Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0176/33797F9828CC11E5A342FC5BC4F9AE02/MzQs71ocGM4vAGX0oSO2LpCJFrs.mft
File: MzQs71ocGM4vAGX0oSO2LpCJFrs.mft (raw, json)
Hash identifier: LV6zc8pnWBxDzExZeA1A7PdrFvP/7XuuLu+Q79bX5nM=
Subject key identifier: 04:A0:A3:F8:B0:63:2D:80:DF:BE:C8:31:A8:E0:FF:AC:58:AC:A8:92
Authority key identifier: 33:34:2C:EF:5A:1C:18:CE:2F:00:65:F4:A1:23:B6:2E:90:89:16:BB
Certificate issuer: /CN=A91E0176/serialNumber=33342CEF5A1C18CE2F0065F4A123B62E908916BB
Certificate serial: 2430
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MzQs71ocGM4vAGX0oSO2LpCJFrs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0176/33797F9828CC11E5A342FC5BC4F9AE02/MzQs71ocGM4vAGX0oSO2LpCJFrs.mft
Manifest number: 2427
Signing time: Mon 19 Feb 2024 03:25:32 +0000
Manifest this update: Mon 19 Feb 2024 03:25:32 +0000
Manifest next update: Mon 26 Feb 2024 03:25:32 +0000
Files and hashes: 1: MzQs71ocGM4vAGX0oSO2LpCJFrs.crl (hash: 9jcJyL4vMIAQVdmYn9klu4bXClmkeHMi6YDnTuT2gi4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9264 (0x2430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0176/serialNumber=33342CEF5A1C18CE2F0065F4A123B62E908916BB
Validity
Not Before: Feb 19 03:25:32 2024 GMT
Not After : Feb 26 03:25:32 2024 GMT
Subject: CN=65d2ca2c-a33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:af:a5:23:84:c6:a7:92:e1:43:63:43:f2:
86:38:8d:fb:b5:50:f4:71:35:67:83:fc:cf:44:d4:
ea:81:90:7c:ba:3b:32:31:39:e4:00:c1:2b:0d:33:
b9:4b:2f:6e:41:d4:4d:fc:8e:8c:9e:5a:99:2c:55:
d7:46:fb:25:a3:9c:c1:22:f1:9f:7e:cd:8c:72:65:
d1:9c:63:95:4f:2b:51:66:50:a7:1f:43:1b:c8:b1:
fe:f9:f0:2d:df:1d:a4:c2:64:e9:83:4f:2f:a9:c4:
67:65:03:82:44:ba:4b:89:1e:41:5d:ae:21:f1:89:
34:7d:b9:47:a8:d3:2f:75:a9:a5:e4:42:2c:7c:21:
9b:7f:f6:e8:02:43:93:a0:17:b2:ba:81:5d:9b:5c:
33:9a:06:c0:ce:7d:de:fd:b5:9f:e6:6a:8d:c5:d7:
96:78:74:f6:72:8a:c8:8f:5b:e3:47:f2:e3:51:38:
b9:7f:63:9b:03:12:c8:51:20:bc:8d:97:88:77:3c:
19:51:8a:54:23:bb:c9:3d:1e:d1:70:37:87:8c:e8:
30:53:7f:f7:ef:62:9a:1d:a0:20:02:63:f4:15:cb:
f1:a9:06:4a:a9:28:5c:6e:fc:50:8b:a0:93:05:63:
89:9b:33:70:7c:38:62:cb:70:7b:37:08:49:81:e9:
86:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A0:A3:F8:B0:63:2D:80:DF:BE:C8:31:A8:E0:FF:AC:58:AC:A8:92
X509v3 Authority Key Identifier:
keyid:33:34:2C:EF:5A:1C:18:CE:2F:00:65:F4:A1:23:B6:2E:90:89:16:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0176/33797F9828CC11E5A342FC5BC4F9AE02/MzQs71ocGM4vAGX0oSO2LpCJFrs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MzQs71ocGM4vAGX0oSO2LpCJFrs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0176/33797F9828CC11E5A342FC5BC4F9AE02/MzQs71ocGM4vAGX0oSO2LpCJFrs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:4b:3f:e8:52:1c:05:4b:4c:36:d1:cc:be:27:c3:c9:7c:bb:
e1:e4:1f:ea:37:fd:f2:16:4b:d6:46:55:cd:64:d4:18:7d:20:
68:8b:fd:fa:8f:3f:e4:9d:ac:3d:d2:7d:31:e0:bf:43:93:c0:
fb:88:6a:f4:09:55:4d:41:da:c3:0d:7e:13:d4:98:4c:c8:06:
92:e8:90:ac:41:79:2e:bc:bd:10:17:80:47:a1:d6:fc:d1:8d:
03:6c:9f:3e:eb:df:d4:0c:64:08:10:38:d6:8a:cb:68:a8:e7:
60:da:98:05:a1:2f:39:a7:8f:21:a0:9a:ef:e2:90:87:3b:ea:
72:62:5d:60:89:53:3f:a0:92:c9:9c:ba:71:ca:6f:e5:84:d6:
f4:75:97:80:05:2b:4c:81:2e:52:af:97:07:8d:00:49:b2:a3:
dd:08:a4:cc:3a:24:aa:a0:be:6e:c9:3f:64:1d:03:9a:35:41:
52:0b:11:11:97:f2:e5:a6:4a:53:02:d6:43:6a:20:1b:a2:86:
a9:c0:d2:01:e6:27:10:e6:28:66:f1:16:37:ff:59:e4:45:cb:
16:9d:7f:64:83:0c:c5:4b:be:b1:2e:41:8a:ff:35:59:01:1a:
cb:e7:4a:9c:89:ef:2c:3e:b2:49:09:e5:44:d1:95:f0:7b:bd:
44:c8:e1:2c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTAxNzYxMTAvBgNVBAUTKDMzMzQyQ0VGNUExQzE4Q0UyRjAwNjVGNEExMjNCNjJF
OTA4OTE2QkIwHhcNMjQwMjE5MDMyNTMyWhcNMjQwMjI2MDMyNTMyWjAYMRYwFAYD
VQQDEw02NWQyY2EyYy1hMzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnzKvpSOExqeS4UNjQ/KGOI37tVD0cTVng/zPRNTqgZB8ujsyMTnkAMErDTO5
Sy9uQdRN/I6MnlqZLFXXRvslo5zBIvGffs2McmXRnGOVTytRZlCnH0MbyLH++fAt
3x2kwmTpg08vqcRnZQOCRLpLiR5BXa4h8Yk0fblHqNMvdaml5EIsfCGbf/boAkOT
oBeyuoFdm1wzmgbAzn3e/bWf5mqNxdeWeHT2corIj1vjR/LjUTi5f2ObAxLIUSC8
jZeIdzwZUYpUI7vJPR7RcDeHjOgwU3/372KaHaAgAmP0FcvxqQZKqShcbvxQi6CT
BWOJmzNwfDhiy3B7NwhJgemGwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASgo/iw
Yy2A377IMajg/6xYrKiSMB8GA1UdIwQYMBaAFDM0LO9aHBjOLwBl9KEjti6QiRa7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDE3Ni8zMzc5N0Y5ODI4
Q0MxMUU1QTM0MkZDNUJDNEY5QUUwMi9NelFzNzFvY0dNNHZBR1gwb1NPMkxwQ0pG
cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL016UXM3MW9jR000dkFHWDBvU08yTHBDSkZycy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDE3Ni8zMzc5N0Y5ODI4Q0MxMUU1QTM0MkZDNUJDNEY5QUUwMi9NelFzNzFvY0dN
NHZBR1gwb1NPMkxwQ0pGcnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAVSz/oUhwFS0w20cy+J8PJfLvh5B/qN/3yFkvWRlXNZNQYfSBoi/36
jz/knaw90n0x4L9Dk8D7iGr0CVVNQdrDDX4T1JhMyAaS6JCsQXkuvL0QF4BHodb8
0Y0DbJ8+69/UDGQIEDjWistoqOdg2pgFoS85p48hoJrv4pCHO+pyYl1giVM/oJLJ
nLpxym/lhNb0dZeABStMgS5Sr5cHjQBJsqPdCKTMOiSqoL5uyT9kHQOaNUFSCxER
l/LlpkpTAtZDaiAbooapwNIB5icQ5ihm8RY3/1nkRcsWnX9kgwzFS76xLkGK/zVZ
ARrL50qcie8sPrJJCeVE0ZXwe71EyOEs
-----END CERTIFICATE-----
Generated at Tue Feb 20 01:59:15 2024 by rpki-client on console-fra.rpki-client.org