Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/wHCklbOD5Z1FcbaxfYqSiartGCU.mft
File: wHCklbOD5Z1FcbaxfYqSiartGCU.mft (raw, json)
Hash identifier: WuOGxvk/vu1HGhVyuAt6VjEHS+lAhF75CirXA/WlbQk=
Subject key identifier: 43:7F:6E:99:BF:DE:C5:AA:8F:6F:6C:CA:C4:37:5D:DA:9E:85:03:49
Authority key identifier: C0:70:A4:95:B3:83:E5:9D:45:71:B6:B1:7D:8A:92:89:AA:ED:18:25
Certificate issuer: /CN=A911AE4A/serialNumber=C070A495B383E59D4571B6B17D8A9289AAED1825
Certificate serial: 01F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHCklbOD5Z1FcbaxfYqSiartGCU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/wHCklbOD5Z1FcbaxfYqSiartGCU.mft
Manifest number: 01E8
Signing time: Wed 21 May 2025 02:00:44 +0000
Manifest this update: Wed 21 May 2025 02:00:44 +0000
Manifest next update: Wed 28 May 2025 02:00:44 +0000
Files and hashes: 1: wHCklbOD5Z1FcbaxfYqSiartGCU.crl (hash: sBRHUVohcm+PPg18kMFQUHR8dZQBipJWZLi4QW6270A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AE4A, serialNumber=C070A495B383E59D4571B6B17D8A9289AAED1825
Validity
Not Before: May 21 02:00:44 2025 GMT
Not After : May 28 02:00:44 2025 GMT
Subject: CN=682d33cc-b1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0e:c2:32:be:86:7e:b3:07:87:83:60:14:83:
84:3f:3a:28:f2:e4:36:82:3f:da:e3:8e:aa:71:58:
18:55:1c:fa:4b:11:56:1d:70:92:41:00:6f:ad:ad:
96:c6:65:80:d7:e0:2e:39:c8:65:e9:3c:28:8d:4e:
cd:2c:dd:ac:47:f5:48:ae:f6:4b:90:50:e0:38:75:
58:e1:5d:82:5f:d3:a8:44:39:26:5d:1e:04:1a:36:
2b:7d:78:a3:f9:6e:13:11:36:1f:19:d1:7f:6b:56:
86:61:b3:0e:fe:44:cb:24:20:c6:5d:4e:88:0f:ac:
2c:b8:39:30:b9:03:c9:ed:61:09:31:4e:fa:ee:8f:
4a:0d:8b:7e:c2:b8:7b:ac:22:99:77:a1:0c:65:71:
88:eb:20:1c:35:3f:72:76:0f:da:45:ca:5c:47:e1:
24:a8:31:fe:34:19:49:c4:de:4d:93:16:57:38:56:
72:4c:f8:4f:46:5e:a5:12:a2:2e:72:3f:29:56:42:
71:d0:22:22:f8:b7:8f:60:d4:4d:a1:4b:4b:97:c4:
2e:d8:bd:8e:0e:dc:2f:e9:c2:8b:98:4a:8c:58:d8:
97:64:bd:51:17:3f:3a:77:27:a2:f3:06:43:04:ce:
ba:6d:39:28:15:86:99:30:5c:56:d5:ba:97:b6:09:
e9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7F:6E:99:BF:DE:C5:AA:8F:6F:6C:CA:C4:37:5D:DA:9E:85:03:49
X509v3 Authority Key Identifier:
keyid:C0:70:A4:95:B3:83:E5:9D:45:71:B6:B1:7D:8A:92:89:AA:ED:18:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/wHCklbOD5Z1FcbaxfYqSiartGCU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHCklbOD5Z1FcbaxfYqSiartGCU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/wHCklbOD5Z1FcbaxfYqSiartGCU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:a9:bf:11:20:04:dc:cc:9d:01:8e:ca:9e:33:39:7f:60:1c:
92:d5:c0:a0:76:6d:27:66:df:c5:3f:44:77:6b:d9:2d:fb:7b:
ab:00:ab:a7:24:69:49:66:91:d7:e9:88:59:e7:92:0f:4c:03:
a0:cf:d6:f4:22:89:20:67:90:9f:37:b5:ed:39:c0:49:a4:e0:
b0:3b:31:b0:b0:a6:44:31:df:a3:3a:71:d6:f0:3b:74:9a:76:
e3:39:c6:b4:18:74:05:07:09:bd:ef:7d:b9:22:b4:ff:c8:d3:
ca:07:eb:ef:5c:74:3d:f0:d2:56:5c:d7:8c:e8:00:8d:54:73:
46:af:8e:22:a1:fd:1e:4d:20:7f:c6:7b:7e:89:d5:3d:0b:76:
f2:07:eb:ea:2c:2a:4f:e2:cc:44:d6:d3:09:70:d6:8d:d4:19:
80:e9:3e:7a:51:76:f1:56:4a:02:86:61:b9:99:46:b3:ce:6b:
79:67:8e:2a:a7:fc:1e:65:77:a1:0d:30:f8:51:8e:1b:36:2d:
39:a9:b1:a4:f9:39:c2:42:99:7a:47:90:e4:1a:20:61:07:df:
8d:01:95:4d:00:11:d8:b5:e6:19:81:70:83:04:d9:05:77:be:
25:19:e3:bd:56:19:a5:84:ed:81:df:c6:1a:cd:88:f7:bb:f3:
36:f9:5a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:56:36 2025 by rpki-client