Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A2F7/CB4BDD74F4D411E9B8D9A145C4F9AE02/IFYQcyy9sNg0hH8rk6CgyrD9XfQ.mft
File: IFYQcyy9sNg0hH8rk6CgyrD9XfQ.mft (raw, json)
Hash identifier: 7RIf6kkmfQa7IQp27p4dhxfcgLLlee951bfYcx40Fbw=
Subject key identifier: CA:04:4E:32:7A:5E:C3:09:81:A7:0E:6E:61:D8:C8:5C:26:B7:FB:F0
Authority key identifier: 20:56:10:73:2C:BD:B0:D8:34:84:7F:2B:93:A0:A0:CA:B0:FD:5D:F4
Certificate issuer: /CN=A912A2F7/serialNumber=205610732CBDB0D834847F2B93A0A0CAB0FD5DF4
Certificate serial: 0BAE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IFYQcyy9sNg0hH8rk6CgyrD9XfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A2F7/CB4BDD74F4D411E9B8D9A145C4F9AE02/IFYQcyy9sNg0hH8rk6CgyrD9XfQ.mft
Manifest number: 0BA9
Signing time: Mon 19 Feb 2024 09:58:32 +0000
Manifest this update: Mon 19 Feb 2024 09:58:32 +0000
Manifest next update: Mon 26 Feb 2024 09:58:32 +0000
Files and hashes: 1: IFYQcyy9sNg0hH8rk6CgyrD9XfQ.crl (hash: q+o22Pl6FSc+B1xouEnDtBNN+rROffQOmvwK79RYsW8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2990 (0xbae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A2F7/serialNumber=205610732CBDB0D834847F2B93A0A0CAB0FD5DF4
Validity
Not Before: Feb 19 09:58:32 2024 GMT
Not After : Feb 26 09:58:32 2024 GMT
Subject: CN=65d32648-84a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:42:f4:ae:63:f2:16:87:56:a6:1c:c0:72:69:
5a:7d:1b:4b:15:1d:45:b4:c3:5b:6a:36:40:25:3a:
b4:56:7b:bf:8e:3b:84:0e:f8:5a:28:53:3b:56:70:
a7:6f:73:00:9d:4b:54:8f:ea:2d:58:cb:56:f9:94:
65:8e:28:7c:e9:c5:2b:f8:4a:0e:77:e5:05:81:12:
e0:5f:98:21:8f:b7:67:2f:90:7c:2f:0e:8b:52:90:
18:b9:ac:9d:1d:1a:b7:68:34:a4:4d:91:f9:08:c1:
8d:4c:86:64:9f:61:28:2a:90:43:3f:4c:27:80:50:
a2:0d:88:46:b1:fd:53:71:c5:dd:fa:aa:ec:67:52:
3c:c8:11:88:26:fd:62:4e:24:b9:78:c3:97:77:0f:
82:dc:d1:0e:9c:76:0f:db:15:49:00:57:c5:09:d8:
01:75:29:43:ec:9e:bb:36:ca:31:65:01:3d:10:bc:
5e:3d:76:0a:16:ee:1e:4f:cd:f9:db:49:47:fd:e4:
59:22:74:9e:99:c4:22:ef:59:26:3c:47:41:fb:a5:
2f:a2:0f:5b:e1:e1:93:c3:ac:62:2c:0e:39:4d:f7:
76:0e:e8:b5:ab:34:3f:4e:71:38:5d:ef:a8:fe:5b:
b8:ff:d7:0c:cf:0c:9f:86:e2:8a:2d:41:a2:7e:a1:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:04:4E:32:7A:5E:C3:09:81:A7:0E:6E:61:D8:C8:5C:26:B7:FB:F0
X509v3 Authority Key Identifier:
keyid:20:56:10:73:2C:BD:B0:D8:34:84:7F:2B:93:A0:A0:CA:B0:FD:5D:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A2F7/CB4BDD74F4D411E9B8D9A145C4F9AE02/IFYQcyy9sNg0hH8rk6CgyrD9XfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IFYQcyy9sNg0hH8rk6CgyrD9XfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A2F7/CB4BDD74F4D411E9B8D9A145C4F9AE02/IFYQcyy9sNg0hH8rk6CgyrD9XfQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:23:a8:80:2e:f2:49:35:dd:ea:6b:2e:f0:3a:69:b5:9e:0f:
15:cf:c6:23:d8:b1:a5:08:1a:67:8d:a7:b4:2f:b6:11:b8:56:
ba:07:6e:d3:fc:9d:5e:62:24:07:f5:09:16:06:ef:9f:75:8c:
a6:2c:70:09:cc:89:25:00:e4:6f:e4:d1:43:52:ae:7a:1a:c9:
77:f7:45:b4:ab:27:96:6d:d9:31:4f:c3:e3:6c:85:fa:a1:54:
da:7c:ca:8d:76:07:93:fd:20:68:9f:49:07:46:3d:79:fa:4f:
96:ec:a8:09:6a:3b:48:67:6e:80:0b:de:89:ce:f7:f3:ab:c8:
56:c8:a8:40:94:dc:9f:e7:27:43:84:7b:73:38:45:ad:19:a3:
70:3f:30:ac:94:31:61:a4:61:47:c0:4e:d4:ab:28:17:ab:43:
ec:e5:d9:c1:12:43:2c:a0:7c:5a:4a:d1:bf:cc:64:81:4b:28:
fe:26:39:42:99:66:34:a2:8b:fa:60:a3:9b:92:8d:4f:2d:60:
60:65:2b:68:ec:d1:ea:fe:9e:db:c9:7e:68:1a:f9:5b:03:16:
24:ad:dc:15:4c:fd:a6:ec:a6:87:2c:db:8a:c7:2c:bb:af:7b:
ef:99:be:cd:7f:18:8b:6d:78:e1:5b:df:96:09:6a:dd:bc:78:
b5:68:fa:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-ams.rpki-client.org