Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
File: WU96C6m9HBOGhHzoljlj_k5xY2w.mft (raw, json)
Hash identifier: vBBhbnvuYPYM+QAxj8jnb8rWoqM/vIszDOaV0kPEXqg=
Subject key identifier: C2:CB:5F:11:34:1D:3B:B7:49:80:1B:55:1E:2D:14:73:D8:4D:31:C3
Authority key identifier: 59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C
Certificate issuer: /CN=A91FFEDB/serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C
Certificate serial: 01D1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
Manifest number: 01CC
Signing time: Sat 29 Mar 2025 02:30:24 +0000
Manifest this update: Sat 29 Mar 2025 02:30:23 +0000
Manifest next update: Sat 05 Apr 2025 02:30:23 +0000
Files and hashes: 1: WU96C6m9HBOGhHzoljlj_k5xY2w.crl (hash: MW6MsNdD2URzygyc4UxnIpdOnSntnq6XPGV2twbiZ0U=)
2: 3CE5C23A550611ED96C8F350C4F9AE02.roa (hash: tljXT8G1BNgl+pD66knbjuh1b8kVzEqRHqexSVNncjs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFEDB
Validity
Not Before: Mar 29 02:30:23 2025 GMT
Not After : Apr 5 02:30:23 2025 GMT
Subject: CN=67e75b40-0aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2e:6b:fd:18:78:99:e5:7f:73:5d:27:4f:33:
af:4f:ff:4e:b8:ea:b6:9b:9b:2d:3a:de:8e:26:9c:
af:bd:3c:21:35:bb:52:a9:9b:cf:dc:fd:8c:07:45:
f5:0d:38:ac:b9:5b:70:aa:11:70:b4:b6:d5:81:ab:
ab:cc:92:64:93:67:a8:cf:52:5e:7c:b8:20:9c:f0:
c9:bd:ac:86:58:ad:5e:21:18:2f:7f:fe:3d:1e:8c:
dc:ab:db:8c:b6:4c:83:47:1e:25:89:43:0c:18:e5:
73:fa:8a:71:73:5f:82:d2:59:68:1c:2d:55:91:d9:
41:0b:5a:23:84:f6:bf:14:c0:9e:df:ca:a1:ca:00:
06:cf:1a:8a:be:3a:3c:7e:da:c5:18:d6:01:90:fb:
dc:c9:dc:5c:6a:e9:11:13:e3:85:b6:02:ee:18:6f:
82:a3:f1:27:c5:b0:dd:08:da:1e:78:bb:b9:95:35:
e3:3f:6b:a8:50:99:09:62:68:21:45:1b:ad:98:5b:
e3:75:ab:cd:a0:f4:f8:16:a2:bd:0f:b7:b1:df:66:
3b:a1:5f:e0:99:4d:7f:e5:c8:20:5e:b0:7f:46:88:
8f:cc:a2:5d:7f:a8:1b:8e:4c:0a:60:63:bc:27:c6:
30:6f:22:b8:45:a0:25:14:7c:3d:1a:bf:71:1f:4b:
78:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CB:5F:11:34:1D:3B:B7:49:80:1B:55:1E:2D:14:73:D8:4D:31:C3
X509v3 Authority Key Identifier:
keyid:59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b3:26:f1:5d:86:13:9a:e4:e9:b1:1a:3e:33:bd:13:11:6d:
42:b0:b1:93:22:2d:39:b1:81:67:8a:34:93:86:8b:fd:34:90:
e7:17:86:1e:d6:ed:5d:2b:33:a5:5d:36:25:1f:79:e8:c8:7e:
29:bc:fd:f3:8e:92:9a:a4:27:30:93:c5:e8:db:ab:ec:65:c4:
b7:00:2e:f1:e0:ca:f9:c7:56:00:92:b6:06:df:03:8a:d5:9f:
db:3f:a8:43:4f:09:93:a7:a7:5e:0c:49:e9:b1:53:5a:eb:50:
81:ec:45:76:b0:65:5e:99:77:5c:5b:0e:7c:1e:44:62:a8:74:
ac:34:65:25:9e:0b:75:94:32:a6:de:37:1d:df:e1:a4:7f:7b:
c5:20:dc:28:42:af:ac:25:8a:64:6d:3d:b0:15:bd:40:9a:dc:
bf:12:98:17:46:f4:d0:c0:8c:44:db:c1:fe:ed:fe:83:3e:80:
05:f9:8a:3e:a0:21:ad:94:13:ea:ff:99:b2:97:cd:9b:3c:0e:
87:b5:f7:09:d1:94:5c:2c:3e:0b:89:0f:c7:e2:f7:fd:a7:e2:
c6:70:60:ff:79:33:28:31:68:5c:4c:bf:69:da:04:bb:08:f8:
5d:dc:fc:c1:22:38:7b:60:3d:ce:4f:70:ed:ab:0f:bb:cc:77:
37:49:60:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkZFREIxMTAvBgNVBAUTKDU5NEY3QTBCQTlCRDFDMTM4Njg0N0NFODk2Mzk2M0ZF
NEU3MTYzNkMwHhcNMjUwMzI5MDIzMDIzWhcNMjUwNDA1MDIzMDIzWjAYMRYwFAYD
VQQDEw02N2U3NWI0MC0wYWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0i5r/Rh4meV/c10nTzOvT/9OuOq2m5stOt6OJpyvvTwhNbtSqZvP3P2MB0X1
DTisuVtwqhFwtLbVgaurzJJkk2eoz1JefLggnPDJvayGWK1eIRgvf/49Hozcq9uM
tkyDRx4liUMMGOVz+opxc1+C0lloHC1VkdlBC1ojhPa/FMCe38qhygAGzxqKvjo8
ftrFGNYBkPvcydxcaukRE+OFtgLuGG+Co/EnxbDdCNoeeLu5lTXjP2uoUJkJYmgh
RRutmFvjdavNoPT4FqK9D7ex32Y7oV/gmU1/5cggXrB/RoiPzKJdf6gbjkwKYGO8
J8YwbyK4RaAlFHw9Gr9xH0t4rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLLXxE0
HTu3SYAbVR4tFHPYTTHDMB8GA1UdIwQYMBaAFFlPegupvRwThoR86JY5Y/5OcWNs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkVEQi8zNEQ1RDdFNjU1
MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9XVTk2QzZtOUhCT0doSHpvbGpsal9rNXhZ
MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1dVOTZDNm05SEJPR2hIem9samxqX2s1eFkydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RkVEQi8zNEQ1RDdFNjU1MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9XVTk2QzZtOUhC
T0doSHpvbGpsal9rNXhZMncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCisybxXYYTmuTpsRo+M70TEW1CsLGTIi05sYFnijSThov9NJDnF4Ye
1u1dKzOlXTYlH3noyH4pvP3zjpKapCcwk8Xo26vsZcS3AC7x4Mr5x1YAkrYG3wOK
1Z/bP6hDTwmTp6deDEnpsVNa61CB7EV2sGVemXdcWw58HkRiqHSsNGUlngt1lDKm
3jcd3+Gkf3vFINwoQq+sJYpkbT2wFb1Amty/EpgXRvTQwIxE28H+7f6DPoAF+Yo+
oCGtlBPq/5myl82bPA6HtfcJ0ZRcLD4LiQ/H4vf9p+LGcGD/eTMoMWhcTL9p2gS7
CPhd3PzBIjh7YD3OT3Dtqw+7zHc3SWBP
-----END CERTIFICATE-----
Generated at Thu Apr 10 23:58:25 2025 by rpki-client