Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
File: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json)
Hash identifier: 7GWLU+HQirbMA1V0HHLzLJH0H0TCs1AcNhd0vrQBZzw=
Subject key identifier: F7:90:79:1E:86:4F:BC:BD:79:20:B1:C8:70:B4:56:BE:7F:9E:57:B7
Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12
Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
Manifest number: 5B
Signing time: Fri 31 Jan 2025 06:07:11 +0000
Manifest this update: Fri 31 Jan 2025 06:07:11 +0000
Manifest next update: Fri 07 Feb 2025 06:07:11 +0000
Files and hashes: 1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: C3g4Xdtf/ZqZijFFO9jriHizoAyt+6Z8LboMG8IBub0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
Validity
Not Before: Jan 31 06:07:11 2025 GMT
Not After : Feb 7 06:07:11 2025 GMT
Subject: CN=679c688f-8e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:90:a2:07:f2:d2:bc:15:9f:0f:ff:15:b3:
48:ea:3e:a7:71:5e:3f:b4:17:32:00:71:3c:5b:ea:
d5:ba:98:d4:55:b2:1b:6b:e7:74:a1:ff:ca:3a:af:
2f:89:c6:90:b7:0f:16:e1:68:cf:80:4a:2b:cc:93:
08:f8:d5:71:af:e6:db:d1:87:2c:91:8c:8f:c6:e0:
60:e3:89:1e:d8:71:7c:c2:cb:05:0f:e4:fd:bb:96:
cf:2a:7e:c0:e3:a3:bf:fc:fe:4d:5f:41:4c:16:05:
e5:8a:ce:1b:40:f2:07:d5:4e:5d:79:e3:e0:20:36:
b4:89:38:7b:e6:3f:e6:91:90:a8:f5:38:63:be:87:
74:e1:cf:d5:c0:94:c5:5f:be:25:8f:c4:80:67:8d:
14:06:a6:0b:51:6b:b4:af:eb:ee:1c:66:d5:43:d9:
92:28:5b:0f:92:2e:0b:18:32:15:c4:e2:2b:96:de:
04:90:af:f9:cd:aa:e6:86:e1:51:ea:f7:ed:6c:eb:
e3:08:77:e3:79:c7:e0:11:9e:13:d6:6f:97:79:a0:
8a:68:ca:a6:2c:ad:99:5e:ca:a9:04:f3:29:87:ae:
2c:61:86:45:8a:40:14:02:6a:77:26:f1:4d:42:dd:
30:21:30:45:64:18:e6:c8:2b:cf:f6:da:34:c9:b8:
93:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:90:79:1E:86:4F:BC:BD:79:20:B1:C8:70:B4:56:BE:7F:9E:57:B7
X509v3 Authority Key Identifier:
keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:01:56:16:2c:d5:08:d6:ed:a4:91:17:40:97:29:a6:e8:e6:
df:6c:c4:86:51:e0:ed:26:ba:ab:7d:0f:09:30:11:a4:c6:f5:
35:d9:65:21:77:b8:0c:d9:e0:4c:fe:9a:47:6f:2c:92:4e:d3:
22:c2:c7:92:ea:07:0f:9e:da:26:bd:ec:2b:c3:81:23:02:8d:
fa:3c:91:52:12:27:eb:43:0b:c1:38:a3:ed:6d:db:fb:4e:3b:
32:1f:bc:b0:24:ac:64:f0:3d:29:4f:f1:ee:7e:86:e2:b3:e5:
4b:1b:7b:c2:ea:01:87:61:71:86:61:e1:c6:79:9d:f8:14:d9:
1e:1e:de:8c:09:d3:8b:1a:ef:c8:6c:1e:38:5e:14:5f:75:43:
a4:6e:9a:80:14:8b:73:52:4d:48:a6:98:95:d5:35:14:85:38:
13:a5:13:2e:63:04:2d:91:70:d5:f4:ce:89:70:d7:f1:c4:73:
06:e6:ef:4e:d3:fb:72:cf:c2:a4:e2:48:62:e3:60:5f:3a:b2:
9e:3d:31:63:15:68:66:2e:78:21:12:bf:7d:80:2d:d4:1b:36:
b4:0e:cb:ff:43:f8:3a:07:bd:57:6b:0a:f5:b6:03:05:3a:b6:
1a:13:5b:f8:42:21:d5:0b:5f:41:61:24:cf:fb:f7:c7:73:d0:
aa:85:76:c6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
M0JCMDExMC8GA1UEBRMoOTcwNkJGMTIxOTM1NEQwMThDMTU4NThDRTk3Njc5RkU0
M0U2QjMxMjAeFw0yNTAxMzEwNjA3MTFaFw0yNTAyMDcwNjA3MTFaMBgxFjAUBgNV
BAMTDTY3OWM2ODhmLThlMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+9JCiB/LSvBWfD/8Vs0jqPqdxXj+0FzIAcTxb6tW6mNRVshtr53Sh/8o6ry+J
xpC3DxbhaM+ASivMkwj41XGv5tvRhyyRjI/G4GDjiR7YcXzCywUP5P27ls8qfsDj
o7/8/k1fQUwWBeWKzhtA8gfVTl154+AgNrSJOHvmP+aRkKj1OGO+h3Thz9XAlMVf
viWPxIBnjRQGpgtRa7Sv6+4cZtVD2ZIoWw+SLgsYMhXE4iuW3gSQr/nNquaG4VHq
9+1s6+MId+N5x+ARnhPWb5d5oIpoyqYsrZleyqkE8ymHrixhhkWKQBQCancm8U1C
3TAhMEVkGObIK8/22jTJuJNBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU95B5HoZP
vL15ILHIcLRWvn+eV7cwHwYDVR0jBBgwFoAUlwa/Ehk1TQGMFYWM6XZ5/kPmsxIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzQkIwL0MxMkU4NDJDNTY2
ODExRUY4RTZBNzc1REM0RjlBRTAyL2x3YV9FaGsxVFFHTUZZV002WFo1X2tQbXN4
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbHdhX0VoazFUUUdNRllXTTZYWjVfa1Btc3hJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz
QkIwL0MxMkU4NDJDNTY2ODExRUY4RTZBNzc1REM0RjlBRTAyL2x3YV9FaGsxVFFH
TUZZV002WFo1X2tQbXN4SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAMsBVhYs1QjW7aSRF0CXKabo5t9sxIZR4O0muqt9DwkwEaTG9TXZZSF3
uAzZ4Ez+mkdvLJJO0yLCx5LqBw+e2ia97CvDgSMCjfo8kVISJ+tDC8E4o+1t2/tO
OzIfvLAkrGTwPSlP8e5+huKz5Usbe8LqAYdhcYZh4cZ5nfgU2R4e3owJ04sa78hs
HjheFF91Q6RumoAUi3NSTUimmJXVNRSFOBOlEy5jBC2RcNX0zolw1/HEcwbm707T
+3LPwqTiSGLjYF86sp49MWMVaGYueCESv32ALdQbNrQOy/9D+DoHvVdrCvW2AwU6
thoTW/hCIdULX0FhJM/798dz0KqFdsY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:31:32 2025 by rpki-client