Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C21/6DB0A8B00DA711E69F9F364BC4F9AE02/KidIicG8Nmx-GRPcP32IFoh9w5Q.mft
File: KidIicG8Nmx-GRPcP32IFoh9w5Q.mft (raw, json)
Hash identifier: QRx0zkR9spgHPyhKWwWBI85nx7zLKHBjtWMoKE/njv0=
Subject key identifier: A8:3A:03:E7:AB:CE:C6:01:BB:7D:0D:96:69:74:47:4A:AB:2D:47:48
Authority key identifier: 2A:27:48:89:C1:BC:36:6C:7E:19:13:DC:3F:7D:88:16:88:7D:C3:94
Certificate issuer: /CN=A9136C21/serialNumber=2A274889C1BC366C7E1913DC3F7D8816887DC394
Certificate serial: 1D99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KidIicG8Nmx-GRPcP32IFoh9w5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136C21/6DB0A8B00DA711E69F9F364BC4F9AE02/KidIicG8Nmx-GRPcP32IFoh9w5Q.mft
Manifest number: 1D74
Signing time: Mon 25 Apr 2022 04:39:34 +0000
Manifest this update: Mon 25 Apr 2022 04:39:33 +0000
Manifest next update: Wed 27 Apr 2022 04:39:33 +0000
Files and hashes: 1: KidIicG8Nmx-GRPcP32IFoh9w5Q.crl (hash: 4XGyLq7hKdmfva+r/Wj3FUxpX1UMeAHnlU0oJb6AyHo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7577 (0x1d99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136C21/serialNumber=2A274889C1BC366C7E1913DC3F7D8816887DC394
Validity
Not Before: Apr 25 04:39:33 2022 GMT
Not After : Apr 27 04:39:33 2022 GMT
Subject: CN=62662605-5ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:18:c1:53:b7:a4:b4:03:5c:db:66:e7:08:
54:2f:82:fc:c4:9b:05:54:4a:45:36:aa:f4:9d:68:
c2:20:29:fa:54:f6:85:e4:7f:27:ae:a0:5e:c0:45:
8d:5a:8f:9a:58:f4:43:55:a8:79:1b:80:05:2d:51:
d7:97:ef:18:4d:ea:51:02:75:06:e5:31:81:02:96:
b1:7b:31:90:c9:8a:ba:92:f8:f0:ee:0e:f4:d5:83:
f7:0e:ab:28:e0:e9:18:70:78:ee:50:22:f9:de:cf:
1a:8c:d6:ca:d4:6a:09:ab:a8:34:22:5e:bd:cc:07:
b8:09:83:0e:1f:60:d1:0f:e9:aa:cb:ad:f7:c7:8c:
09:4b:51:ef:3e:fb:5f:5b:4b:77:e8:9c:d5:0b:bb:
05:9e:46:43:73:b5:fe:56:5c:5f:09:db:0f:4d:65:
26:0e:60:b8:48:b6:a1:27:10:3a:1b:5e:6a:92:58:
25:4e:c4:5d:46:2a:d5:2b:73:e7:b5:22:c2:a1:a9:
e3:d9:9d:30:82:4d:78:92:fe:b0:8a:b2:60:5e:8a:
d0:8a:1a:db:4a:33:24:4a:3a:ba:ce:7a:bb:80:00:
46:8a:6a:ed:9f:f3:75:58:7f:a0:c8:77:c4:3d:ab:
f7:13:f1:5a:fe:8d:90:28:7d:93:f5:a4:b0:27:cf:
a8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3A:03:E7:AB:CE:C6:01:BB:7D:0D:96:69:74:47:4A:AB:2D:47:48
X509v3 Authority Key Identifier:
keyid:2A:27:48:89:C1:BC:36:6C:7E:19:13:DC:3F:7D:88:16:88:7D:C3:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136C21/6DB0A8B00DA711E69F9F364BC4F9AE02/KidIicG8Nmx-GRPcP32IFoh9w5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KidIicG8Nmx-GRPcP32IFoh9w5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C21/6DB0A8B00DA711E69F9F364BC4F9AE02/KidIicG8Nmx-GRPcP32IFoh9w5Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:44:4b:29:bd:38:52:2f:16:fa:2c:f3:87:56:2a:cb:bd:e4:
68:a8:f0:f3:34:65:f1:9f:fe:60:8d:bc:81:95:1a:89:12:bb:
f7:b5:8d:60:ee:de:43:5b:4d:dd:a2:45:0a:1e:69:a3:35:6b:
13:cb:b9:7b:5e:f6:8c:4e:c9:3e:b9:89:8f:de:07:c8:cb:80:
7e:f5:87:ac:f0:26:9a:f9:39:1d:b6:d3:22:b4:f7:1b:55:c2:
c6:f7:09:22:f1:db:37:62:95:7c:67:03:43:3e:e3:56:44:28:
4c:6e:94:8d:b3:db:06:96:c3:59:61:0d:2d:09:96:dc:72:37:
b6:a4:d7:ab:c5:77:cd:28:11:1f:c2:52:19:c2:93:06:41:1d:
29:f3:03:47:76:ce:0b:e2:af:ab:ee:63:8c:46:b2:a6:78:ad:
cc:c6:ea:ca:3d:c5:7e:dc:63:c9:5c:a3:11:4e:f8:58:40:ae:
31:82:08:c4:0b:5a:25:f2:e4:85:ff:7d:4b:f7:46:61:99:93:
c3:6c:c8:e8:0b:e9:bc:1a:76:94:f7:fb:b4:a2:ba:6a:a7:ac:
5b:c2:44:43:4e:a3:2a:3a:29:3f:fb:c4:9a:8e:29:4b:a8:95:
0b:f8:58:ab:80:e0:2d:c0:cb:f5:73:fa:53:a5:58:05:c9:3b:
6c:c4:b8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org