Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE74A/FEB3AA9CDA2F11EB9F0FE94CC4F9AE02/vErylHv1TQsSYYNHDqzaGA_DUrg.mft
File: vErylHv1TQsSYYNHDqzaGA_DUrg.mft (raw, json)
Hash identifier: Rt41SdCBDruQgrgpDScF+ml9EyJJwfWEWFJ8VftDINI=
Subject key identifier: 81:5B:DF:56:48:26:23:61:6C:CB:1A:C3:3C:FA:BC:0B:F4:B2:BC:FF
Authority key identifier: BC:4A:F2:94:7B:F5:4D:0B:12:61:83:47:0E:AC:DA:18:0F:C3:52:B8
Certificate issuer: /CN=A91CE74A/serialNumber=BC4AF2947BF54D0B126183470EACDA180FC352B8
Certificate serial: 0405
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vErylHv1TQsSYYNHDqzaGA_DUrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE74A/FEB3AA9CDA2F11EB9F0FE94CC4F9AE02/vErylHv1TQsSYYNHDqzaGA_DUrg.mft
Manifest number: 0403
Signing time: Thu 11 May 2023 02:56:59 +0000
Manifest this update: Thu 11 May 2023 02:56:58 +0000
Manifest next update: Thu 18 May 2023 02:56:58 +0000
Files and hashes: 1: vErylHv1TQsSYYNHDqzaGA_DUrg.crl (hash: R9KSVm8hTwmGBPOW63XlSnuVZCoxbJe/r8P6LvP+4ZM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1029 (0x405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE74A/serialNumber=BC4AF2947BF54D0B126183470EACDA180FC352B8
Validity
Not Before: May 11 02:56:58 2023 GMT
Not After : May 18 02:56:58 2023 GMT
Subject: CN=645c597a-7ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:99:05:e3:ea:0e:f4:0d:e0:10:c7:1a:5d:06:
a0:ea:7e:2c:4e:d2:d5:74:c0:84:ad:14:7f:ad:18:
0d:bc:9e:c2:6a:4f:75:60:d7:21:2a:ea:99:2a:b8:
fe:b6:f6:03:e8:6d:b1:aa:4d:26:a7:d0:2a:58:3f:
70:cf:f0:9f:52:14:7b:08:0e:0a:25:54:bf:76:b3:
86:2a:e7:9f:aa:59:5a:6d:11:6b:fe:e6:d0:74:6d:
e9:70:09:7b:a1:19:bc:df:66:30:fd:9a:ea:e8:86:
42:ac:19:88:9a:eb:73:94:a7:b2:3a:18:27:de:87:
07:2e:c1:ef:2d:7a:e8:c4:ad:17:35:27:97:10:83:
a2:9d:ca:81:a1:07:bd:37:14:dd:d9:63:3a:35:b8:
87:89:fc:6a:4a:45:6f:7e:01:0a:3e:40:38:7a:9b:
9a:7c:ea:a0:ff:9b:ca:77:bd:09:cb:7c:53:36:0a:
55:d5:34:0e:84:3f:ae:b6:31:58:17:64:37:6e:b2:
01:f3:13:16:5a:85:d0:05:fe:9b:96:5a:6f:f9:8f:
6b:1c:20:44:76:eb:4c:49:9f:fc:1c:ce:d3:36:c3:
76:45:61:38:b4:50:54:c7:83:c4:7d:0f:eb:2f:5c:
a9:37:08:42:13:2e:13:9b:65:b3:54:ea:4f:94:8f:
58:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5B:DF:56:48:26:23:61:6C:CB:1A:C3:3C:FA:BC:0B:F4:B2:BC:FF
X509v3 Authority Key Identifier:
keyid:BC:4A:F2:94:7B:F5:4D:0B:12:61:83:47:0E:AC:DA:18:0F:C3:52:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE74A/FEB3AA9CDA2F11EB9F0FE94CC4F9AE02/vErylHv1TQsSYYNHDqzaGA_DUrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vErylHv1TQsSYYNHDqzaGA_DUrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE74A/FEB3AA9CDA2F11EB9F0FE94CC4F9AE02/vErylHv1TQsSYYNHDqzaGA_DUrg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:b1:a6:49:42:28:71:31:78:4e:b1:70:75:5c:1f:45:cf:3d:
31:11:20:d8:80:d1:3f:6a:f1:26:ad:64:6b:1e:93:9a:de:52:
e6:88:5a:33:5c:6b:0f:4f:be:db:f3:85:3b:e2:d0:d2:e1:cc:
87:48:d4:c8:a8:2f:c6:c9:76:91:9b:51:3d:83:dd:1b:73:e0:
f1:e1:a5:8d:cc:98:d4:13:7b:57:21:b1:35:e8:05:3d:98:c3:
4a:38:bd:3b:02:e6:1b:78:83:30:61:98:9e:a2:16:ee:41:5d:
45:e8:9a:45:3b:17:1d:a3:0d:1b:fa:1b:07:8b:5e:97:61:73:
22:21:57:ec:e2:fa:da:cb:9a:73:55:91:93:0e:6f:eb:a6:02:
68:da:af:10:3c:c8:fe:cc:d8:74:e4:27:8d:f6:da:e2:21:e2:
6e:5f:3e:0c:ac:37:74:61:4f:7d:d1:dc:18:01:d3:1a:ca:5c:
97:5e:c3:a4:ec:ca:f4:80:90:1e:1b:f6:c4:5f:61:e2:91:88:
d4:d9:77:9a:c3:93:e1:af:27:b0:bf:a0:d0:4d:50:db:d2:0a:
b6:30:1c:1b:8c:2f:97:91:96:ab:2c:04:b2:64:eb:fb:8c:c3:
1d:3d:17:89:d3:bf:bc:0a:cb:52:57:84:f6:35:56:c7:5e:06:
01:ff:7d:54
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U3NEExMTAvBgNVBAUTKEJDNEFGMjk0N0JGNTREMEIxMjYxODM0NzBFQUNEQTE4
MEZDMzUyQjgwHhcNMjMwNTExMDI1NjU4WhcNMjMwNTE4MDI1NjU4WjAYMRYwFAYD
VQQDEw02NDVjNTk3YS03YWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6JkF4+oO9A3gEMcaXQag6n4sTtLVdMCErRR/rRgNvJ7Cak91YNchKuqZKrj+
tvYD6G2xqk0mp9AqWD9wz/CfUhR7CA4KJVS/drOGKuefqllabRFr/ubQdG3pcAl7
oRm832Yw/Zrq6IZCrBmImutzlKeyOhgn3ocHLsHvLXroxK0XNSeXEIOincqBoQe9
NxTd2WM6NbiHifxqSkVvfgEKPkA4epuafOqg/5vKd70Jy3xTNgpV1TQOhD+utjFY
F2Q3brIB8xMWWoXQBf6bllpv+Y9rHCBEdutMSZ/8HM7TNsN2RWE4tFBUx4PEfQ/r
L1ypNwhCEy4Tm2WzVOpPlI9Y/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFb31ZI
JiNhbMsawzz6vAv0srz/MB8GA1UdIwQYMBaAFLxK8pR79U0LEmGDRw6s2hgPw1K4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTc0QS9GRUIzQUE5Q0RB
MkYxMUVCOUYwRkU5NENDNEY5QUUwMi92RXJ5bEh2MVRRc1NZWU5IRHF6YUdBX0RV
cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZFcnlsSHYxVFFzU1lZTkhEcXphR0FfRFVyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTc0QS9GRUIzQUE5Q0RBMkYxMUVCOUYwRkU5NENDNEY5QUUwMi92RXJ5bEh2MVRR
c1NZWU5IRHF6YUdBX0RVcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC2saZJQihxMXhOsXB1XB9Fzz0xESDYgNE/avEmrWRrHpOa3lLmiFoz
XGsPT77b84U74tDS4cyHSNTIqC/GyXaRm1E9g90bc+Dx4aWNzJjUE3tXIbE16AU9
mMNKOL07AuYbeIMwYZieohbuQV1F6JpFOxcdow0b+hsHi16XYXMiIVfs4vray5pz
VZGTDm/rpgJo2q8QPMj+zNh05CeN9triIeJuXz4MrDd0YU990dwYAdMaylyXXsOk
7Mr0gJAeG/bEX2HikYjU2Xeaw5Phryewv6DQTVDb0gq2MBwbjC+XkZarLASyZOv7
jMMdPReJ07+8CstSV4T2NVbHXgYB/31U
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:27 2024 by rpki-client on console-ams.rpki-client.org