Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/zqCDL8rBIvZOi3mpxUu92b6Qxx0.mft
File: zqCDL8rBIvZOi3mpxUu92b6Qxx0.mft (raw, json)
Hash identifier: nxWvXqaQGjXMZzh36Q603fNRrZYsE5XLLk87AkZO3YM=
Subject key identifier: 2E:44:A2:A9:DE:5E:FF:F7:DA:F8:7B:2C:F6:56:EB:AD:49:F9:08:8C
Authority key identifier: CE:A0:83:2F:CA:C1:22:F6:4E:8B:79:A9:C5:4B:BD:D9:BE:90:C7:1D
Certificate issuer: /CN=A91509EC/serialNumber=CEA0832FCAC122F64E8B79A9C54BBDD9BE90C71D
Certificate serial: 12AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zqCDL8rBIvZOi3mpxUu92b6Qxx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/zqCDL8rBIvZOi3mpxUu92b6Qxx0.mft
Manifest number: 129B
Signing time: Sun 22 Jan 2023 17:53:51 +0000
Manifest this update: Sun 22 Jan 2023 17:53:50 +0000
Manifest next update: Sun 29 Jan 2023 17:53:50 +0000
Files and hashes: 1: zqCDL8rBIvZOi3mpxUu92b6Qxx0.crl (hash: End0ysBmvUme9P3OpgwDtAugN1o15OPOtiaKa6tU/xA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4780 (0x12ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91509EC/serialNumber=CEA0832FCAC122F64E8B79A9C54BBDD9BE90C71D
Validity
Not Before: Jan 22 17:53:50 2023 GMT
Not After : Jan 29 17:53:50 2023 GMT
Subject: CN=63cd782f-ca09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:aa:a7:e9:de:a7:2d:93:eb:04:65:fa:8b:52:
9f:3f:95:f1:51:fa:9f:d0:0c:08:3a:e8:1e:83:a9:
4b:57:bd:0f:25:20:cf:aa:b8:b2:3c:75:ba:85:57:
18:b9:b7:1b:f4:6c:c9:c9:91:8c:05:8f:86:89:d4:
89:2b:04:a4:65:eb:36:cf:07:e2:d6:28:d5:a4:2e:
50:bc:f3:d0:f1:80:40:7e:9a:e6:83:93:f0:74:36:
45:33:71:3f:f5:89:44:f5:9e:bc:65:4f:d4:24:bb:
09:83:55:d5:f2:39:f0:75:e1:cc:85:0b:25:b8:f8:
c6:a8:44:00:4d:b7:b0:6d:d3:63:f8:48:77:b4:64:
15:7f:e5:96:c1:4b:e1:67:5d:b6:b1:dd:88:2b:2f:
a5:74:89:3a:86:c7:3f:a4:a0:d0:17:27:e8:71:0c:
dc:1b:71:f2:05:8d:2e:c4:20:ad:3a:ab:c7:7e:e4:
8b:f5:4b:0d:ff:da:94:e4:a3:63:04:92:bc:78:d7:
c5:86:96:10:35:c1:70:52:a2:37:6f:7b:94:b9:52:
c3:94:5b:b4:2d:03:d1:34:2e:a2:d5:9a:bc:be:09:
9b:ef:01:ee:aa:f0:a1:31:17:b5:18:d2:be:7e:dd:
6e:e9:39:07:34:b0:8c:bf:93:ff:c4:aa:e6:80:8e:
20:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:44:A2:A9:DE:5E:FF:F7:DA:F8:7B:2C:F6:56:EB:AD:49:F9:08:8C
X509v3 Authority Key Identifier:
keyid:CE:A0:83:2F:CA:C1:22:F6:4E:8B:79:A9:C5:4B:BD:D9:BE:90:C7:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/zqCDL8rBIvZOi3mpxUu92b6Qxx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zqCDL8rBIvZOi3mpxUu92b6Qxx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/zqCDL8rBIvZOi3mpxUu92b6Qxx0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:54:b8:85:70:9e:b1:6c:05:2b:2e:1c:56:33:4b:f2:91:a7:
9e:c8:85:8b:94:cf:42:84:b1:f4:12:fd:50:e4:ac:21:e9:65:
aa:6f:bf:58:71:bb:92:2c:60:74:1d:d3:1d:7f:a4:f4:22:e8:
34:ca:3b:94:96:b7:d9:d5:0e:43:07:ca:99:f1:1b:94:27:56:
a6:7a:99:5d:84:9b:b1:65:15:a4:62:c3:51:e6:c9:1e:8a:bb:
4a:1a:ad:aa:50:43:f6:72:9f:ac:c5:3f:ca:44:d7:a1:60:0a:
8f:2a:94:cc:35:2b:06:67:b2:22:ec:74:ff:35:c9:1d:2d:94:
c8:e7:73:7f:05:0d:20:70:78:f2:9a:e5:d3:0d:0d:13:9f:bc:
e6:d9:34:26:89:a0:8b:21:ca:40:71:f9:f5:55:0e:6d:7e:9f:
0d:aa:14:e7:45:95:27:f8:63:3f:52:36:69:cf:e2:9d:bd:fb:
d8:4b:d7:3e:38:2b:aa:39:89:2a:b9:73:2b:f4:7b:f3:7a:3d:
96:80:fa:36:e0:89:2c:a6:fe:07:00:56:68:14:2b:20:86:bd:
13:72:55:05:99:f8:e9:11:2c:cd:3a:03:c6:cd:b7:11:43:9b:
f2:27:6e:b5:39:92:e0:be:cf:8c:6e:1f:c7:c9:3f:b5:82:0f:
2c:fb:4d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:06 2024 by rpki-client on console-fra.rpki-client.org