Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/oR4sIXmzapZHuVH8YC13kwe_rm4.mft
File: oR4sIXmzapZHuVH8YC13kwe_rm4.mft (raw, json)
Hash identifier: UORb5OQAuTS4G4Rf14xNJHp6JZm+HtH1gl9dIcXCJdQ=
Subject key identifier: 07:87:12:4D:0F:27:D1:FA:10:0A:5D:FB:06:6B:AE:91:E9:22:39:BE
Authority key identifier: A1:1E:2C:21:79:B3:6A:96:47:B9:51:FC:60:2D:77:93:07:BF:AE:6E
Certificate issuer: /CN=A91C08FA/serialNumber=A11E2C2179B36A9647B951FC602D779307BFAE6E
Certificate serial: 08BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oR4sIXmzapZHuVH8YC13kwe_rm4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/oR4sIXmzapZHuVH8YC13kwe_rm4.mft
Manifest number: 08B0
Signing time: Sat 08 Jun 2024 21:48:24 +0000
Manifest this update: Sat 08 Jun 2024 21:48:23 +0000
Manifest next update: Sat 15 Jun 2024 21:48:23 +0000
Files and hashes: 1: oR4sIXmzapZHuVH8YC13kwe_rm4.crl (hash: pjhlCOs5wOz/Tkncv5Gmq6BpxJrPKQCCRFSBNPb+LYU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2238 (0x8be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C08FA/serialNumber=A11E2C2179B36A9647B951FC602D779307BFAE6E
Validity
Not Before: Jun 8 21:48:23 2024 GMT
Not After : Jun 15 21:48:23 2024 GMT
Subject: CN=6664d1a7-f068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:70:dd:2f:84:36:08:43:69:6b:4d:75:b2:6f:
c2:c9:61:e6:4b:92:0c:7f:43:02:cd:4b:7d:bd:50:
fa:dc:eb:49:ca:c1:cc:ce:a8:fd:b8:53:a0:33:cf:
a3:0a:60:be:2f:e4:c2:ab:1b:73:94:ee:50:05:08:
bf:db:b0:c4:ba:78:61:d6:f4:8e:78:44:07:3d:3b:
72:b5:6f:fa:46:16:ac:a3:ca:b7:bf:a8:c0:1a:c5:
9c:cd:2f:62:d2:a7:21:d8:53:be:3f:6d:5a:08:e7:
63:24:17:a4:0b:9d:70:f7:e3:68:9a:a2:96:12:35:
f6:68:f3:30:ac:33:4b:50:11:dd:e3:64:5b:19:51:
a9:ec:5b:9e:89:a3:6b:8c:93:59:4f:1d:02:6b:72:
e3:22:4a:80:e3:9a:44:ac:bf:27:21:ea:92:4f:78:
3e:86:ef:e3:53:4e:81:0a:5e:c8:d5:c1:a8:58:08:
0c:f6:8f:84:e4:e5:bb:83:6b:90:69:db:88:26:61:
39:66:9e:3b:ea:30:c1:cc:8d:79:ba:09:32:54:af:
05:46:fa:c6:79:11:01:09:53:e7:af:2d:68:21:7b:
45:69:ec:98:05:87:16:23:d1:77:6c:54:06:5e:c5:
a8:96:47:86:87:37:89:bd:70:eb:54:62:9f:27:33:
ac:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:87:12:4D:0F:27:D1:FA:10:0A:5D:FB:06:6B:AE:91:E9:22:39:BE
X509v3 Authority Key Identifier:
keyid:A1:1E:2C:21:79:B3:6A:96:47:B9:51:FC:60:2D:77:93:07:BF:AE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/oR4sIXmzapZHuVH8YC13kwe_rm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oR4sIXmzapZHuVH8YC13kwe_rm4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/oR4sIXmzapZHuVH8YC13kwe_rm4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:b8:ae:39:6d:85:0c:6d:66:2b:25:22:ea:3b:2b:0c:54:1c:
a8:67:77:ff:34:a3:73:6a:bf:78:aa:91:66:66:6c:bb:f2:c9:
a6:55:b4:e1:da:c3:4e:91:dc:67:27:b3:f4:df:f9:7a:e4:8c:
f5:7f:d9:6c:55:be:dc:00:1b:0a:61:99:76:c4:fe:8f:e6:f4:
7b:db:2b:19:88:1a:df:bb:43:2e:bc:ae:d8:7a:6f:31:1e:93:
1f:76:83:36:0a:1b:9b:24:6f:85:45:27:ef:5b:22:f3:96:87:
43:17:ae:a2:31:f2:cd:73:54:27:55:e4:5f:11:38:f1:c2:a5:
15:e5:74:ff:d8:ca:ee:83:4b:46:7a:de:8f:57:48:ed:b2:58:
9f:0f:c9:3e:06:a8:a7:a6:ea:28:ad:3c:b6:7f:d2:b3:81:ac:
0a:8f:57:cf:b9:bd:29:e4:1d:92:31:3b:79:54:eb:30:ea:56:
2d:78:1b:ac:10:47:30:93:e8:8c:ac:5c:80:93:5e:b4:4f:6d:
b2:43:45:f3:c3:d1:9c:23:28:2b:c7:90:c1:25:a4:1a:18:9b:
67:36:5b:85:47:fd:f9:a9:fa:c6:b2:b6:da:e9:6d:de:af:5e:
5d:7e:04:91:52:89:c5:00:8d:7c:9d:04:99:30:da:c8:93:d8:
ca:7a:1c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 21:35:02 2024 by rpki-client on console-fra.rpki-client.org