Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D5ED/96E204CE8A2B11E8BFD1841AC4F9AE02/EfUPNhYyMp9cxitDB9mpbYtn0zk.mft
File: EfUPNhYyMp9cxitDB9mpbYtn0zk.mft (raw, json)
Hash identifier: jOH9TuRavUGOGNFp2C+SsWYtNa7SbPFdYwy+Wt9ooDY=
Subject key identifier: E3:C3:B6:A9:4D:61:A1:09:38:0D:3F:3F:8E:4C:C3:DE:89:77:07:1E
Authority key identifier: 11:F5:0F:36:16:32:32:9F:5C:C6:2B:43:07:D9:A9:6D:8B:67:D3:39
Certificate issuer: /CN=A916D5ED/serialNumber=11F50F361632329F5CC62B4307D9A96D8B67D339
Certificate serial: 1237
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfUPNhYyMp9cxitDB9mpbYtn0zk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D5ED/96E204CE8A2B11E8BFD1841AC4F9AE02/EfUPNhYyMp9cxitDB9mpbYtn0zk.mft
Manifest number: 122B
Signing time: Mon 20 Feb 2023 17:58:17 +0000
Manifest this update: Mon 20 Feb 2023 17:58:16 +0000
Manifest next update: Mon 27 Feb 2023 17:58:16 +0000
Files and hashes: 1: EfUPNhYyMp9cxitDB9mpbYtn0zk.crl (hash: IY3+JbEPxB4zo1qG+TsMChvHilVV7Nf2fZ6UVo03OEc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4663 (0x1237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D5ED/serialNumber=11F50F361632329F5CC62B4307D9A96D8B67D339
Validity
Not Before: Feb 20 17:58:16 2023 GMT
Not After : Feb 27 17:58:16 2023 GMT
Subject: CN=63f3b4b8-a93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:b8:42:a8:6b:ea:29:e4:a5:e4:df:b9:c1:
20:7f:2f:7a:52:5a:e7:dc:ea:db:e5:58:6f:51:8c:
38:80:c5:66:e5:1c:3b:6e:00:0a:a5:eb:0d:d1:0b:
a1:95:34:ef:eb:a1:f7:39:2b:99:19:8a:50:52:5b:
38:51:0b:d2:11:b0:88:53:df:62:fd:6d:ef:b4:52:
a3:28:4f:7f:1d:f7:bc:3c:b8:0c:59:c8:1c:54:b3:
57:8b:e2:5c:1b:e0:03:64:fe:3a:b2:eb:4f:97:da:
db:b5:41:bd:07:e3:6d:41:ac:d1:d4:91:a2:75:b0:
f8:08:bf:6d:93:dd:94:bb:1a:9f:09:86:01:32:d9:
95:1f:a4:49:20:08:8d:13:be:30:fd:c3:31:dc:9b:
6a:30:fb:0b:47:eb:34:65:74:d6:00:57:c5:e5:9f:
c8:75:3a:e3:77:ae:a9:2a:16:cb:65:d2:48:e8:ff:
5a:da:d2:ef:59:a6:9b:ad:fe:3e:ef:5d:ab:12:ce:
35:00:c4:a5:f2:94:2a:7a:cd:54:de:c4:3b:7d:22:
49:cb:36:6b:d9:f1:3b:45:cf:e7:32:33:aa:25:d7:
47:d5:84:78:73:a5:91:15:3c:fe:c3:15:41:7a:6b:
8c:5b:01:2b:31:75:8c:c1:20:a6:80:b0:50:0d:94:
9f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C3:B6:A9:4D:61:A1:09:38:0D:3F:3F:8E:4C:C3:DE:89:77:07:1E
X509v3 Authority Key Identifier:
keyid:11:F5:0F:36:16:32:32:9F:5C:C6:2B:43:07:D9:A9:6D:8B:67:D3:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D5ED/96E204CE8A2B11E8BFD1841AC4F9AE02/EfUPNhYyMp9cxitDB9mpbYtn0zk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfUPNhYyMp9cxitDB9mpbYtn0zk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D5ED/96E204CE8A2B11E8BFD1841AC4F9AE02/EfUPNhYyMp9cxitDB9mpbYtn0zk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:de:96:32:d7:48:ed:08:95:7f:2f:82:b7:ad:3a:05:dc:3c:
f0:dd:c9:59:c3:20:d3:c8:13:35:cc:09:68:33:7f:a9:d5:99:
01:dc:40:54:93:69:55:b0:23:1a:f5:45:f6:d7:66:3d:c2:58:
f3:24:fe:23:60:1f:c4:23:95:b4:a6:81:13:d2:93:a8:41:f9:
2b:2c:70:59:fe:8c:eb:de:1e:f9:d9:7d:58:e0:3b:bf:af:0a:
24:db:83:44:b9:6d:b2:55:e9:3f:a2:a5:3d:23:f0:a5:9f:bd:
a6:7a:2f:f9:50:30:cc:1a:4e:26:85:45:60:d4:c6:f3:e3:c5:
31:02:d5:cf:16:05:a2:6b:9e:72:b1:fc:79:73:ef:74:87:be:
d2:95:8b:51:ba:ee:d2:cb:f6:b4:b4:93:3b:d4:c0:e2:33:5b:
af:ba:d5:10:1b:73:79:40:58:36:40:18:39:b1:d5:c7:76:ac:
06:b8:01:e6:20:52:a3:fd:82:20:13:6b:9b:f2:83:34:c8:02:
da:eb:69:a8:e1:2f:ae:b7:ea:4f:b8:6c:bc:91:7b:97:14:c4:
c6:6b:51:d9:98:3e:8b:aa:b4:3f:49:87:0c:b3:74:a7:79:a4:
fa:ab:dc:a1:20:ef:25:ea:f0:a7:b1:b6:26:4c:0a:71:95:4f:
e3:1e:ea:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-ams.rpki-client.org