Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186755/3B578B7E34DA11E98A0B6B59C4F9AE02/K_gK57t0-gVLi5wjTZ0SB2Higl8.mft
File: K_gK57t0-gVLi5wjTZ0SB2Higl8.mft (raw, json)
Hash identifier: n6IvBrcp5Hk9oF/Bk3QoHtprohbCkojLR0yLjWm39sI=
Subject key identifier: 8A:27:29:E1:F9:DC:43:53:0B:03:32:3E:D8:24:63:AF:0D:A2:A9:BE
Authority key identifier: 2B:F8:0A:E7:BB:74:FA:05:4B:8B:9C:23:4D:9D:12:07:61:E2:82:5F
Certificate issuer: /CN=A9186755/serialNumber=2BF80AE7BB74FA054B8B9C234D9D120761E2825F
Certificate serial: 0F66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_gK57t0-gVLi5wjTZ0SB2Higl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186755/3B578B7E34DA11E98A0B6B59C4F9AE02/K_gK57t0-gVLi5wjTZ0SB2Higl8.mft
Manifest number: 0F66
Signing time: Sun 04 Feb 2024 17:56:15 +0000
Manifest this update: Sun 04 Feb 2024 17:56:15 +0000
Manifest next update: Sun 11 Feb 2024 17:56:15 +0000
Files and hashes: 1: K_gK57t0-gVLi5wjTZ0SB2Higl8.crl (hash: mfirHH8dFQkcCQWwnjN7LDKNwtlmO8WgtPEi5BhWIm0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3942 (0xf66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186755/serialNumber=2BF80AE7BB74FA054B8B9C234D9D120761E2825F
Validity
Not Before: Feb 4 17:56:15 2024 GMT
Not After : Feb 11 17:56:15 2024 GMT
Subject: CN=65bfcfbf-c4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fd:b0:c7:db:80:5a:fd:88:0e:34:23:f6:68:
b6:aa:1c:28:89:18:1a:15:c7:7a:0d:96:d9:41:0f:
e7:73:e7:d6:c0:ae:bb:49:06:fb:e9:39:92:8c:8a:
ee:d3:69:fc:3c:da:30:91:fe:16:f7:a1:7f:ed:f7:
2b:1e:d3:7e:fc:2f:7c:ff:ba:e0:f1:00:88:3d:43:
b1:a8:98:02:52:eb:37:01:02:2c:53:e4:c1:4f:f6:
82:3f:39:4d:84:0f:cb:06:97:f3:fa:cd:02:07:eb:
8c:a6:7c:36:94:18:8d:d3:43:2c:21:24:aa:90:f2:
ac:da:54:93:d3:fa:08:56:c7:50:1f:24:b3:f6:30:
7c:84:98:5d:96:f7:75:7d:26:c0:22:32:c2:34:d7:
a0:6c:75:31:5d:19:9d:98:46:b7:7b:be:ca:64:d2:
42:ee:00:48:0c:6c:ff:97:3b:ea:59:08:15:d7:28:
89:5d:0c:4f:da:56:c5:b7:3f:a2:36:0d:6c:6f:c6:
9f:58:3d:9a:27:2f:50:da:17:ed:f0:d4:68:2b:53:
fe:45:b1:21:d3:86:dd:8e:23:a4:7a:3f:d2:8e:d9:
ec:90:70:f4:39:05:64:e2:b2:33:59:0a:a8:d2:ff:
0f:f6:10:e6:02:45:b5:67:8e:08:a1:2d:28:76:39:
ad:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:27:29:E1:F9:DC:43:53:0B:03:32:3E:D8:24:63:AF:0D:A2:A9:BE
X509v3 Authority Key Identifier:
keyid:2B:F8:0A:E7:BB:74:FA:05:4B:8B:9C:23:4D:9D:12:07:61:E2:82:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186755/3B578B7E34DA11E98A0B6B59C4F9AE02/K_gK57t0-gVLi5wjTZ0SB2Higl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_gK57t0-gVLi5wjTZ0SB2Higl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186755/3B578B7E34DA11E98A0B6B59C4F9AE02/K_gK57t0-gVLi5wjTZ0SB2Higl8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7e:55:d8:e0:a6:5a:1d:53:ba:0d:73:43:9d:f7:d7:17:cb:
40:68:7e:12:ec:5e:f5:99:81:37:33:db:73:3a:0e:35:0f:2b:
f7:74:d2:06:82:85:b6:c7:ea:01:70:dd:89:0d:ae:a3:7d:bd:
e6:aa:ab:ee:1f:94:58:d2:e5:e8:d2:be:33:92:39:22:5c:22:
1f:a9:97:24:56:ea:48:a5:c0:f5:b2:ef:b8:d9:d5:09:57:83:
43:e2:39:c5:84:20:7a:82:fc:1b:f8:97:a2:94:80:ef:9d:5b:
5a:72:41:b9:1e:33:14:33:3e:da:15:b9:ce:b4:6a:e7:67:16:
4c:a6:7d:e1:cf:72:25:78:f3:be:fb:d0:b9:2a:f8:35:2e:b4:
6c:20:03:ae:c5:ea:56:13:8c:07:bd:a2:9f:70:28:bc:a6:14:
ce:d9:fa:79:a6:ac:ed:87:53:52:d9:a1:6f:e3:1b:ea:2d:c8:
44:c9:da:8e:9d:ba:df:37:2e:90:76:70:35:b7:39:7e:58:c6:
f0:f5:09:fe:32:ca:32:6f:10:3e:b6:9a:dc:2a:c5:17:f0:67:
b8:67:f1:6f:8c:b0:5a:89:54:31:3d:8c:aa:4e:b4:1f:e6:ed:
7e:9a:3e:76:60:60:ad:cc:94:57:d3:39:03:ec:3f:29:9c:62:
4c:14:43:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 01:26:43 2024 by rpki-client on console-ams.rpki-client.org