Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0BAB/602C66547B1511EAA5A4A869C4F9AE02/gfRnrcMX0WNIr0MwSwRBRDof4yw.mft
File: gfRnrcMX0WNIr0MwSwRBRDof4yw.mft (raw, json)
Hash identifier: 5JzbdKbFW8FPXsY5Ssh0H/cZG/770tQqL8lojeMbLF0=
Subject key identifier: 5F:CD:8F:78:F6:2C:CF:E2:C0:37:FD:0E:0B:E2:34:36:2E:7D:69:E3
Authority key identifier: 81:F4:67:AD:C3:17:D1:63:48:AF:43:30:4B:04:41:44:3A:1F:E3:2C
Certificate issuer: /CN=A91B0BAB/serialNumber=81F467ADC317D16348AF43304B0441443A1FE32C
Certificate serial: 0687
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gfRnrcMX0WNIr0MwSwRBRDof4yw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0BAB/602C66547B1511EAA5A4A869C4F9AE02/gfRnrcMX0WNIr0MwSwRBRDof4yw.mft
Manifest number: 0FEA
Signing time: Fri 04 Oct 2024 04:38:54 +0000
Manifest this update: Fri 04 Oct 2024 04:38:53 +0000
Manifest next update: Fri 11 Oct 2024 04:38:53 +0000
Files and hashes: 1: gfRnrcMX0WNIr0MwSwRBRDof4yw.crl (hash: qDzQuHF1c7Lx2p+YmCTI72xyQ53c40G4NMV4sl2Eusw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1671 (0x687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0BAB/serialNumber=81F467ADC317D16348AF43304B0441443A1FE32C
Validity
Not Before: Oct 4 04:38:53 2024 GMT
Not After : Oct 11 04:38:53 2024 GMT
Subject: CN=66ff715d-8e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2d:1d:b3:91:5d:fd:2d:3d:a1:48:1a:89:8e:
db:2b:70:02:e5:98:28:30:e0:72:61:9f:ff:b4:3f:
61:39:1e:0c:b6:be:6b:6f:e0:07:ec:c6:c1:3a:6c:
b8:f9:bb:e9:06:ba:44:52:10:60:44:91:88:4f:bc:
27:2b:40:07:0e:a4:3b:3f:2f:01:a5:fd:48:4f:82:
cf:d7:e4:67:be:cf:fe:db:5b:76:56:e0:73:14:a1:
f1:58:8c:a4:82:d5:3f:9f:18:80:27:a5:ca:52:83:
0a:fb:7b:3e:df:b8:7c:b7:6b:ce:44:00:02:84:40:
73:a5:e7:0d:b8:78:dd:ef:03:5e:66:5f:05:05:e3:
95:6d:27:85:33:8f:40:b2:41:86:6a:7f:1a:33:4a:
18:a7:4c:0a:2d:90:55:bf:9d:83:cf:25:38:0a:f3:
7b:44:8a:9a:d9:b1:90:79:f8:2a:dc:52:06:34:ff:
45:b5:45:f5:d8:bf:4d:41:a6:43:b3:51:af:93:a0:
00:41:1c:15:f0:f4:ea:5a:dd:1f:05:6a:b0:34:e2:
20:79:d1:fd:fc:1d:a7:fa:6a:ba:86:51:47:19:af:
2e:61:6e:40:ae:42:0c:21:73:e4:2d:c7:7b:3b:b6:
d3:c4:e7:c1:38:de:34:d9:f9:4c:14:57:a8:6d:65:
b0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CD:8F:78:F6:2C:CF:E2:C0:37:FD:0E:0B:E2:34:36:2E:7D:69:E3
X509v3 Authority Key Identifier:
keyid:81:F4:67:AD:C3:17:D1:63:48:AF:43:30:4B:04:41:44:3A:1F:E3:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0BAB/602C66547B1511EAA5A4A869C4F9AE02/gfRnrcMX0WNIr0MwSwRBRDof4yw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gfRnrcMX0WNIr0MwSwRBRDof4yw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0BAB/602C66547B1511EAA5A4A869C4F9AE02/gfRnrcMX0WNIr0MwSwRBRDof4yw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:c0:82:39:b2:b3:b4:3d:23:22:45:7d:34:e6:6b:70:57:5e:
9d:32:ae:34:52:f1:f3:76:b1:d8:71:d4:9f:c2:2f:dc:56:be:
72:36:76:58:ae:a2:e8:3b:7a:f6:9d:70:c4:0f:f6:1e:8a:b8:
07:31:3f:1f:d5:28:50:6b:03:8b:32:09:4d:69:f5:35:85:ff:
e9:c1:f9:e0:0c:ab:1d:91:cc:9d:92:5f:b5:76:a0:47:bf:87:
34:ae:12:15:5f:88:91:d6:e2:f9:15:50:d9:61:cd:f3:7b:b8:
d6:ce:4c:77:6a:2d:78:55:6f:09:f5:72:43:ed:be:f7:e9:bc:
d8:85:09:92:44:a3:46:cd:0f:e2:8a:03:aa:ac:33:63:7a:32:
63:ad:77:8e:cc:9f:94:f1:7f:b7:57:c6:4b:2e:36:90:fb:1a:
6c:81:d5:33:e7:fb:b2:9e:41:92:1b:76:a0:8a:f9:c6:18:f6:
2b:25:4e:f2:2b:c8:86:02:ae:62:0e:ec:26:e6:42:cc:d0:d2:
eb:b6:75:7e:b3:4e:d4:d7:c4:cf:20:38:30:ed:a8:d1:8d:d5:
19:7a:2e:12:02:fe:a9:98:77:43:29:9c:a6:8b:4a:b6:3c:10:
3a:66:54:df:2f:7b:0b:43:4c:7c:ad:d9:07:ec:58:3c:de:d1:
68:3b:d2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 21:12:39 2024 by rpki-client on console-ams.rpki-client.org