Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A771/672B4332883611EC89683B37C4F9AE02/8ok6YpD-DtHmksvmZtcYD_hMi84.mft
File: 8ok6YpD-DtHmksvmZtcYD_hMi84.mft (raw, json)
Hash identifier: /gVOFLJbqRoSPwCDWj9W/Ain51irs53PFeW1taiQlKs=
Subject key identifier: D1:13:B1:2E:A7:59:B3:46:76:27:05:06:A9:8E:30:6B:6D:70:1F:B3
Authority key identifier: F2:89:3A:62:90:FE:0E:D1:E6:92:CB:E6:66:D7:18:0F:F8:4C:8B:CE
Certificate issuer: /CN=A912A771/serialNumber=F2893A6290FE0ED1E692CBE666D7180FF84C8BCE
Certificate serial: 030E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ok6YpD-DtHmksvmZtcYD_hMi84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A771/672B4332883611EC89683B37C4F9AE02/8ok6YpD-DtHmksvmZtcYD_hMi84.mft
Manifest number: 030C
Signing time: Thu 09 May 2024 04:05:36 +0000
Manifest this update: Thu 09 May 2024 04:05:36 +0000
Manifest next update: Thu 16 May 2024 04:05:36 +0000
Files and hashes: 1: 8ok6YpD-DtHmksvmZtcYD_hMi84.crl (hash: 2gHj1z5AJRP/EnRPdj+97TUfrY0dVsvnCkyL5kYkMGA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 782 (0x30e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A771/serialNumber=F2893A6290FE0ED1E692CBE666D7180FF84C8BCE
Validity
Not Before: May 9 04:05:36 2024 GMT
Not After : May 16 04:05:36 2024 GMT
Subject: CN=663c4b90-ddef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:6f:3e:8b:b8:8c:3f:8b:63:3f:24:71:6c:
47:13:7d:20:d4:23:c5:49:a1:6a:73:eb:72:9b:5d:
3e:79:38:aa:d2:ce:b8:27:56:c1:78:6f:e8:05:8d:
6e:ed:a1:00:89:5b:0b:c2:4c:a1:a7:ec:09:1e:34:
0b:65:9e:ad:8f:45:47:6c:67:53:1b:7f:83:f5:ee:
94:23:86:66:2c:6a:4d:f7:b4:b2:d4:91:f4:2b:83:
76:e9:80:7c:7b:af:c0:7b:b3:19:51:53:49:04:2d:
b2:54:aa:9b:db:e6:6d:b0:89:37:ba:e6:13:95:b5:
03:00:46:ce:79:1f:16:56:a8:e5:a2:44:39:e2:f2:
6a:51:60:80:27:fd:96:82:0c:b7:8d:a4:9d:54:01:
1a:84:e4:7d:13:98:65:e2:e5:36:d7:ce:c6:67:90:
25:87:ab:33:e3:ff:74:3d:b8:e1:50:2c:3f:ab:d5:
78:7c:99:24:6a:f3:03:f9:23:ea:e3:df:fe:8e:bc:
37:59:ee:89:b5:d2:40:5c:25:15:95:06:c3:15:67:
68:06:32:c7:84:16:73:d4:07:7b:34:29:21:4f:7c:
03:bd:ee:f3:90:5f:ec:68:b2:db:57:72:36:3e:91:
11:44:bb:45:bd:e1:42:2c:a8:19:93:8e:63:1d:db:
66:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:13:B1:2E:A7:59:B3:46:76:27:05:06:A9:8E:30:6B:6D:70:1F:B3
X509v3 Authority Key Identifier:
keyid:F2:89:3A:62:90:FE:0E:D1:E6:92:CB:E6:66:D7:18:0F:F8:4C:8B:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A771/672B4332883611EC89683B37C4F9AE02/8ok6YpD-DtHmksvmZtcYD_hMi84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ok6YpD-DtHmksvmZtcYD_hMi84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A771/672B4332883611EC89683B37C4F9AE02/8ok6YpD-DtHmksvmZtcYD_hMi84.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d3:2b:98:c0:a1:43:f0:61:66:df:4f:16:21:94:75:8a:d2:
08:01:ea:0d:5a:ec:2c:77:bf:24:0e:14:05:31:80:4d:aa:9b:
04:c0:a1:db:eb:f3:ce:f4:9e:71:87:5c:4e:ad:09:e6:07:95:
a0:87:5e:92:f5:4c:21:90:69:1d:d9:7e:5d:c6:14:1f:65:17:
1a:bc:5d:65:3e:d6:42:7d:ec:33:03:2b:64:d6:92:d0:d6:77:
e1:94:8c:49:f0:f5:83:64:e5:e6:d8:65:8a:27:56:f1:a2:da:
6c:89:5b:f0:47:79:97:25:c0:1c:0f:a2:8f:6c:03:2c:1b:25:
ad:e2:9f:23:01:f9:e5:69:75:50:bd:42:a6:5f:27:bc:be:a9:
db:87:56:5f:e6:e2:e8:46:af:fd:f8:ca:15:f7:dc:8b:da:3f:
71:55:54:f5:8f:c7:9f:d6:74:1b:e5:c8:b5:c7:2c:e0:30:89:
8e:7e:77:0b:12:4f:96:7d:63:47:61:8d:10:6a:e7:af:75:38:
be:b2:16:91:d8:c3:78:5b:96:d3:5e:d7:8c:66:9e:45:e1:2a:
4a:0c:e5:79:dc:2d:5f:d1:cc:92:d2:b6:41:f3:ef:59:62:81:
e4:08:af:d4:47:52:37:aa:aa:af:c2:9a:81:bf:6c:90:89:21:
01:e6:a5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 16:49:19 2024 by rpki-client on console-ams.rpki-client.org