Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188844/BB160356FCB411EAA028A40AC4F9AE02/g8qOn9YBtd1dXQXkVltHHhAyMMo.mft
File: g8qOn9YBtd1dXQXkVltHHhAyMMo.mft (raw, json)
Hash identifier: k938qn7dk7K4HfLxCwWEECPVhl00WMtOVw/DU7WAx4w=
Subject key identifier: AF:93:F3:CA:E1:39:3F:79:78:F6:FB:0B:6E:A3:AD:BC:D9:22:8B:03
Authority key identifier: 83:CA:8E:9F:D6:01:B5:DD:5D:5D:05:E4:56:5B:47:1E:10:32:30:CA
Certificate issuer: /CN=A9188844/serialNumber=83CA8E9FD601B5DD5D5D05E4565B471E103230CA
Certificate serial: 0734
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8qOn9YBtd1dXQXkVltHHhAyMMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188844/BB160356FCB411EAA028A40AC4F9AE02/g8qOn9YBtd1dXQXkVltHHhAyMMo.mft
Manifest number: 072F
Signing time: Tue 03 Sep 2024 01:10:59 +0000
Manifest this update: Tue 03 Sep 2024 01:10:59 +0000
Manifest next update: Tue 10 Sep 2024 01:10:59 +0000
Files and hashes: 1: g8qOn9YBtd1dXQXkVltHHhAyMMo.crl (hash: fUb1gAjOlmEFnj6fA/76C/TSuN0/SDoiyixsIYPIYro=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1844 (0x734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188844/serialNumber=83CA8E9FD601B5DD5D5D05E4565B471E103230CA
Validity
Not Before: Sep 3 01:10:59 2024 GMT
Not After : Sep 10 01:10:59 2024 GMT
Subject: CN=66d66223-1669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:79:30:6a:c9:a9:30:23:65:5b:0c:53:d2:
ef:c1:fa:c9:51:39:f6:36:bd:3f:6c:c0:ca:d1:53:
01:32:ce:63:59:a5:71:be:9e:5c:2f:c7:31:a4:07:
cb:e3:81:78:68:32:66:e8:db:3d:5a:e8:15:aa:dc:
bd:d8:9a:10:07:14:e0:ca:7a:74:20:6d:53:19:bb:
ef:19:f2:37:73:8b:7a:b0:66:35:62:84:08:fb:f5:
70:1f:f3:3a:4f:9f:e2:ee:05:f5:f8:1d:79:bc:c1:
80:8c:40:b8:db:27:ef:21:db:cb:c4:76:88:34:6a:
2f:32:f9:27:6b:ba:3e:2b:df:ea:d9:b0:43:24:28:
cd:be:a5:d4:0f:70:10:0e:36:b8:5a:12:1f:f5:aa:
1b:56:98:f9:08:cb:d4:08:53:2d:94:a9:91:38:88:
b4:48:a5:c6:74:43:d9:7c:0e:1a:0f:94:53:ce:7f:
55:28:78:72:17:05:88:e0:32:fd:4d:3f:9c:13:fb:
e1:e0:81:82:fb:24:64:88:82:ab:9e:eb:ca:fa:e7:
96:83:d3:0b:47:9d:ba:da:a3:70:f8:61:ef:7e:d3:
83:67:03:1d:ec:d4:52:3e:52:2c:20:f0:4b:46:77:
a9:58:cf:37:be:f8:f8:14:aa:4f:bb:c6:28:20:0c:
ec:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:93:F3:CA:E1:39:3F:79:78:F6:FB:0B:6E:A3:AD:BC:D9:22:8B:03
X509v3 Authority Key Identifier:
keyid:83:CA:8E:9F:D6:01:B5:DD:5D:5D:05:E4:56:5B:47:1E:10:32:30:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188844/BB160356FCB411EAA028A40AC4F9AE02/g8qOn9YBtd1dXQXkVltHHhAyMMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8qOn9YBtd1dXQXkVltHHhAyMMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188844/BB160356FCB411EAA028A40AC4F9AE02/g8qOn9YBtd1dXQXkVltHHhAyMMo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2a:4e:6d:ac:4c:14:4d:8b:22:99:c1:f2:b9:31:8d:58:af:
8f:d2:cd:d4:78:ae:d0:f1:98:e6:c6:e6:16:83:76:c3:9c:5c:
60:87:ba:a5:0d:43:18:e6:8d:5c:de:70:fb:2b:ef:37:0c:a7:
02:a1:1a:5a:00:6b:ca:e0:9a:9c:bf:cd:81:6b:6c:42:fe:5e:
7a:8d:de:51:6c:2c:95:ed:6d:26:23:d3:78:b1:bb:e6:89:91:
aa:72:ea:5b:d5:c7:ef:76:69:f5:92:21:10:68:b5:c9:6a:15:
91:00:33:68:a8:4c:57:40:3d:f0:ce:20:13:45:b2:93:a1:a6:
66:db:d6:5c:70:fe:be:92:21:7d:95:6e:c5:df:e6:0a:ba:c8:
74:5c:5c:5e:74:e6:ad:b6:42:86:e6:66:73:db:c7:02:64:a0:
30:12:cd:9d:27:8b:65:f7:4f:ed:3c:50:bc:b8:66:53:5a:3a:
ff:2d:24:51:e4:58:11:89:63:9f:6c:eb:9b:2e:49:1e:fd:6c:
86:8d:94:5d:6d:47:bf:01:b7:0b:de:a8:e4:c1:65:fc:6c:ec:
96:48:ca:3f:8f:ce:11:8a:c0:7e:bd:44:ed:b2:a7:e4:27:c5:
de:53:9c:ed:de:5e:c4:0c:66:aa:9f:e8:f3:8a:a2:70:06:fa:
ac:1d:39:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 19:47:55 2024 by rpki-client on console-fra.rpki-client.org