Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft
File: 5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft (raw, json)
Hash identifier: DOCAvtIvb5GtCwzPAvQTWKJ2hn2/pU4F/gYwHPZvcWU=
Subject key identifier: 3C:1F:35:3B:DC:70:74:8B:63:3C:FB:4F:89:E4:69:8A:1F:D4:71:E3
Authority key identifier: E6:F0:81:9C:59:FD:C6:41:E4:5B:CC:33:CB:50:F3:CD:85:4A:C2:F5
Certificate issuer: /CN=A9119363/serialNumber=E6F0819C59FDC641E45BCC33CB50F3CD854AC2F5
Certificate serial: 0362
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft
Manifest number: 039C
Signing time: Mon 19 Feb 2024 13:15:31 +0000
Manifest this update: Mon 19 Feb 2024 13:15:31 +0000
Manifest next update: Mon 26 Feb 2024 13:15:31 +0000
Files and hashes: 1: 5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl (hash: 5RT+6RERWYpLTUKjigTdJbft1zuDohXDoONt0n07/us=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866 (0x362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119363/serialNumber=E6F0819C59FDC641E45BCC33CB50F3CD854AC2F5
Validity
Not Before: Feb 19 13:15:31 2024 GMT
Not After : Feb 26 13:15:31 2024 GMT
Subject: CN=65d35473-1ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:66:83:f1:d7:0b:5c:fa:0d:36:1e:06:2f:c1:
c1:ba:54:b2:1b:97:bf:a3:16:19:68:82:82:cd:6c:
0a:8b:d5:f1:d9:de:29:61:25:f6:09:b2:11:6d:c1:
e4:15:8c:a5:53:de:63:b4:91:d3:e8:d6:a0:98:08:
ae:ae:74:a6:9b:9c:7e:e4:f2:7d:51:2d:22:33:4b:
f6:56:49:32:8a:f8:7a:69:a4:20:9d:51:ea:a0:0f:
48:e0:eb:e3:4f:e5:91:f8:db:ed:48:a8:a7:2a:7c:
11:8c:81:57:87:e3:27:77:00:b2:52:cf:ed:0d:45:
79:52:79:97:26:4f:8b:74:a3:f7:29:e1:ad:d9:66:
1c:e6:00:90:fe:5d:b7:a6:72:05:80:50:b3:dd:9b:
63:39:63:91:b9:ed:66:04:f4:11:da:43:64:bb:27:
0b:53:73:08:5e:90:0f:cc:b8:80:c8:38:ee:19:73:
31:45:84:25:80:46:af:69:9b:b5:69:03:4a:5b:37:
c1:2b:75:96:f2:8b:32:95:b1:8f:58:2e:be:34:ea:
52:63:26:67:e1:96:49:5d:79:cc:3a:f2:aa:23:2d:
3a:84:35:bd:5b:39:ef:39:a2:8f:ab:4a:d1:28:e2:
cd:3d:40:d4:d1:79:d0:cd:73:f2:d2:5e:9e:c5:79:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1F:35:3B:DC:70:74:8B:63:3C:FB:4F:89:E4:69:8A:1F:D4:71:E3
X509v3 Authority Key Identifier:
keyid:E6:F0:81:9C:59:FD:C6:41:E4:5B:CC:33:CB:50:F3:CD:85:4A:C2:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3c:46:14:1f:68:52:b4:13:a3:63:a3:8e:6a:54:d3:38:b7:
b2:e8:26:46:03:c2:4d:82:e1:93:ce:fc:c2:a4:6d:a2:01:d7:
27:76:3f:c8:17:f9:70:68:07:b2:93:d0:3a:2c:0f:6a:20:47:
28:03:49:17:a0:37:a3:62:51:8d:ae:42:b9:42:92:c8:8e:ac:
89:dd:66:39:07:f8:ee:ea:20:4f:2d:4d:4e:d8:81:2f:f6:17:
6d:b6:b5:f4:c3:6a:0b:d5:40:12:44:9c:23:ff:46:23:98:08:
15:75:83:b6:6d:64:ae:28:6a:9c:3a:cb:88:f2:16:76:a3:3c:
b9:a8:10:f0:5c:45:ab:5a:cd:7b:31:e8:84:8c:21:21:47:9a:
2b:4b:48:41:0d:dd:bb:7f:b8:42:dd:e6:1a:73:5d:57:ae:9a:
0e:ae:0b:b7:3e:b0:c4:e6:12:2d:c8:15:58:0f:60:58:7e:5d:
50:8c:5f:cd:b5:76:f1:1e:41:06:ac:91:d2:a7:c1:ea:5d:43:
d3:3a:e7:67:08:60:e5:46:92:62:e6:56:af:7d:ed:80:25:56:
ec:70:39:20:67:34:23:11:71:02:d1:aa:bc:39:7c:3e:9a:7e:
49:f9:4c:71:af:b4:91:b9:fa:8b:a7:39:ce:4c:e2:c9:7b:ae:
9c:53:a1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 18:07:33 2024 by rpki-client on console-ams.rpki-client.org