Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A129B/4033C1D4343E11E680B1E72CC4F9AE02/a7bH_f9aacj-73MvrV0bCkkMa30.mft
File: a7bH_f9aacj-73MvrV0bCkkMa30.mft (raw, json)
Hash identifier: H6fmqMt6dwyFpNfI49mQoxLG7stJn51o5obGlSlWMWE=
Subject key identifier: CB:05:FF:BC:12:A0:7C:9A:97:AB:BC:89:DB:49:D0:85:A4:9A:D6:0F
Authority key identifier: 6B:B6:C7:FD:FF:5A:69:C8:FE:EF:73:2F:AD:5D:1B:0A:49:0C:6B:7D
Certificate issuer: /CN=A91A129B/serialNumber=6BB6C7FDFF5A69C8FEEF732FAD5D1B0A490C6B7D
Certificate serial: 1E2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7bH_f9aacj-73MvrV0bCkkMa30.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A129B/4033C1D4343E11E680B1E72CC4F9AE02/a7bH_f9aacj-73MvrV0bCkkMa30.mft
Manifest number: 1E07
Signing time: Wed 28 Dec 2022 16:41:11 +0000
Manifest this update: Wed 28 Dec 2022 16:41:11 +0000
Manifest next update: Wed 04 Jan 2023 16:41:11 +0000
Files and hashes: 1: a7bH_f9aacj-73MvrV0bCkkMa30.crl (hash: 7GXLoPVUk9TVqvd5MjUi304H9Ba+if/DtNYSDEMvNgs=)
2: 3CBCBEB4344011E6A0B7E830C4F9AE02.roa (hash: 7Ym3ke69u6Sca2swOcWcWelbNaYBlCy7qjgYG5i+cwE=)
3: 899589747C5111EB9CF05385C4F9AE02.roa (hash: rl7K0d/Cmu8HzhiD6xh3+qRszyOeHV9zgCl9X4rBZvo=)
4: 0C0BF34CC15A11EAAB5B1038C4F9AE02.roa (hash: lnuzlyrn0weYz0xdVXlIRxe5l9fOSRr7o7voSfaiAIU=)
5: AC2CFAF8C15811EA868F3333C4F9AE02.roa (hash: fM8FjoxV9jyFHxdU4NxsOirjmXXlBK0z12wIL4F7VsE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7723 (0x1e2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A129B/serialNumber=6BB6C7FDFF5A69C8FEEF732FAD5D1B0A490C6B7D
Validity
Not Before: Dec 28 16:41:11 2022 GMT
Not After : Jan 4 16:41:11 2023 GMT
Subject: CN=63ac71a7-cb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:10:24:16:45:66:4e:59:e6:ab:c9:dd:bb:91:
57:f0:9b:f9:20:58:f6:59:93:bc:99:53:17:76:f9:
f1:65:f3:46:9f:8a:84:c0:ed:81:4f:9e:8a:fb:7a:
8d:d5:f1:f0:79:77:27:c9:99:52:8f:67:1a:1f:15:
9f:36:e4:9a:8e:97:f5:e6:74:17:41:7e:db:24:00:
df:66:b4:9c:ce:10:cf:62:b6:6a:88:ea:14:c3:80:
b6:6d:3b:da:49:76:f9:c9:89:68:b7:a3:09:e6:9d:
86:fc:fe:08:1e:9a:0b:73:bf:8f:fe:42:dc:bb:d1:
a5:e9:f3:82:37:f8:a5:09:c5:24:f2:76:39:9e:ad:
71:1a:e0:ab:c7:05:ef:59:01:fb:cd:9b:38:d7:e1:
76:f4:82:0b:54:e2:80:e0:69:86:66:13:d9:99:f4:
bb:f2:f9:81:b5:20:e4:42:b0:c2:cc:82:78:26:4c:
3c:8d:b2:c0:af:82:d8:5c:86:e7:eb:78:ec:3c:fd:
94:c7:9d:c8:da:8e:3a:1e:3c:06:ea:9e:bf:31:a2:
73:38:b9:b2:f3:00:e3:bc:c1:91:32:ba:ed:2f:e4:
68:38:b4:5e:ee:eb:53:2c:5d:f3:7c:55:0e:31:ea:
af:87:d4:42:a0:c6:07:f7:cd:0e:45:e9:14:c8:ae:
79:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:05:FF:BC:12:A0:7C:9A:97:AB:BC:89:DB:49:D0:85:A4:9A:D6:0F
X509v3 Authority Key Identifier:
keyid:6B:B6:C7:FD:FF:5A:69:C8:FE:EF:73:2F:AD:5D:1B:0A:49:0C:6B:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A129B/4033C1D4343E11E680B1E72CC4F9AE02/a7bH_f9aacj-73MvrV0bCkkMa30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7bH_f9aacj-73MvrV0bCkkMa30.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A129B/4033C1D4343E11E680B1E72CC4F9AE02/a7bH_f9aacj-73MvrV0bCkkMa30.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:92:32:2d:e4:c3:f5:2a:c4:63:87:4d:73:d2:05:73:77:02:
98:a7:3e:5b:70:bf:c0:90:eb:6a:ac:5d:af:a5:06:5d:08:ec:
88:87:0e:0d:e6:01:0c:1e:6a:a0:00:de:a9:d4:73:50:e5:3d:
c8:b3:de:7c:c3:e0:87:fa:e5:7c:47:85:ab:44:ad:b5:a0:c2:
df:a0:99:10:cb:09:7e:fe:c7:b6:43:42:ae:34:25:72:b3:51:
b0:fc:bf:5e:f4:43:9b:50:82:2c:f3:58:9d:2a:82:aa:23:21:
da:8d:30:62:4a:f1:04:88:39:0e:b4:79:ea:a7:b6:8e:e5:81:
cc:4b:1d:70:07:ca:8d:f9:7a:d9:c4:17:61:9b:93:cd:07:a1:
77:24:86:2e:cf:ec:5f:d7:e0:4a:5a:27:62:da:0b:bb:a9:35:
9a:76:21:bf:e9:04:4a:d9:e3:e8:75:fc:dc:fe:5e:87:06:1d:
32:4a:4c:2d:cd:39:ea:f3:1d:fa:f4:ce:37:54:0c:a9:86:f3:
70:a8:40:02:4b:30:16:6b:78:57:31:76:2a:a2:82:cf:78:75:
f6:4c:b2:cd:b3:f9:a3:f1:8f:9e:b9:57:a6:e2:d7:53:bd:89:
e6:d9:66:55:b0:c5:4f:03:45:70:b7:48:4f:f9:d9:9d:3f:43:
7b:8f:2a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:53 2024 by rpki-client on console-ams.rpki-client.org