Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDB1/2B90914EB70411E8AB23B340C4F9AE02/EP-kt8pv6hK7bpekhWAY-6Hh_gM.mft
File: EP-kt8pv6hK7bpekhWAY-6Hh_gM.mft (raw, json)
Hash identifier: /NGkiIHd8WnQcZYijn+Kxgbp6X8+iaxg7Tg2wpEw3c4=
Subject key identifier: 77:58:FF:EC:17:A3:46:AB:19:14:6D:CC:ED:B8:98:BD:E5:EB:55:14
Authority key identifier: 10:FF:A4:B7:CA:6F:EA:12:BB:6E:97:A4:85:60:18:FB:A1:E1:FE:03
Certificate issuer: /CN=A915FDB1/serialNumber=10FFA4B7CA6FEA12BB6E97A4856018FBA1E1FE03
Certificate serial: 0F4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EP-kt8pv6hK7bpekhWAY-6Hh_gM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDB1/2B90914EB70411E8AB23B340C4F9AE02/EP-kt8pv6hK7bpekhWAY-6Hh_gM.mft
Manifest number: 0F3D
Signing time: Mon 21 Feb 2022 06:24:37 +0000
Manifest this update: Mon 21 Feb 2022 06:24:36 +0000
Manifest next update: Wed 23 Feb 2022 06:24:36 +0000
Files and hashes: 1: EP-kt8pv6hK7bpekhWAY-6Hh_gM.crl (hash: m9o7/sT1YJr9QHA5kU2ULJEnDWPwx8HQxmT2b7Q8eZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3914 (0xf4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDB1/serialNumber=10FFA4B7CA6FEA12BB6E97A4856018FBA1E1FE03
Validity
Not Before: Feb 21 06:24:36 2022 GMT
Not After : Feb 23 06:24:36 2022 GMT
Subject: CN=62133025-0544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4b:84:45:ed:3f:36:5f:c4:3b:a1:72:2a:34:
33:82:94:75:84:19:db:84:fa:72:00:cc:82:a4:54:
86:c9:86:ec:88:77:09:18:c0:0e:78:a2:02:db:b0:
8f:db:f0:9c:09:d9:34:59:19:60:94:8a:47:cd:f1:
70:07:86:e1:e5:7c:14:a4:12:4b:2c:bf:ed:03:5f:
66:84:bb:f7:77:43:64:69:f5:85:1b:8b:7b:4d:3d:
19:26:42:c0:e8:da:3c:88:e9:4b:1a:8c:68:65:c5:
34:eb:e2:89:1f:b9:14:0e:7e:9b:29:ee:70:25:c1:
82:cf:c8:3a:df:34:35:a9:aa:03:31:5c:30:b3:70:
f1:dc:af:4e:b7:4c:95:bf:cf:5c:2c:66:71:aa:74:
4d:92:a5:f6:6a:70:88:5d:5b:89:f7:97:b1:c5:d0:
28:31:91:a0:07:2d:be:33:59:0a:4b:86:c4:05:c9:
53:06:83:9d:e0:cc:68:64:00:be:2b:bb:f3:c4:cd:
e2:c1:9f:28:b0:96:9b:e4:3c:88:10:7b:c8:62:5f:
0a:31:a0:be:1c:5e:a8:00:b7:7f:a4:4c:fb:e9:11:
ca:92:bd:c5:59:ad:67:2d:cc:34:57:f1:50:95:d6:
f5:16:0d:da:c5:60:b2:8c:cf:75:52:60:06:10:5a:
73:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:58:FF:EC:17:A3:46:AB:19:14:6D:CC:ED:B8:98:BD:E5:EB:55:14
X509v3 Authority Key Identifier:
keyid:10:FF:A4:B7:CA:6F:EA:12:BB:6E:97:A4:85:60:18:FB:A1:E1:FE:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDB1/2B90914EB70411E8AB23B340C4F9AE02/EP-kt8pv6hK7bpekhWAY-6Hh_gM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EP-kt8pv6hK7bpekhWAY-6Hh_gM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDB1/2B90914EB70411E8AB23B340C4F9AE02/EP-kt8pv6hK7bpekhWAY-6Hh_gM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:23:17:45:d6:25:b3:47:e3:0a:2d:60:fc:4d:9f:e5:3e:01:
e2:81:a0:61:49:90:44:6b:d5:18:fa:00:30:d4:c0:8f:94:50:
7c:15:4e:0f:32:3a:13:ad:69:6a:3a:15:8a:69:d1:87:0b:4d:
39:30:7e:b5:ae:61:fa:d4:a0:88:93:21:2a:10:ff:73:cd:94:
ff:0b:ff:04:5b:b6:10:c0:ef:cd:9b:51:45:4f:26:18:97:08:
8f:d5:fc:b2:0e:01:f7:9d:d0:ff:b4:35:11:d6:bd:8c:ac:cb:
5e:4a:cd:04:3f:f7:10:2e:52:f6:a1:77:4a:02:aa:5d:4e:9f:
d8:f6:a7:b8:7a:b4:9b:07:4c:8d:0b:d3:aa:cd:c1:53:d0:ac:
ed:9b:71:af:aa:3f:1a:69:da:9a:5c:b4:91:4a:a1:b1:47:a1:
ec:8d:3d:f8:56:af:1b:46:b1:3a:f3:d5:65:9a:2e:26:b3:5f:
29:a1:0c:51:b6:e8:01:ed:42:01:8d:99:63:8b:3a:82:a1:4a:
9a:47:46:b3:04:c6:9f:03:5d:42:68:7a:93:17:f5:e7:b8:bc:
53:03:24:85:fa:14:b5:7a:5a:77:29:4f:3f:4e:38:a8:48:dc:
f8:75:41:be:ad:4e:39:ca:ba:43:c9:76:56:04:22:f5:19:b6:
ee:67:d8:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZEQjExMTAvBgNVBAUTKDEwRkZBNEI3Q0E2RkVBMTJCQjZFOTdBNDg1NjAxOEZC
QTFFMUZFMDMwHhcNMjIwMjIxMDYyNDM2WhcNMjIwMjIzMDYyNDM2WjAYMRYwFAYD
VQQDEw02MjEzMzAyNS0wNTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4kuERe0/Nl/EO6FyKjQzgpR1hBnbhPpyAMyCpFSGyYbsiHcJGMAOeKIC27CP
2/CcCdk0WRlglIpHzfFwB4bh5XwUpBJLLL/tA19mhLv3d0NkafWFG4t7TT0ZJkLA
6No8iOlLGoxoZcU06+KJH7kUDn6bKe5wJcGCz8g63zQ1qaoDMVwws3Dx3K9Ot0yV
v89cLGZxqnRNkqX2anCIXVuJ95exxdAoMZGgBy2+M1kKS4bEBclTBoOd4MxoZAC+
K7vzxM3iwZ8osJab5DyIEHvIYl8KMaC+HF6oALd/pEz76RHKkr3FWa1nLcw0V/FQ
ldb1Fg3axWCyjM91UmAGEFpziwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdY/+wX
o0arGRRtzO24mL3l61UUMB8GA1UdIwQYMBaAFBD/pLfKb+oSu26XpIVgGPuh4f4D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRCMS8yQjkwOTE0RUI3
MDQxMUU4QUIyM0IzNDBDNEY5QUUwMi9FUC1rdDhwdjZoSzdicGVraFdBWS02SGhf
Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VQLWt0OHB2NmhLN2JwZWtoV0FZLTZIaF9nTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RkRCMS8yQjkwOTE0RUI3MDQxMUU4QUIyM0IzNDBDNEY5QUUwMi9FUC1rdDhwdjZo
SzdicGVraFdBWS02SGhfZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQApIxdF1iWzR+MKLWD8TZ/lPgHigaBhSZBEa9UY+gAw1MCPlFB8FU4P
MjoTrWlqOhWKadGHC005MH61rmH61KCIkyEqEP9zzZT/C/8EW7YQwO/Nm1FFTyYY
lwiP1fyyDgH3ndD/tDUR1r2MrMteSs0EP/cQLlL2oXdKAqpdTp/Y9qe4erSbB0yN
C9OqzcFT0Kztm3Gvqj8aadqaXLSRSqGxR6HsjT34Vq8bRrE689Vlmi4ms18poQxR
tugB7UIBjZljizqCoUqaR0azBMafA11CaHqTF/XnuLxTAySF+hS1elp3KU8/Tjio
SNz4dUG+rU45yrpDyXZWBCL1GbbuZ9j4
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:09 2024 by rpki-client on console-fra.rpki-client.org