Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195CA5/4F7757B0295211EB83D67643C4F9AE02/lD5m420rmZhrIjvyxSoAQRfl9sU.mft
File: lD5m420rmZhrIjvyxSoAQRfl9sU.mft (raw, json)
Hash identifier: dBijxDbp+JjU35MSbirlvmys0UfT2yGORa7KiazkDPg=
Subject key identifier: 30:99:4B:D8:44:72:66:94:44:36:1A:B1:B3:76:B7:1A:20:63:53:8B
Authority key identifier: 94:3E:66:E3:6D:2B:99:98:6B:22:3B:F2:C5:2A:00:41:17:E5:F6:C5
Certificate issuer: /CN=A9195CA5/serialNumber=943E66E36D2B99986B223BF2C52A004117E5F6C5
Certificate serial: 05BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lD5m420rmZhrIjvyxSoAQRfl9sU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195CA5/4F7757B0295211EB83D67643C4F9AE02/lD5m420rmZhrIjvyxSoAQRfl9sU.mft
Manifest number: 05B8
Signing time: Wed 29 Mar 2023 00:15:48 +0000
Manifest this update: Wed 29 Mar 2023 00:15:47 +0000
Manifest next update: Wed 05 Apr 2023 00:15:47 +0000
Files and hashes: 1: lD5m420rmZhrIjvyxSoAQRfl9sU.crl (hash: 02dhSGlU26/e+qelPjiMpaV42qlYddk8WIQrT7vA3sg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1470 (0x5be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195CA5/serialNumber=943E66E36D2B99986B223BF2C52A004117E5F6C5
Validity
Not Before: Mar 29 00:15:47 2023 GMT
Not After : Apr 5 00:15:47 2023 GMT
Subject: CN=64238333-c379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:c8:53:e7:7f:20:98:87:8c:14:20:56:13:
3b:2f:87:18:91:62:14:60:5c:3a:ce:c1:37:da:12:
81:d7:b6:35:8e:53:f2:5f:f8:88:03:ae:6f:34:fe:
e5:0d:79:7f:8a:33:2b:84:40:75:c1:1d:96:4d:12:
95:04:d4:29:8c:cc:fe:2c:bd:30:75:50:d9:7d:e6:
75:e2:57:1f:7e:a4:41:22:96:0c:48:45:da:fd:b9:
9b:43:e4:e8:29:53:6b:46:b4:4d:fa:d6:a9:0c:46:
de:3f:35:d0:b2:46:0b:2c:6a:c5:d1:cb:85:b9:af:
8c:49:1e:13:76:4f:8d:6c:d0:29:e0:42:84:a3:15:
34:52:19:32:d6:94:b4:a8:5e:30:2a:7b:7a:30:54:
e9:84:f7:e6:80:d3:cf:5d:af:29:63:56:30:e8:70:
3d:d7:aa:87:54:77:05:bb:a8:45:b1:fc:ab:31:74:
71:d5:af:51:29:e9:69:b0:63:16:dd:4c:01:4d:26:
16:2d:ec:31:8e:39:89:99:bc:94:6a:ea:50:14:36:
cd:79:12:bb:63:27:ca:7f:97:bf:ae:eb:f5:4f:97:
10:5d:74:a9:68:83:e5:83:ae:08:62:37:84:d8:2a:
ea:8a:b8:75:26:ec:f2:35:a9:88:5a:36:ae:7b:54:
1c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:99:4B:D8:44:72:66:94:44:36:1A:B1:B3:76:B7:1A:20:63:53:8B
X509v3 Authority Key Identifier:
keyid:94:3E:66:E3:6D:2B:99:98:6B:22:3B:F2:C5:2A:00:41:17:E5:F6:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195CA5/4F7757B0295211EB83D67643C4F9AE02/lD5m420rmZhrIjvyxSoAQRfl9sU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lD5m420rmZhrIjvyxSoAQRfl9sU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195CA5/4F7757B0295211EB83D67643C4F9AE02/lD5m420rmZhrIjvyxSoAQRfl9sU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:1d:94:2c:10:3f:c6:7e:35:bb:ef:96:98:ed:d3:73:f3:9e:
1e:e9:63:ed:7b:d4:56:93:e6:ad:94:53:98:8b:60:6f:16:82:
d1:f1:b5:c0:4b:6d:2d:38:c1:0c:0b:43:20:6e:3f:2d:d9:66:
5c:91:8e:4a:06:0d:8b:df:6b:9c:45:88:54:4d:6c:13:97:1e:
d2:8f:10:cd:c8:0b:cf:f1:13:78:73:78:c3:3e:68:6f:64:ed:
3d:eb:90:80:7e:44:89:8a:b7:fd:e4:ad:e3:91:e1:4c:bc:45:
03:d5:cb:0a:b9:12:38:48:bb:3b:dd:b6:33:b5:c0:09:c7:56:
12:f5:83:b2:4f:2d:d9:fe:79:da:c2:74:41:e5:84:a5:39:d2:
16:f0:90:b3:6d:d7:ae:17:98:05:00:85:e0:f3:32:bf:c4:41:
a3:36:0e:38:fc:41:a3:bc:bf:80:a4:e6:f7:67:ae:a4:96:a1:
98:7b:28:83:d8:ca:5d:fb:22:13:87:e7:ec:0f:da:ce:13:68:
31:80:2f:44:32:07:48:42:a8:c9:d6:1a:b7:32:1a:3f:b4:da:
96:9f:39:7f:05:9e:10:6a:90:4f:6c:7d:5d:5c:f0:46:8e:d3:
a8:ee:2a:20:b2:23:6c:dc:d5:96:11:ef:51:0b:3d:14:ad:30:
5c:7e:41:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:47 2024 by rpki-client on console-ams.rpki-client.org