Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194437/9EE26F901EBB11E98672BB64C4F9AE02/Dt_0_kQphXb27203ZxJoAmiGgYo.mft
File: Dt_0_kQphXb27203ZxJoAmiGgYo.mft (raw, json)
Hash identifier: rQmN++yj3sgI7kSNW21YDnPxl+c1CwQykSWrbYsP/o0=
Subject key identifier: 57:D0:A9:59:1B:78:F2:6E:57:81:68:6D:DD:C6:37:08:EE:8F:9D:00
Authority key identifier: 0E:DF:F4:FE:44:29:85:76:F6:EF:6D:37:67:12:68:02:68:86:81:8A
Certificate issuer: /CN=A9194437/serialNumber=0EDFF4FE44298576F6EF6D37671268026886818A
Certificate serial: 1048
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dt_0_kQphXb27203ZxJoAmiGgYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194437/9EE26F901EBB11E98672BB64C4F9AE02/Dt_0_kQphXb27203ZxJoAmiGgYo.mft
Manifest number: 103A
Signing time: Wed 31 Jul 2024 17:55:54 +0000
Manifest this update: Wed 31 Jul 2024 17:55:54 +0000
Manifest next update: Wed 07 Aug 2024 17:55:54 +0000
Files and hashes: 1: Dt_0_kQphXb27203ZxJoAmiGgYo.crl (hash: rmKo0+b57XLNAhXST3I/i6HCsNawsq0UAjckePUX24c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4168 (0x1048)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194437/serialNumber=0EDFF4FE44298576F6EF6D37671268026886818A
Validity
Not Before: Jul 31 17:55:54 2024 GMT
Not After : Aug 7 17:55:54 2024 GMT
Subject: CN=66aa7aaa-e85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6d:98:b5:56:1c:b3:8d:73:22:02:25:c5:43:
b6:0d:b4:89:5b:9b:c5:50:6a:dd:e7:ba:4e:be:ce:
2d:fb:84:34:6a:6f:95:02:2c:e8:5c:c9:71:f2:41:
d3:20:4d:9a:9c:45:c9:10:3a:99:4f:67:f5:5e:61:
1a:95:b9:f2:28:c9:7d:0a:c5:f9:a8:67:56:1b:e9:
9a:df:e3:32:77:0a:c8:86:50:8d:08:df:ba:52:4b:
ad:58:1d:78:78:eb:b6:0b:11:db:81:26:c1:d2:16:
fc:d9:b8:f0:95:1a:b2:b3:61:08:10:7c:99:59:b5:
df:fb:91:69:82:cb:fd:14:7d:e1:86:5d:de:5d:44:
3f:b8:9f:2a:16:59:9b:99:c9:f8:64:5e:2e:92:98:
09:d7:e8:2d:d2:67:5c:ea:fb:f6:2c:f0:5f:65:56:
06:66:b5:9c:06:d8:9f:c5:52:3c:c6:ed:70:3e:08:
a7:ef:c6:7f:8c:2e:87:50:a4:f2:ae:db:14:96:05:
f5:e5:0b:a0:53:ce:5e:c0:34:0d:82:46:07:b0:d4:
6e:30:7e:5c:dd:a2:f4:11:14:d9:83:69:0d:05:44:
88:3c:30:76:9a:d8:c9:ab:97:09:82:9e:0a:0c:e7:
e2:70:bf:67:ee:b6:45:89:16:4f:52:4c:c1:14:a6:
92:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D0:A9:59:1B:78:F2:6E:57:81:68:6D:DD:C6:37:08:EE:8F:9D:00
X509v3 Authority Key Identifier:
keyid:0E:DF:F4:FE:44:29:85:76:F6:EF:6D:37:67:12:68:02:68:86:81:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194437/9EE26F901EBB11E98672BB64C4F9AE02/Dt_0_kQphXb27203ZxJoAmiGgYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dt_0_kQphXb27203ZxJoAmiGgYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194437/9EE26F901EBB11E98672BB64C4F9AE02/Dt_0_kQphXb27203ZxJoAmiGgYo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:8c:85:60:5a:0c:14:00:cd:d3:3f:0b:e2:76:30:da:23:2d:
56:6e:5c:54:5f:09:0e:5d:c0:af:a2:6d:66:ed:f6:41:c1:8e:
76:c1:94:9a:71:bd:06:cf:5f:7c:bf:7d:1e:74:45:e0:15:b8:
c1:c7:59:02:40:c2:86:55:8d:86:d5:b3:7d:89:95:bd:48:c0:
4a:41:a9:77:cb:e8:fa:a9:82:96:8e:ef:5f:59:11:a8:ba:94:
9e:c6:ac:d7:5a:6d:45:dd:73:77:fa:1f:d7:a4:43:3f:92:9e:
c1:91:1a:c3:07:6f:70:9e:70:d3:f2:f6:8a:67:67:47:6b:a4:
0a:69:e6:20:c3:af:f7:9f:a4:7c:91:af:24:70:72:6b:55:ca:
35:bf:24:c5:16:48:e9:84:2b:6e:a6:85:66:d3:8c:26:23:21:
0a:52:59:75:e8:e1:3b:4b:8a:96:66:aa:29:e7:48:72:3e:bd:
9d:25:9d:20:dc:42:97:eb:b6:f4:2b:d9:6e:73:f5:88:51:1f:
39:8f:bc:ed:b2:57:6f:b9:44:ae:dd:6a:b6:1d:26:e3:dd:d1:
1e:27:6b:0e:9d:b6:4c:b8:d7:ab:a8:65:91:d2:5c:eb:ef:8b:
7a:49:3d:dd:2e:6e:e2:a4:5a:4b:7d:b6:b4:0c:2e:93:9a:1a:
a5:c6:8f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 22:25:19 2024 by rpki-client on console-ams.rpki-client.org