Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
File: bwlMAO-I_YtwgT1trctUaHYyjNk.mft (raw, json)
Hash identifier: SPlOXzMoK8TpLUBZ8UYRjf8kdAfkW35RnjVX0GbLAIM=
Subject key identifier: D4:AB:18:92:1C:27:D0:B5:8C:7B:A5:44:86:E1:72:5F:DC:56:6B:91
Authority key identifier: 6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9
Certificate issuer: /CN=A91F8E25/serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9
Certificate serial: 2134
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
Manifest number: 2D60
Signing time: Fri 31 Jan 2025 15:33:00 +0000
Manifest this update: Fri 31 Jan 2025 15:32:59 +0000
Manifest next update: Fri 07 Feb 2025 15:32:59 +0000
Files and hashes: 1: bwlMAO-I_YtwgT1trctUaHYyjNk.crl (hash: FKj4B7gj65dtngDMxsCEcqSfRQBWY0X2Nx1fmlAVkYA=)
2: 85D25098E00111E596BC7D1BC4F9AE02.roa (hash: yPmzp7svc596dZgkn+L/aOnXkjFlSGZqF6O1C/6dQm0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8500 (0x2134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8E25/serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9
Validity
Not Before: Jan 31 15:32:59 2025 GMT
Not After : Feb 7 15:32:59 2025 GMT
Subject: CN=679ced2b-a06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:13:92:cc:7a:a7:0a:1a:ce:3d:76:f4:dd:fc:
da:44:88:f4:7e:42:e3:93:59:95:2c:5e:07:3e:44:
e8:af:78:ca:7a:4d:2e:f4:40:54:21:34:dc:bf:a6:
73:b2:18:1d:fa:16:e4:95:73:0c:76:6d:14:50:e6:
8b:48:d3:64:64:8d:23:ba:cf:93:38:01:21:e4:b5:
41:07:b7:75:76:b6:67:12:67:8f:56:af:45:e5:4f:
74:9b:8c:ba:51:ee:77:7b:34:e9:c5:19:7c:9c:75:
87:9a:5a:06:8f:d5:b2:db:73:08:db:b0:5a:83:bd:
2e:7f:91:72:89:71:db:79:ca:71:54:78:53:b6:9f:
37:79:4a:eb:94:57:e2:95:cc:f9:f5:7c:03:f6:3d:
23:52:c2:6c:5d:ed:c3:2e:cd:d0:65:75:ba:fb:f3:
74:e0:c7:87:db:dc:6c:03:39:6c:41:3c:0b:e9:b6:
09:da:f7:1d:d2:17:cf:8d:fe:ff:40:fd:63:15:85:
e8:a5:90:35:07:f9:1c:8e:29:0b:13:95:a7:e3:63:
13:bb:03:c7:7d:eb:f0:d0:7c:cc:64:85:7f:ca:35:
35:57:b4:81:4f:75:6d:15:7b:48:00:a8:42:c2:46:
20:1f:4c:98:c0:3e:05:8d:80:2d:23:aa:ff:bf:8b:
19:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AB:18:92:1C:27:D0:B5:8C:7B:A5:44:86:E1:72:5F:DC:56:6B:91
X509v3 Authority Key Identifier:
keyid:6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:20:dc:62:4b:62:8a:df:e3:f5:68:3c:cd:55:e3:08:d4:ea:
a5:56:7d:fb:8f:9a:33:44:d4:d5:64:04:90:66:16:fb:8d:a2:
7f:c6:b3:4b:6d:68:d0:3d:a1:a2:50:67:39:2f:ce:8d:1f:dc:
2c:2d:b7:57:63:a2:26:1c:a5:2d:9a:fe:55:d7:01:df:ac:f7:
60:17:e6:f5:18:5e:06:b0:ca:30:e5:3d:a4:c6:90:65:d7:6b:
ff:23:08:81:16:fb:11:8c:d6:37:4e:3b:17:12:fa:b7:ba:da:
94:33:f7:b1:f4:45:ce:6c:f0:b5:db:4d:7f:aa:ec:4e:5f:c8:
25:50:aa:9c:0e:8c:19:39:b2:d3:4a:2a:03:89:bc:b0:bb:00:
4e:17:05:af:53:4d:83:82:13:db:91:6b:08:30:30:41:a4:4c:
e4:f7:56:6b:d8:72:2c:9e:7c:de:da:4a:a7:ad:ab:9f:4e:46:
5b:dd:22:7f:d4:3b:4e:5b:81:28:5b:b6:99:11:b9:42:f3:e2:
08:7d:b0:c4:9c:54:6e:20:9f:17:ff:88:42:d7:90:07:18:c4:
bd:1c:01:9d:48:77:8d:3b:88:e5:d7:16:9a:59:ea:73:4e:5a:
a9:10:ee:ea:e2:80:03:a0:70:fc:53:b4:13:30:fe:f6:ec:cb:
11:bb:68:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:00:19 2025 by rpki-client