Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9CB/00D6CE4EB6D011E2B6830AB668865CEE/WHWg6apyuWJyxu1EVcFM2I01uVw.mft
File: WHWg6apyuWJyxu1EVcFM2I01uVw.mft (raw, json)
Hash identifier: foLy0Ryl7JhswFR5vtvRrX+aVaTSk2RsLKzo2m7/a8Q=
Subject key identifier: A0:99:5B:BD:08:30:A7:2E:19:61:62:DF:C6:B8:87:ED:83:5B:C3:C1
Authority key identifier: 58:75:A0:E9:AA:72:B9:62:72:C6:ED:44:55:C1:4C:D8:8D:35:B9:5C
Certificate issuer: /CN=A91AD9CB/serialNumber=5875A0E9AA72B96272C6ED4455C14CD88D35B95C
Certificate serial: 311A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHWg6apyuWJyxu1EVcFM2I01uVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD9CB/00D6CE4EB6D011E2B6830AB668865CEE/WHWg6apyuWJyxu1EVcFM2I01uVw.mft
Manifest number: 311A
Signing time: Wed 04 Dec 2024 15:24:55 +0000
Manifest this update: Wed 04 Dec 2024 15:24:55 +0000
Manifest next update: Wed 11 Dec 2024 15:24:55 +0000
Files and hashes: 1: WHWg6apyuWJyxu1EVcFM2I01uVw.crl (hash: aIWb0ibo8PmyLkA21pZVKtlYNdlOtcO73/U/xWGPEFQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12570 (0x311a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD9CB, serialNumber=5875A0E9AA72B96272C6ED4455C14CD88D35B95C
Validity
Not Before: Dec 4 15:24:55 2024 GMT
Not After : Dec 11 15:24:55 2024 GMT
Subject: CN=67507447-eee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:3d:41:ba:3d:2c:26:c3:61:84:fa:5b:e8:
b2:94:de:26:4b:fa:0a:b4:a9:e2:d7:48:ae:b7:84:
38:cb:82:86:18:d9:d6:8b:2c:66:fd:55:1b:44:f7:
29:2a:5d:d4:3b:a3:e2:d0:e4:63:83:fc:be:78:68:
c4:a6:4b:d3:b4:0b:01:cf:c5:6d:e7:c9:e8:f3:b7:
5e:06:9c:a3:b0:72:45:d3:c3:5e:4b:6b:64:26:7f:
17:b7:74:d7:eb:2e:ff:15:36:5f:bf:f2:04:a2:20:
c9:35:06:05:03:65:9c:d3:41:3a:3f:ec:8a:56:fd:
3c:f0:e5:0e:8e:17:7e:4d:45:80:b0:8a:7c:c6:f8:
a7:0e:86:61:8a:2f:37:b9:85:df:3b:88:ac:df:90:
5a:61:30:3b:ab:91:72:25:db:22:51:83:8e:38:93:
03:b3:51:89:a2:92:b5:45:89:87:53:82:a3:c0:52:
55:7f:25:2d:f2:d6:cf:65:36:8f:9e:42:4c:d2:a1:
06:0d:af:99:52:ad:11:c8:36:73:67:99:d8:20:4a:
e6:94:91:30:17:2e:99:5c:48:27:25:c9:1b:f7:76:
e1:98:21:47:57:62:bb:59:aa:3b:99:2f:48:02:03:
5e:1a:eb:77:a0:82:04:fc:8a:50:58:22:3d:6f:ed:
33:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:99:5B:BD:08:30:A7:2E:19:61:62:DF:C6:B8:87:ED:83:5B:C3:C1
X509v3 Authority Key Identifier:
keyid:58:75:A0:E9:AA:72:B9:62:72:C6:ED:44:55:C1:4C:D8:8D:35:B9:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD9CB/00D6CE4EB6D011E2B6830AB668865CEE/WHWg6apyuWJyxu1EVcFM2I01uVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHWg6apyuWJyxu1EVcFM2I01uVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9CB/00D6CE4EB6D011E2B6830AB668865CEE/WHWg6apyuWJyxu1EVcFM2I01uVw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:da:ea:6e:f2:37:09:01:25:55:81:66:c1:ad:a0:fb:bd:a7:
50:04:a6:0e:e2:63:7d:1b:d0:b5:fe:58:c6:b0:41:28:d9:2a:
e8:0a:eb:71:05:28:86:6a:56:57:16:f7:d6:8c:4f:f9:7a:50:
cd:d9:5b:f8:e9:13:ce:59:7f:67:c5:aa:13:97:a9:4c:ab:82:
79:5f:ed:49:e5:42:29:1f:10:d4:62:07:e5:76:9b:71:57:2d:
e0:66:ee:b5:30:f1:4e:43:35:26:91:04:6f:2c:1f:0a:56:45:
b6:53:0b:52:ac:59:34:c8:6f:5b:b1:cb:4c:54:7c:0a:d2:d8:
2b:b1:74:2e:5f:aa:f6:d9:19:33:12:13:66:39:3a:57:44:6d:
e3:77:c9:ec:26:0b:8c:b1:99:1e:f9:44:c1:14:75:a0:e2:c1:
64:dd:40:32:96:21:0b:d5:b4:da:34:a6:0b:69:c5:9b:4f:18:
26:af:e0:fc:97:2f:1d:99:e6:62:55:36:82:55:6f:65:cf:ef:
b6:ce:09:57:f8:a2:34:b1:9f:ab:b3:26:d8:88:71:ab:a3:bc:
47:8a:ea:82:c0:34:9b:c1:91:5f:91:29:50:eb:9d:ac:86:99:
4d:c2:ae:33:ff:86:88:25:8c:c3:3c:87:7b:bf:be:8b:65:9e:
0e:f7:c1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:41:27 2025 by rpki-client