Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184D71/983A0C9E9D1F11E7876E6611C4F9AE02/3fn9qUu6NZo34NuwB1ca_z5RF6I.mft
File: 3fn9qUu6NZo34NuwB1ca_z5RF6I.mft (raw, json)
Hash identifier: 6x6gZe0Fi1DTaaLJeRRXEpqqt9Owa8VfOALBpISmy5c=
Subject key identifier: 7B:6E:AA:F4:87:07:92:54:86:5F:44:55:21:0D:7D:F6:91:17:1D:51
Authority key identifier: DD:F9:FD:A9:4B:BA:35:9A:37:E0:DB:B0:07:57:1A:FF:3E:51:17:A2
Certificate issuer: /CN=A9184D71/serialNumber=DDF9FDA94BBA359A37E0DBB007571AFF3E5117A2
Certificate serial: 17CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fn9qUu6NZo34NuwB1ca_z5RF6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184D71/983A0C9E9D1F11E7876E6611C4F9AE02/3fn9qUu6NZo34NuwB1ca_z5RF6I.mft
Manifest number: 17B4
Signing time: Tue 16 Apr 2024 17:03:59 +0000
Manifest this update: Tue 16 Apr 2024 17:03:58 +0000
Manifest next update: Tue 23 Apr 2024 17:03:58 +0000
Files and hashes: 1: 3fn9qUu6NZo34NuwB1ca_z5RF6I.crl (hash: r/iKjDIN/BadiIYr8xAQ6Rh8PeVYtBSdap3CkhuTaOk=)
2: 1158F4B451F611E9A5EDBE25C4F9AE02.roa (hash: 1jXpiD6gmBSnu1fi9XCpYPe6/Jj4DMV+/92Sfn0w4q0=)
3: 7DDA2328DC4E11EEAF4DE453C4F9AE02.roa (hash: ok/y6I+Avhtzg9EkxBA6Ud72VeGrN4nAvwer3vKiokU=)
4: 120AB0B451F611E9A5EDBE25C4F9AE02.roa (hash: F5O8A0gaF1BtCGj7OyW83lMTpQkQIx9/WAYphk10kuo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6090 (0x17ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184D71/serialNumber=DDF9FDA94BBA359A37E0DBB007571AFF3E5117A2
Validity
Not Before: Apr 16 17:03:58 2024 GMT
Not After : Apr 23 17:03:58 2024 GMT
Subject: CN=661eaf7f-db91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:8c:c6:7e:1c:06:ff:57:15:70:0b:1c:7e:
81:8f:cb:14:80:d3:64:8d:97:45:1c:6a:b7:85:3b:
3b:72:3f:03:c1:cb:e3:e8:86:9e:ff:ed:8b:e7:97:
9f:0f:39:5e:a3:c2:e9:3d:22:c6:8b:30:02:7a:76:
05:ae:d0:23:d5:12:6c:47:31:53:ab:19:23:dd:c5:
48:3b:5c:b0:5e:4d:89:ed:68:d1:64:5c:b2:3d:ed:
23:ed:c9:28:23:7f:17:cc:b4:b5:14:b8:8f:7d:05:
bf:4a:16:2e:c2:a5:03:36:9e:f1:0d:7f:6c:97:59:
f2:64:32:b4:77:aa:b2:de:11:d2:01:67:68:96:ae:
95:f4:c5:3b:88:55:3a:a5:03:a7:e3:78:cc:4d:16:
e0:19:be:b8:10:f5:69:18:f1:55:6a:69:61:b5:e7:
88:b2:81:13:2f:2b:ec:e6:6b:b6:7e:a5:c7:13:a3:
aa:b1:3f:41:05:a7:b1:f4:40:bf:0b:16:a3:c5:15:
dd:f6:41:e5:da:fe:47:b3:1f:9e:e2:e8:98:e1:64:
55:5f:a2:79:7f:fc:d4:82:ce:15:52:31:e0:c3:72:
f1:9e:5f:de:51:dd:32:97:3f:8a:8b:3c:78:d0:cf:
fc:44:e4:45:87:81:0f:d5:11:7f:b7:ff:45:f6:c7:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6E:AA:F4:87:07:92:54:86:5F:44:55:21:0D:7D:F6:91:17:1D:51
X509v3 Authority Key Identifier:
keyid:DD:F9:FD:A9:4B:BA:35:9A:37:E0:DB:B0:07:57:1A:FF:3E:51:17:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184D71/983A0C9E9D1F11E7876E6611C4F9AE02/3fn9qUu6NZo34NuwB1ca_z5RF6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fn9qUu6NZo34NuwB1ca_z5RF6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184D71/983A0C9E9D1F11E7876E6611C4F9AE02/3fn9qUu6NZo34NuwB1ca_z5RF6I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:f7:af:b6:3e:50:39:b9:c7:d5:68:cb:1f:64:49:de:67:26:
53:e7:e9:c6:0e:55:ef:75:05:bd:14:79:11:8f:b1:8f:b1:cc:
ef:8f:ba:87:fc:37:2b:f5:ec:74:88:29:9d:32:64:ec:4f:46:
ca:47:d9:9c:a5:4e:29:55:50:82:2c:d3:09:e5:96:68:8e:2e:
18:03:17:23:6e:6a:8a:0e:60:c1:00:9b:39:18:e9:f1:a2:14:
bc:12:25:39:99:a5:b6:6c:6e:ae:b5:e1:a7:dd:bf:af:56:23:
d2:66:fd:9b:b7:f7:a2:4a:e9:eb:e1:61:65:b1:62:8d:d3:e6:
ac:3d:7b:07:80:56:5a:3c:4f:02:ad:c7:a6:91:46:9e:3f:48:
10:93:09:93:08:cf:77:3f:3f:a5:f2:f6:e1:8f:0d:be:6b:f6:
11:2f:68:4b:ed:f7:50:e6:4e:01:33:ef:19:c7:a6:a8:f1:79:
75:90:fe:fe:b5:e1:83:7b:52:73:85:55:26:64:4e:bb:80:ad:
a6:5f:de:2b:bc:81:a1:90:9e:38:2a:14:ba:25:ad:18:e4:b5:
14:45:3d:ba:a4:99:d9:1a:97:b1:3c:c6:26:b2:e9:8f:02:5b:
e3:ef:f1:a9:69:c3:3b:d9:a1:a0:60:9d:7d:62:30:b1:a7:47:
34:7d:32:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 18:55:18 2024 by rpki-client on console-fra.rpki-client.org