Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91324F2/FA37C846124A11ED9DD30F62C4F9AE02/Ud1ef6bEFkQcstiqGJX8SfP5a3o.mft
File: Ud1ef6bEFkQcstiqGJX8SfP5a3o.mft (raw, json)
Hash identifier: xvbnpZrijHU2rDIUKDbOC2/itAqzbyTMql3DFzKidCg=
Subject key identifier: 6A:05:EC:AA:F2:80:C7:AA:A8:B3:4E:1E:6F:35:E4:34:D6:F2:4D:95
Authority key identifier: 51:DD:5E:7F:A6:C4:16:44:1C:B2:D8:AA:18:95:FC:49:F3:F9:6B:7A
Certificate issuer: /CN=A91324F2/serialNumber=51DD5E7FA6C416441CB2D8AA1895FC49F3F96B7A
Certificate serial: 020B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ud1ef6bEFkQcstiqGJX8SfP5a3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91324F2/FA37C846124A11ED9DD30F62C4F9AE02/Ud1ef6bEFkQcstiqGJX8SfP5a3o.mft
Manifest number: 0208
Signing time: Fri 15 Nov 2024 01:28:39 +0000
Manifest this update: Fri 15 Nov 2024 01:28:38 +0000
Manifest next update: Fri 22 Nov 2024 01:28:38 +0000
Files and hashes: 1: Ud1ef6bEFkQcstiqGJX8SfP5a3o.crl (hash: 2q5EaRcKo1PHs5XbaglBifKuQQl+IJjwyy3B44sEC48=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91324F2/serialNumber=51DD5E7FA6C416441CB2D8AA1895FC49F3F96B7A
Validity
Not Before: Nov 15 01:28:38 2024 GMT
Not After : Nov 22 01:28:38 2024 GMT
Subject: CN=6736a3c7-49c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:a0:35:34:c8:dd:d6:9f:21:a7:02:e9:7e:
e2:14:aa:b5:d2:d1:3d:29:0d:4f:5e:25:46:2a:ef:
ce:60:a3:40:21:c4:da:96:96:8f:37:44:31:23:46:
8a:f7:aa:76:ed:1b:1c:a9:3f:6e:f4:79:21:27:e4:
c5:8c:84:d3:62:dd:53:c5:f5:94:9e:27:cb:e2:46:
9f:a7:30:02:90:8a:2a:ec:50:e8:bb:2d:d2:bb:ea:
ea:7e:0f:41:db:8d:d3:18:2b:a6:6c:38:9d:70:b0:
40:1f:c1:4c:9f:5f:11:05:cf:3f:6d:6f:63:d2:39:
e9:07:4e:a7:b8:e8:ed:fe:4d:f6:63:9c:c2:77:5f:
56:cd:61:f7:ca:ab:a4:2b:ff:60:24:ba:3c:d6:a3:
58:6c:04:72:7b:ac:82:d8:a9:01:2b:01:34:c9:ff:
f7:bc:ea:86:a5:3e:1e:1a:4a:90:12:a8:15:ee:0c:
47:38:12:cb:11:5e:fc:09:fd:d2:55:18:0c:76:0d:
8a:78:15:73:ee:85:f9:95:0a:ca:8e:fa:0f:93:40:
93:48:c7:68:0f:5a:55:88:68:b2:40:b8:91:0e:ae:
4e:47:ac:8b:04:37:6d:37:6c:fc:ad:a1:07:04:0e:
a4:7c:3a:64:1e:6f:c9:fc:b7:a9:48:3d:44:69:83:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:05:EC:AA:F2:80:C7:AA:A8:B3:4E:1E:6F:35:E4:34:D6:F2:4D:95
X509v3 Authority Key Identifier:
keyid:51:DD:5E:7F:A6:C4:16:44:1C:B2:D8:AA:18:95:FC:49:F3:F9:6B:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91324F2/FA37C846124A11ED9DD30F62C4F9AE02/Ud1ef6bEFkQcstiqGJX8SfP5a3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ud1ef6bEFkQcstiqGJX8SfP5a3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324F2/FA37C846124A11ED9DD30F62C4F9AE02/Ud1ef6bEFkQcstiqGJX8SfP5a3o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:54:8d:60:40:49:d2:cc:c3:80:6e:65:d7:e1:77:de:c7:81:
7a:53:8b:a8:89:0d:95:d9:c6:7e:7f:36:ba:02:ff:b4:06:5b:
20:bc:4c:03:b8:ff:0d:52:54:c5:e8:02:88:46:86:84:bd:b6:
ff:40:bb:32:b0:c1:00:4e:ff:b8:5b:bb:8d:90:ee:d5:e8:0a:
d6:22:ee:af:2d:07:da:ac:02:a6:e0:b7:a5:d2:0c:00:05:e6:
65:15:e1:ee:91:0d:a1:d6:a8:b9:58:ab:3b:1f:06:77:3a:19:
dd:e2:11:d5:bb:4c:34:e8:e7:44:0f:97:45:b2:28:34:3e:1b:
53:ca:81:c7:85:dc:57:86:9c:60:4b:88:ab:a6:96:7e:9b:5c:
09:7b:86:c0:1e:ea:12:2f:61:00:a1:a5:dd:de:c0:41:11:a6:
c3:d4:75:f1:23:86:5b:25:47:21:c2:94:08:9d:57:5f:4a:57:
e0:41:bb:04:c3:97:fa:23:29:f9:44:56:d5:05:c8:d4:2a:1d:
54:2f:95:12:3f:d0:0d:bc:a8:f1:aa:4e:0c:99:d3:e6:47:39:
fa:7d:41:68:11:a4:9f:ac:fa:86:36:24:a2:13:7c:d8:0a:64:
fc:72:9e:aa:b9:8d:49:12:a0:10:e0:f8:e6:b7:fd:89:6a:14:
78:a3:62:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 16:28:31 2024 by rpki-client on console-fra.rpki-client.org