Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C87C6/CCF6E2BAF24211EA98A4A75CC4F9AE02/QbbA1VtdPT3iBkF5BdV_1qVr65U.mft
File: QbbA1VtdPT3iBkF5BdV_1qVr65U.mft (raw, json)
Hash identifier: JohsEIN3PQwXTEoSKos2DTbhbokRwjOgcnf8buEWNrQ=
Subject key identifier: 57:AB:8D:EC:AC:64:F7:37:7E:75:2D:14:CD:4C:82:69:83:EE:95:FB
Authority key identifier: 41:B6:C0:D5:5B:5D:3D:3D:E2:06:41:79:05:D5:7F:D6:A5:6B:EB:95
Certificate issuer: /CN=A91C87C6/serialNumber=41B6C0D55B5D3D3DE206417905D57FD6A56BEB95
Certificate serial: 06FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbbA1VtdPT3iBkF5BdV_1qVr65U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C87C6/CCF6E2BAF24211EA98A4A75CC4F9AE02/QbbA1VtdPT3iBkF5BdV_1qVr65U.mft
Manifest number: 06F7
Signing time: Tue 02 Apr 2024 22:48:08 +0000
Manifest this update: Tue 02 Apr 2024 22:48:07 +0000
Manifest next update: Tue 09 Apr 2024 22:48:07 +0000
Files and hashes: 1: QbbA1VtdPT3iBkF5BdV_1qVr65U.crl (hash: eg4WBe8IseB79Ztuls89akTHqTqVGaEic3xOUFYGBA4=)
2: AAE88920F24311EAA9BBC15FC4F9AE02.roa (hash: +R5gXIOq2hmsBUMIRhxLZGO8a95SExMSUK/V9BLxq0M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1787 (0x6fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C87C6/serialNumber=41B6C0D55B5D3D3DE206417905D57FD6A56BEB95
Validity
Not Before: Apr 2 22:48:07 2024 GMT
Not After : Apr 9 22:48:07 2024 GMT
Subject: CN=660c8b28-afdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:f3:ec:e9:91:0d:1f:25:48:2b:34:21:ee:
8c:b1:12:c3:43:06:b0:25:ca:9e:6a:84:61:5c:cd:
b1:02:65:7d:9a:25:79:7f:18:10:1b:ef:91:15:58:
24:c1:95:10:e9:fc:c0:f3:2d:85:83:ca:6c:a8:22:
5f:77:2d:78:c3:fa:f5:5a:ef:ba:a5:75:0c:9c:b7:
d8:bc:f3:40:f4:f7:c8:34:f3:8b:5f:36:26:ac:5d:
ce:7c:ae:84:ec:8f:3d:0b:6e:ef:0a:1b:03:e0:ea:
7a:4f:fd:ad:f8:d7:83:d6:35:b3:0d:98:74:21:24:
93:29:e9:b2:64:6f:f7:7e:3e:b7:ea:c0:f9:f1:b5:
7f:44:b0:46:f0:9f:21:df:80:5b:67:7a:ab:ad:3f:
41:9e:e5:31:b1:e6:da:02:e3:e4:c5:77:05:bf:6c:
75:a5:ae:42:04:e4:0b:9b:f7:b0:96:62:2f:e3:bc:
a4:40:94:e6:f1:c2:c1:7a:8f:46:86:7d:ce:d0:ef:
d7:06:04:49:e3:e0:90:70:7b:68:3a:3b:6e:27:2e:
56:4b:fa:d5:8d:7b:f2:1c:25:d7:9a:7b:6a:46:7a:
56:bd:04:e5:8f:49:0e:07:4f:50:3e:2d:f0:d8:5e:
d7:1d:2f:65:2e:f9:50:19:5d:3f:a6:83:9f:b7:1a:
59:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AB:8D:EC:AC:64:F7:37:7E:75:2D:14:CD:4C:82:69:83:EE:95:FB
X509v3 Authority Key Identifier:
keyid:41:B6:C0:D5:5B:5D:3D:3D:E2:06:41:79:05:D5:7F:D6:A5:6B:EB:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C87C6/CCF6E2BAF24211EA98A4A75CC4F9AE02/QbbA1VtdPT3iBkF5BdV_1qVr65U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbbA1VtdPT3iBkF5BdV_1qVr65U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C87C6/CCF6E2BAF24211EA98A4A75CC4F9AE02/QbbA1VtdPT3iBkF5BdV_1qVr65U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:2b:59:2c:29:40:af:9a:55:79:ad:98:9e:81:86:e2:41:f5:
1d:e4:65:3e:8b:e2:a8:59:f2:fe:18:fc:27:21:2e:b5:37:c5:
f5:b1:b3:89:31:83:e6:52:2b:27:13:b4:61:48:6a:69:bc:fb:
fe:6a:15:0a:fb:bd:a7:44:6b:89:64:fe:41:a1:b3:88:d7:04:
cf:d8:f3:d5:26:34:ca:66:2f:6c:0a:c1:0f:80:68:8d:2c:5f:
4b:9c:59:79:ae:6d:eb:a7:a8:01:75:e2:6c:9e:67:e6:4d:31:
7f:84:f4:0b:8b:6d:35:33:dd:5d:90:6e:4e:c0:c2:11:63:b1:
57:4b:cf:c6:34:6e:1d:12:74:4f:28:cd:5d:4e:60:8b:03:e0:
15:36:25:e4:b9:39:0e:14:51:f7:fb:4b:70:48:fb:3f:a0:19:
03:60:e1:7a:5f:5c:10:af:1c:b7:7f:2d:a5:15:86:ab:41:7e:
a7:e2:88:41:af:74:39:fb:7a:00:6a:d3:90:fd:bb:84:d2:88:
bd:28:43:3f:dc:1c:68:e3:a5:ff:f7:8f:d0:61:81:2e:92:64:
17:96:fe:d2:05:7b:e3:c4:27:4b:f0:4f:12:b1:c6:49:07:d9:
6e:f9:5a:80:cb:d2:33:0b:fc:b8:a6:10:6d:79:ba:41:dc:fb:
0c:6b:e9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:40 2024 by rpki-client on console-fra.rpki-client.org