Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft
File: bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft (raw, json)
Hash identifier: aH7PLRr+xfZI+4MpL8pPon+809ZH/tZBjevuQCG71Zs=
Subject key identifier: 33:AF:21:AE:76:82:85:38:1C:1D:B6:A8:8F:79:2F:AF:D8:F4:80:C4
Authority key identifier: 6F:00:24:6A:85:88:84:8C:3A:17:27:52:F3:2A:E4:EA:30:C6:80:A4
Certificate issuer: /CN=A917983D/serialNumber=6F00246A8588848C3A172752F32AE4EA30C680A4
Certificate serial: 0278
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft
Manifest number: 0274
Signing time: Fri 31 Jan 2025 01:43:09 +0000
Manifest this update: Fri 31 Jan 2025 01:43:09 +0000
Manifest next update: Fri 07 Feb 2025 01:43:09 +0000
Files and hashes: 1: bwAkaoWIhIw6FydS8yrk6jDGgKQ.crl (hash: SqTG7i49EA1eKd1bkfWaztSRLaHc+Tr4XzBlwqpn+r0=)
2: 1F59A248F69E11EC947BBC5EC4F9AE02.roa (hash: IiOrImghzE2Vpf35rEo7vvLgM62zn5Ft6k44BhxCI6k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 632 (0x278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917983D/serialNumber=6F00246A8588848C3A172752F32AE4EA30C680A4
Validity
Not Before: Jan 31 01:43:09 2025 GMT
Not After : Feb 7 01:43:09 2025 GMT
Subject: CN=679c2aad-2110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ef:2f:d9:d7:19:46:b2:a1:35:2b:b2:74:50:
7d:80:95:7c:e1:4f:e0:13:d9:a6:6f:1f:4b:8a:23:
61:0f:29:15:d2:70:c3:5d:bd:57:44:62:67:21:18:
90:6f:6f:43:67:ad:a8:26:95:0a:39:29:bf:a5:6e:
5c:40:d7:a3:03:d9:20:d2:90:70:46:eb:2c:59:09:
10:79:ab:f5:1a:6e:28:24:bb:f4:dd:ab:6f:e2:87:
f1:be:fb:4e:c2:7b:f9:50:5e:0e:c7:dc:5c:04:9e:
8b:8d:7b:ec:9a:32:19:9a:d6:d3:a3:94:05:a6:27:
4d:83:ae:17:30:7e:41:98:0c:af:39:85:d6:b9:c1:
fc:33:4d:c3:3f:54:49:d8:42:e2:6a:87:85:32:bc:
e4:ea:e8:3e:fa:4e:ec:75:5d:cb:82:0f:c8:44:1c:
ab:9f:21:d7:f2:f7:14:c0:67:ad:5b:44:e8:d8:73:
75:87:f5:32:cc:a8:ae:bf:c7:d0:47:2c:74:71:0c:
88:34:de:83:cd:22:90:f1:7e:58:a6:bd:e6:82:83:
67:ba:74:8d:ef:81:d6:68:c9:82:c1:c0:b4:27:f5:
24:72:19:ac:a4:0f:14:ae:64:87:11:ac:29:a0:d9:
b6:5c:db:b8:71:5a:f2:e5:15:a9:67:58:33:a5:b7:
14:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AF:21:AE:76:82:85:38:1C:1D:B6:A8:8F:79:2F:AF:D8:F4:80:C4
X509v3 Authority Key Identifier:
keyid:6F:00:24:6A:85:88:84:8C:3A:17:27:52:F3:2A:E4:EA:30:C6:80:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ea:4e:b9:c4:ed:79:d0:93:a0:2c:e0:26:78:f1:a1:50:b5:
ac:c4:bd:4b:4e:5e:9d:00:ab:c1:a1:d2:9f:bf:95:c2:8f:49:
8f:51:f0:01:11:36:c7:1f:45:8b:34:d7:89:07:04:c1:f9:4c:
80:1d:33:c1:dd:14:63:3a:1d:de:f2:ab:69:81:1a:8a:d4:fb:
06:04:2c:89:b8:80:40:45:5b:67:4a:29:9c:40:4d:d6:35:46:
ad:7e:9c:43:aa:f4:a2:c9:83:93:f6:53:5f:28:42:0f:29:a7:
70:a9:f5:d3:7b:93:96:a2:60:ec:88:b7:87:09:0e:7d:7a:e5:
d4:c4:d0:3c:37:f5:70:e0:d7:a8:58:61:7d:13:c5:9f:83:d5:
40:c3:2d:c6:5c:78:28:18:72:81:2e:13:f9:0b:90:9f:e7:b4:
41:b3:09:01:31:03:38:ec:d1:34:7f:7b:bc:78:b0:4b:8e:cb:
70:11:3a:cc:b8:d2:24:da:b4:ef:13:00:3f:35:04:ee:12:a7:
c2:fa:25:bd:67:fe:a5:5c:87:96:cc:07:a1:c2:ad:f8:92:f0:
cf:72:5c:37:5c:4d:65:97:23:54:71:d4:24:21:04:19:db:71:
4f:1d:f0:9b:17:10:a5:80:4d:37:21:cd:61:01:c3:cb:6a:58:
ed:2f:bc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:06 2025 by rpki-client