Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7EC3/F03462343C4C11ECBD03EA2DC4F9AE02/Z-Px72zGn6PprdsmzBRz7GTldXI.mft
File: Z-Px72zGn6PprdsmzBRz7GTldXI.mft (raw, json)
Hash identifier: CrgeU085HqKVr9SalJFPK7/lAXCnRx+CV+ZPN5mO1NU=
Subject key identifier: B9:2B:37:F0:41:92:54:86:82:A2:B6:3C:D5:35:23:4D:E3:5E:8C:5E
Authority key identifier: 67:E3:F1:EF:6C:C6:9F:A3:E9:AD:DB:26:CC:14:73:EC:64:E5:75:72
Certificate issuer: /CN=A91B7EC3/serialNumber=67E3F1EF6CC69FA3E9ADDB26CC1473EC64E57572
Certificate serial: 03A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-Px72zGn6PprdsmzBRz7GTldXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7EC3/F03462343C4C11ECBD03EA2DC4F9AE02/Z-Px72zGn6PprdsmzBRz7GTldXI.mft
Manifest number: 03A0
Signing time: Mon 19 Feb 2024 06:24:18 +0000
Manifest this update: Mon 19 Feb 2024 06:24:17 +0000
Manifest next update: Mon 26 Feb 2024 06:24:17 +0000
Files and hashes: 1: Z-Px72zGn6PprdsmzBRz7GTldXI.crl (hash: ItzHJK3oKZjH4SJ7sA4i5a+Uax5yc0qnPJqeXaTYcxc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 931 (0x3a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7EC3/serialNumber=67E3F1EF6CC69FA3E9ADDB26CC1473EC64E57572
Validity
Not Before: Feb 19 06:24:17 2024 GMT
Not After : Feb 26 06:24:17 2024 GMT
Subject: CN=65d2f411-d8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:4c:8b:2d:db:a7:9e:a1:00:89:6e:b9:20:
52:d6:50:ca:f0:1d:3d:77:0a:43:fb:83:f0:b7:b1:
4e:aa:d2:27:1e:c5:73:53:2b:b2:bb:00:99:dd:71:
f9:39:20:70:c3:fc:e3:60:20:d2:14:72:93:84:86:
53:cd:8f:e5:f8:bd:91:65:d4:a7:c6:b9:5b:03:53:
ca:af:c9:e5:eb:1a:5f:5a:db:bf:04:da:20:e4:51:
1d:95:33:df:94:11:51:a5:c9:e2:fa:d7:4e:0c:de:
de:e7:f3:62:f0:11:5d:f7:e3:57:15:24:3b:71:62:
91:04:36:dd:40:5e:9d:a9:14:77:54:35:96:ab:29:
3b:17:91:8b:a1:61:ce:d7:70:13:b2:9a:aa:88:47:
c4:e0:72:41:97:79:54:d8:79:5a:c3:62:e1:ab:86:
c8:e4:76:3c:ae:b4:c7:66:92:2b:41:30:ba:bb:ea:
81:85:0e:bb:9f:4f:bf:5a:ef:f7:a6:75:fa:35:56:
e8:29:74:4d:0a:b3:c4:d3:e2:4d:47:b5:78:23:63:
f3:ae:12:bb:0d:79:8e:3b:08:85:a9:36:d4:2a:2c:
f4:bf:b9:0c:09:ae:fc:6f:5d:a0:f4:51:16:65:6d:
34:08:94:0e:9b:a8:39:be:6a:e3:b9:cd:8f:1d:37:
d8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2B:37:F0:41:92:54:86:82:A2:B6:3C:D5:35:23:4D:E3:5E:8C:5E
X509v3 Authority Key Identifier:
keyid:67:E3:F1:EF:6C:C6:9F:A3:E9:AD:DB:26:CC:14:73:EC:64:E5:75:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7EC3/F03462343C4C11ECBD03EA2DC4F9AE02/Z-Px72zGn6PprdsmzBRz7GTldXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-Px72zGn6PprdsmzBRz7GTldXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7EC3/F03462343C4C11ECBD03EA2DC4F9AE02/Z-Px72zGn6PprdsmzBRz7GTldXI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b5:11:a7:a5:dc:ba:d1:34:61:4d:2f:96:6b:80:77:52:57:
96:3f:2b:72:12:b3:d5:15:0b:5e:46:c4:17:f5:8d:56:14:a8:
83:58:d7:0e:a5:22:6b:cc:90:47:dc:05:bc:b4:12:04:56:de:
ec:56:6b:1f:20:d8:33:5f:5b:7f:75:71:04:73:65:f0:88:c0:
c7:9e:a5:8d:ee:ca:d8:58:27:37:6d:aa:46:d3:63:2b:21:cb:
ea:74:c1:54:95:64:35:d9:de:86:b9:e2:0a:a5:34:81:39:28:
d5:79:8b:bd:23:71:d8:5d:3b:96:bb:4d:ba:99:a6:4b:7d:06:
81:76:b8:36:63:8f:b4:22:bc:3c:5c:0f:05:c6:b7:9f:aa:38:
36:54:e2:31:6f:a5:f9:b9:e8:0c:c5:42:ae:ad:dd:e8:30:f6:
3a:8f:1f:f5:58:2b:3a:30:88:8a:a4:a0:79:77:5d:86:aa:f7:
ea:b2:8d:8e:d2:d2:b6:72:e6:44:f3:c2:24:49:90:b7:ca:4e:
f2:ca:8e:d7:0e:57:c1:91:50:c9:bc:f5:07:d3:4b:16:f8:3e:
87:b7:20:af:85:22:b1:84:9c:a3:cb:bc:8a:4b:ab:a7:dc:d2:
df:37:9b:d3:c3:19:6a:06:ea:e1:f9:e5:68:85:3f:ed:70:4f:
5e:53:ae:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:57 2024 by rpki-client on console-ams.rpki-client.org