Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB475/6E7424AA207011EEA9901416C4F9AE02/25S9CMLe_TnHT8QDk1dzpJDRm5g.mft
File: 25S9CMLe_TnHT8QDk1dzpJDRm5g.mft (raw, json)
Hash identifier: SjDliKGPV8Pkr8QDsiA/seYWS1Yeut/59d6Nhm83IYQ=
Subject key identifier: A8:FE:2C:6E:CA:8B:0D:D7:A6:EE:F4:4B:37:E8:90:56:A3:34:E6:64
Authority key identifier: DB:94:BD:08:C2:DE:FD:39:C7:4F:C4:03:93:57:73:A4:90:D1:9B:98
Certificate issuer: /CN=A91CB475/serialNumber=DB94BD08C2DEFD39C74FC403935773A490D19B98
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25S9CMLe_TnHT8QDk1dzpJDRm5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB475/6E7424AA207011EEA9901416C4F9AE02/25S9CMLe_TnHT8QDk1dzpJDRm5g.mft
Manifest number: 8D
Signing time: Thu 21 Mar 2024 07:18:50 +0000
Manifest this update: Thu 21 Mar 2024 07:18:49 +0000
Manifest next update: Thu 28 Mar 2024 07:18:49 +0000
Files and hashes: 1: 25S9CMLe_TnHT8QDk1dzpJDRm5g.crl (hash: OKj0wm8R8sg0BNraJLxtJIj3job4xFGGKcrUOAPbp+Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB475/serialNumber=DB94BD08C2DEFD39C74FC403935773A490D19B98
Validity
Not Before: Mar 21 07:18:49 2024 GMT
Not After : Mar 28 07:18:49 2024 GMT
Subject: CN=65fbdf59-0ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:14:27:a7:e1:80:79:46:4e:08:fc:d4:b3:
94:41:db:5c:0a:6f:0d:e2:0b:03:c5:13:5e:38:07:
d2:2c:4e:18:83:ea:8c:07:7f:6a:89:cf:54:f4:51:
de:ce:73:df:61:96:47:90:a4:90:a3:43:4f:14:a9:
f5:16:85:23:bc:6c:c8:e3:f8:37:7b:fe:9d:05:c0:
8d:1b:79:e1:4d:69:9f:8f:9b:ec:14:71:9f:c9:ef:
c2:2f:d0:24:c5:1c:04:d0:ec:87:e9:3e:52:19:cd:
24:bb:50:56:0c:c7:2c:f9:f8:be:ab:bf:a0:55:45:
06:48:e7:a1:e2:8b:d4:04:41:5b:6a:af:6a:de:fd:
ef:0e:5d:ec:79:1a:39:52:cd:1d:ce:d0:d3:60:c8:
d4:83:12:35:70:f1:4d:47:17:2a:da:d6:82:e2:aa:
51:5d:f5:2a:8b:d9:c7:6d:8e:55:94:e9:bf:64:f4:
94:42:6c:0d:92:a6:50:e7:da:f0:80:fe:dc:47:79:
e0:a5:28:5f:04:a2:40:5b:1d:9f:98:2d:47:1c:c5:
a4:b3:64:d7:40:5e:8c:1c:a8:c4:6c:42:b1:4e:df:
46:40:d2:23:24:e1:0e:2d:c1:49:48:25:65:1b:d9:
ab:fd:1e:d8:08:0e:62:76:5d:c9:77:79:98:02:9e:
6d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FE:2C:6E:CA:8B:0D:D7:A6:EE:F4:4B:37:E8:90:56:A3:34:E6:64
X509v3 Authority Key Identifier:
keyid:DB:94:BD:08:C2:DE:FD:39:C7:4F:C4:03:93:57:73:A4:90:D1:9B:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB475/6E7424AA207011EEA9901416C4F9AE02/25S9CMLe_TnHT8QDk1dzpJDRm5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25S9CMLe_TnHT8QDk1dzpJDRm5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB475/6E7424AA207011EEA9901416C4F9AE02/25S9CMLe_TnHT8QDk1dzpJDRm5g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:76:04:02:f5:96:06:f2:0a:a9:09:8a:50:a4:ff:3c:58:2d:
cf:71:11:4c:e8:45:d5:08:11:97:50:19:b0:fe:5d:c0:31:79:
29:3c:32:c5:8d:0d:c8:d5:4e:77:80:d2:aa:4a:24:38:3b:29:
ca:b8:2d:67:92:97:19:7c:7f:f9:b9:4c:89:6a:43:6a:58:9c:
e0:45:4b:43:6e:a9:9a:5e:b7:2f:35:5d:7b:ad:5b:f1:30:b6:
29:b3:72:42:4a:ca:01:a3:21:b5:7f:0e:77:62:a1:07:40:b0:
8b:43:75:71:7a:d5:38:c4:9a:a2:f8:36:79:6e:bc:e4:ec:4d:
c9:80:dd:df:4d:94:e3:3c:75:55:a5:af:47:48:44:35:3c:3c:
54:aa:cc:52:07:35:1d:65:14:8d:b8:a1:09:97:31:38:52:50:
a5:5e:49:3d:4c:01:a9:52:38:c5:9a:fe:ca:8b:1e:cc:35:82:
67:68:0b:76:ad:0f:65:dc:be:ef:52:46:68:de:3d:98:f6:1a:
22:38:7a:df:e3:74:8a:f7:9f:a6:08:00:ee:ce:22:03:23:e3:
0b:4f:d2:03:7c:53:08:e9:e7:1f:06:9f:1f:78:ea:0d:da:3f:
a0:34:db:a8:9a:d1:2c:0c:eb:36:88:58:05:94:67:e8:cc:d8:
3a:20:66:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:26 2024 by rpki-client on console-ams.rpki-client.org