:71:81:ac:44:d5:df:4c:d3:16:7a:91:7c:4b:ac:c9:
89:ad:10:94:66:ac:59:ee:ee:c1:7e:32:1c:2c:5e:4c:2d:99:
41:e3:d6:e1:0f:0a:ec:9a:15:87:83:99:c2:00:01:8f:1f:4e:
7f:75:fc:58:58:27:58:a2:66:11:f0:dc:89:1f:68:6e:87:c7:
74:57:86:83:11:2c:5b:33:ba:d5:58:fd:c9:39:b9:de:56:d1:
05:c2:18:56:3b:b6:97:c4:46:3e:75:3e:f9:07:09:cf:e7:b0:
58:c1:4d:68:0e:40:58:8f:ba:41:a4:95:73:8e:8c:4a:50:25:
02:35:80:56:87:d2:20:95:35:cf:e1:b5:f3:ef:30:36:e3:e2:
d4:26:f5:94:02:7a:23:f9:98:4b:e7:54:13:28:c8:22:80:2a:
8f:22:03:d5:d9:48:4a:99:28:59:7f:9d:5a:bd:04:ee:be:aa:
07:d3:8e:72:0e:da:55:5f:57:90:b0:f0:60:5d:4a:70:61:39:
ab:14:50:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:28:14 2025 by rpki-client