Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E2E0/B3E815DC9E4611E588D46016C4F9AE02/7WjKai0SqIzH0paivCvxUZoLX_M.mft
File: 7WjKai0SqIzH0paivCvxUZoLX_M.mft (raw, json)
Hash identifier: YWtZqapEPixtLPIJwHlmCdLkiOLe7i4h95sPOnvkoXw=
Subject key identifier: 47:91:33:B2:22:71:B7:31:BF:DA:54:00:BA:CF:85:27:38:41:12:38
Authority key identifier: ED:68:CA:6A:2D:12:A8:8C:C7:D2:96:A2:BC:2B:F1:51:9A:0B:5F:F3
Certificate issuer: /CN=A911E2E0/serialNumber=ED68CA6A2D12A88CC7D296A2BC2BF1519A0B5FF3
Certificate serial: 2242
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7WjKai0SqIzH0paivCvxUZoLX_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E2E0/B3E815DC9E4611E588D46016C4F9AE02/7WjKai0SqIzH0paivCvxUZoLX_M.mft
Manifest number: 2231
Signing time: Thu 15 Aug 2024 04:52:54 +0000
Manifest this update: Thu 15 Aug 2024 04:52:53 +0000
Manifest next update: Thu 22 Aug 2024 04:52:53 +0000
Files and hashes: 1: 7WjKai0SqIzH0paivCvxUZoLX_M.crl (hash: UqiWfJHKvpK9OXJrrRmYB6lTGJ0emYZpxs1VVodcAX4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8770 (0x2242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E2E0/serialNumber=ED68CA6A2D12A88CC7D296A2BC2BF1519A0B5FF3
Validity
Not Before: Aug 15 04:52:53 2024 GMT
Not After : Aug 22 04:52:53 2024 GMT
Subject: CN=66bd89a6-2b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:5c:13:e7:f8:00:2b:0e:b2:f1:65:96:d9:
39:52:6d:83:ae:1b:56:04:cc:0c:75:6f:c3:86:13:
d5:4a:6e:42:10:b5:8b:60:6c:5b:5c:d7:11:89:b4:
de:5b:46:d7:97:9b:5e:c6:f7:2b:fa:d8:d8:ba:d0:
c1:d6:d4:ce:0c:73:e0:bc:c2:f7:e2:62:07:9e:4c:
5f:7e:6e:31:3c:7d:05:fe:a5:d3:d5:52:63:db:42:
6d:c6:3f:45:70:41:47:4b:72:c6:4c:05:b6:9a:3c:
fb:e4:37:35:2e:7d:b3:95:e1:fd:46:c2:78:fb:bf:
2f:fc:7b:ee:84:0d:e3:3d:ef:16:8d:2c:34:be:68:
17:98:ac:fe:79:17:d6:5d:12:d2:f2:ed:44:68:10:
22:4e:94:47:8d:8c:5a:d1:3f:76:ee:e0:37:f5:50:
cb:ef:3a:6f:4f:2a:0b:74:27:40:bc:26:0f:b3:9b:
92:35:29:1c:e6:32:13:7b:b8:3f:33:e6:26:d0:97:
e9:ed:4a:90:0a:88:bf:0a:5a:7d:41:d9:20:1d:4a:
bd:76:17:49:09:83:21:07:ab:94:69:57:ee:9a:bc:
0f:25:9a:35:5e:e0:bc:0b:b0:b5:0a:da:29:a9:10:
4b:87:50:4e:80:e4:f4:f1:0b:c2:75:f4:3c:6d:c7:
3d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:91:33:B2:22:71:B7:31:BF:DA:54:00:BA:CF:85:27:38:41:12:38
X509v3 Authority Key Identifier:
keyid:ED:68:CA:6A:2D:12:A8:8C:C7:D2:96:A2:BC:2B:F1:51:9A:0B:5F:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E2E0/B3E815DC9E4611E588D46016C4F9AE02/7WjKai0SqIzH0paivCvxUZoLX_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7WjKai0SqIzH0paivCvxUZoLX_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E2E0/B3E815DC9E4611E588D46016C4F9AE02/7WjKai0SqIzH0paivCvxUZoLX_M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:bf:6a:b9:52:a0:ab:a9:ec:35:f0:55:55:70:3b:3c:9c:98:
f9:94:ae:08:4c:ff:62:44:ea:4b:45:a6:a3:f3:62:38:a9:26:
cc:10:29:32:83:c2:76:65:83:de:bf:30:2f:10:ae:7c:3f:a3:
a1:a9:d8:4c:45:d4:1e:51:62:ff:76:1a:6b:ba:71:00:e8:af:
0b:96:4b:2d:e8:1f:3b:d0:6f:8b:03:f1:c8:1d:18:e4:07:d2:
6a:b1:ef:60:a1:ea:4c:4c:a2:d4:bc:e3:2d:5b:da:96:f1:3b:
e3:7d:a2:aa:e0:89:e2:dd:b7:98:d0:a4:5e:2b:9c:bd:34:7b:
60:10:58:33:40:85:0e:3a:3c:ab:29:81:27:d8:a4:7c:56:c3:
4b:6b:f9:00:11:0c:91:b3:20:51:08:ad:65:ce:08:27:98:2e:
d5:05:e2:c8:c5:94:03:9e:db:18:1d:3c:89:59:94:fb:a6:62:
93:e4:2a:bd:ce:ee:ac:e6:9a:ca:6c:ea:c4:52:27:76:1c:65:
71:97:c9:28:dc:34:e4:cb:4d:c7:41:9c:01:ce:16:bf:cd:99:
40:ff:f2:b5:f1:b2:ee:f4:f6:b9:ce:a4:c2:22:ae:00:a1:26:
9b:38:bd:41:93:92:8c:33:c7:e8:c8:e7:c4:32:2b:eb:a9:b0:
e9:74:93:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 16:42:32 2024 by rpki-client on console-fra.rpki-client.org