Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A9F2/28AE033A0AD511E7AA611B1AC4F9AE02/h_F4YAx2TE3_VVCXY4vuAtEIEqg.mft
File: h_F4YAx2TE3_VVCXY4vuAtEIEqg.mft (raw, json)
Hash identifier: KCKypxe7jP8hhG+F+QUt5j7qC8NIFxIxHyzS82LGoR0=
Subject key identifier: 01:3C:E0:5E:95:96:35:A7:66:FA:0B:8E:D8:1D:B4:EA:C6:88:12:24
Authority key identifier: 87:F1:78:60:0C:76:4C:4D:FF:55:50:97:63:8B:EE:02:D1:08:12:A8
Certificate issuer: /CN=A911A9F2/serialNumber=87F178600C764C4DFF555097638BEE02D10812A8
Certificate serial: 1AA2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_F4YAx2TE3_VVCXY4vuAtEIEqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A9F2/28AE033A0AD511E7AA611B1AC4F9AE02/h_F4YAx2TE3_VVCXY4vuAtEIEqg.mft
Manifest number: 1A7B
Signing time: Mon 15 Jan 2024 01:09:33 +0000
Manifest this update: Mon 15 Jan 2024 01:09:32 +0000
Manifest next update: Mon 22 Jan 2024 01:09:32 +0000
Files and hashes: 1: h_F4YAx2TE3_VVCXY4vuAtEIEqg.crl (hash: xuUDgmy22ughp1d2AXRYQKVTfSg/pVUBjWsiTc1s5sk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6818 (0x1aa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A9F2/serialNumber=87F178600C764C4DFF555097638BEE02D10812A8
Validity
Not Before: Jan 15 01:09:32 2024 GMT
Not After : Jan 22 01:09:32 2024 GMT
Subject: CN=65a485cd-bdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d6:0a:d3:f3:a6:55:aa:56:ff:c0:50:55:b5:
41:68:b5:9f:5e:3f:db:bc:66:1c:ae:f1:63:d9:c3:
ac:dc:02:80:51:58:a3:72:c2:12:43:37:06:d7:f8:
61:95:0b:8b:da:41:22:b4:be:12:87:b4:b5:a9:27:
59:45:c9:a5:c5:a9:3e:df:0c:d3:e1:5f:ba:32:dc:
94:d7:6d:ec:8c:ba:88:dd:03:d5:d6:c0:b5:ce:00:
7d:d2:ef:aa:89:cc:0a:38:4d:c2:1c:b4:3c:2c:38:
9b:ea:de:bb:12:ec:e5:fb:dc:0c:73:9c:4a:88:be:
2c:73:a1:96:ba:02:2c:a1:98:86:41:0f:57:75:28:
9a:cb:ac:ad:ca:26:bb:21:2c:a1:49:c5:5c:4c:94:
9b:f1:d7:22:b5:c3:83:05:ed:45:7b:74:85:b8:3b:
bb:a9:5a:fc:a1:96:e3:74:5a:09:f6:47:df:fd:15:
aa:36:ad:a2:61:ac:66:e7:b5:16:d9:c5:54:52:57:
23:85:37:bf:4d:fc:f8:a9:f0:26:55:5c:5b:d9:19:
57:38:f5:a4:4e:56:99:c8:51:6d:0c:46:83:c5:8e:
4a:68:80:6e:10:0b:ba:be:e9:96:1c:e7:9a:bf:f9:
81:76:f6:39:f3:13:c2:6e:47:ab:65:8b:72:d9:53:
77:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3C:E0:5E:95:96:35:A7:66:FA:0B:8E:D8:1D:B4:EA:C6:88:12:24
X509v3 Authority Key Identifier:
keyid:87:F1:78:60:0C:76:4C:4D:FF:55:50:97:63:8B:EE:02:D1:08:12:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A9F2/28AE033A0AD511E7AA611B1AC4F9AE02/h_F4YAx2TE3_VVCXY4vuAtEIEqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_F4YAx2TE3_VVCXY4vuAtEIEqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A9F2/28AE033A0AD511E7AA611B1AC4F9AE02/h_F4YAx2TE3_VVCXY4vuAtEIEqg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:d4:69:a5:33:28:d7:c9:93:c3:ff:06:ec:45:9e:60:34:20:
3c:ef:c3:35:5a:75:8d:88:51:5d:84:1c:2f:ed:0b:b0:da:be:
7a:f4:89:6d:98:dd:63:f4:5f:92:ff:0b:57:54:a8:b7:1b:86:
22:13:2c:bc:59:b2:be:ee:53:92:34:99:2f:f8:09:47:c0:83:
bd:ad:1f:3c:2d:2d:8f:6b:bb:b4:5b:50:80:09:1a:67:2e:0f:
bc:6b:d1:47:b4:ce:32:26:b6:37:f2:65:67:79:8a:d2:90:86:
d5:69:9b:51:cf:13:1b:d4:31:7b:d5:60:7e:d1:fa:bc:34:6a:
c1:20:66:93:31:13:f4:4e:37:d1:76:fa:6c:fa:c6:29:22:de:
ab:08:9f:d9:42:50:3b:41:00:6c:6e:1c:37:50:50:3f:b1:eb:
09:46:bb:26:05:8c:47:03:9c:5f:c4:6c:95:54:41:8d:2f:d7:
2c:54:d9:67:59:5b:15:b1:6e:82:a0:6a:27:0f:8a:48:5c:f9:
41:15:da:dd:8d:fa:f4:e8:5d:63:8c:03:ed:d7:91:8e:b7:50:
2b:c8:21:c3:e4:09:aa:c1:29:ed:ab:7d:52:0e:a0:71:a4:df:
50:31:bb:51:eb:64:45:b1:bb:28:55:18:17:20:ce:38:7e:bd:
dc:c7:69:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-ams.rpki-client.org