Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28F6/FEF3446C8D7811EB8D8BD60BC4F9AE02/-P-HgJbLhByDdgq1VerbvXBSUwo.mft
File: -P-HgJbLhByDdgq1VerbvXBSUwo.mft (raw, json)
Hash identifier: +ggskDTz35rmXGYwtUEh7V4TIzw/9LvLyzW+wmeR29k=
Subject key identifier: D2:FE:25:C2:57:50:D2:B2:D6:EF:13:33:63:2D:EF:51:F5:12:D0:4F
Authority key identifier: F8:FF:87:80:96:CB:84:1C:83:76:0A:B5:55:EA:DB:BD:70:52:53:0A
Certificate issuer: /CN=A91E28F6/serialNumber=F8FF878096CB841C83760AB555EADBBD7052530A
Certificate serial: 05C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-P-HgJbLhByDdgq1VerbvXBSUwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E28F6/FEF3446C8D7811EB8D8BD60BC4F9AE02/-P-HgJbLhByDdgq1VerbvXBSUwo.mft
Manifest number: 05C7
Signing time: Mon 26 Aug 2024 14:42:02 +0000
Manifest this update: Mon 26 Aug 2024 14:42:01 +0000
Manifest next update: Mon 02 Sep 2024 14:42:01 +0000
Files and hashes: 1: -P-HgJbLhByDdgq1VerbvXBSUwo.crl (hash: skWNfvs9OtKhi7lfADnsgOLhDyWa8FW9K/rLJ1lhT0s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1479 (0x5c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E28F6/serialNumber=F8FF878096CB841C83760AB555EADBBD7052530A
Validity
Not Before: Aug 26 14:42:01 2024 GMT
Not After : Sep 2 14:42:01 2024 GMT
Subject: CN=66cc9439-b9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:1d:c9:4f:f2:61:21:78:9c:0e:4c:31:ac:
fa:4c:19:d4:de:2d:44:0d:97:23:47:b6:64:b0:6c:
cd:0f:03:d3:bd:8a:2e:bd:75:b9:84:63:5d:f6:2f:
79:59:20:f3:8f:5c:d6:e4:a8:53:8d:ec:40:d6:c5:
31:ed:f8:60:e2:28:f5:1b:78:c6:fd:ab:1f:50:aa:
1d:fe:97:dd:ee:e0:2d:87:ea:51:c8:6f:c1:c0:91:
87:4c:73:20:90:ff:2d:7f:5f:9d:69:cc:b2:10:7c:
00:9a:99:ff:31:02:38:70:73:6f:6e:e1:fe:37:08:
20:42:1a:6e:cb:10:f5:56:f7:d8:96:45:11:28:55:
bb:a5:d7:50:59:63:78:20:ba:bd:01:c9:ce:05:25:
0f:18:60:ca:88:a2:55:59:ec:4c:57:e1:f1:0b:c8:
ae:3f:b7:5f:f9:09:7d:89:90:4d:ee:71:2e:e5:87:
b9:9c:18:5c:ab:82:c3:82:60:c5:b5:38:8b:e4:43:
1d:fd:ae:b5:3b:78:d2:7e:fc:7c:a5:d2:02:09:f3:
ad:05:12:f0:2a:e3:94:1f:d9:74:64:de:27:84:c2:
b9:ef:c4:36:25:e2:2c:1b:3c:c2:ca:ef:77:44:fa:
00:82:1a:bb:fc:f9:42:ea:35:15:84:9d:ba:e0:32:
ec:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FE:25:C2:57:50:D2:B2:D6:EF:13:33:63:2D:EF:51:F5:12:D0:4F
X509v3 Authority Key Identifier:
keyid:F8:FF:87:80:96:CB:84:1C:83:76:0A:B5:55:EA:DB:BD:70:52:53:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E28F6/FEF3446C8D7811EB8D8BD60BC4F9AE02/-P-HgJbLhByDdgq1VerbvXBSUwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-P-HgJbLhByDdgq1VerbvXBSUwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28F6/FEF3446C8D7811EB8D8BD60BC4F9AE02/-P-HgJbLhByDdgq1VerbvXBSUwo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ce:8e:5e:10:ba:a5:1f:d6:19:4a:08:90:25:99:a3:f1:72:
a5:f9:4e:26:2b:24:ff:54:63:b3:f4:6d:17:08:34:bc:46:e0:
80:c4:50:8d:7d:e7:f9:b9:f9:65:64:e5:fa:89:70:24:cb:70:
6d:1e:58:b8:61:67:5e:b0:cf:89:6c:22:39:05:fa:28:74:54:
64:5c:6e:23:2b:1a:96:3d:d8:85:fc:a8:6d:a2:8f:47:c3:73:
da:53:c9:fb:ec:ac:72:9f:b4:96:b7:ad:28:0d:bc:11:1b:c9:
ba:49:f3:b6:18:76:ba:cb:7d:93:90:c3:b2:9b:7b:f8:de:11:
91:bf:1f:25:3d:cf:3f:c3:6a:1e:18:79:31:d5:48:94:64:aa:
f0:bb:4f:df:f6:a6:db:34:bb:4c:94:8f:1c:8a:cd:b8:06:bb:
c3:26:1c:2f:01:b2:06:ef:1a:51:8d:6b:c2:e9:c2:41:0e:89:
bb:7b:5d:01:cf:b3:b4:14:b4:0c:ad:bb:48:05:19:ba:39:52:
c0:7a:0d:b2:cb:3a:bf:6c:b3:fc:c0:23:f4:a7:1f:7b:d9:1f:
32:34:d5:1e:8c:8c:a5:3d:02:0d:2c:2f:a9:b9:bc:ba:b5:51:
d0:b6:d3:b7:b4:96:c6:bc:14:fd:eb:ad:ec:0e:dd:a1:36:2f:
e2:93:5d:94
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI4RjYxMTAvBgNVBAUTKEY4RkY4NzgwOTZDQjg0MUM4Mzc2MEFCNTU1RUFEQkJE
NzA1MjUzMEEwHhcNMjQwODI2MTQ0MjAxWhcNMjQwOTAyMTQ0MjAxWjAYMRYwFAYD
VQQDEw02NmNjOTQzOS1iOWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAszEdyU/yYSF4nA5MMaz6TBnU3i1EDZcjR7ZksGzNDwPTvYouvXW5hGNd9i95
WSDzj1zW5KhTjexA1sUx7fhg4ij1G3jG/asfUKod/pfd7uAth+pRyG/BwJGHTHMg
kP8tf1+dacyyEHwAmpn/MQI4cHNvbuH+NwggQhpuyxD1VvfYlkURKFW7pddQWWN4
ILq9AcnOBSUPGGDKiKJVWexMV+HxC8iuP7df+Ql9iZBN7nEu5Ye5nBhcq4LDgmDF
tTiL5EMd/a61O3jSfvx8pdICCfOtBRLwKuOUH9l0ZN4nhMK578Q2JeIsGzzCyu93
RPoAghq7/PlC6jUVhJ264DLsYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNL+JcJX
UNKy1u8TM2Mt71H1EtBPMB8GA1UdIwQYMBaAFPj/h4CWy4Qcg3YKtVXq271wUlMK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhGNi9GRUYzNDQ2QzhE
NzgxMUVCOEQ4QkQ2MEJDNEY5QUUwMi8tUC1IZ0piTGhCeURkZ3ExVmVyYnZYQlNV
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1QLUhnSmJMaEJ5RGRncTFWZXJidlhCU1V3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjhGNi9GRUYzNDQ2QzhENzgxMUVCOEQ4QkQ2MEJDNEY5QUUwMi8tUC1IZ0piTGhC
eURkZ3ExVmVyYnZYQlNVd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDAzo5eELqlH9YZSgiQJZmj8XKl+U4mKyT/VGOz9G0XCDS8RuCAxFCN
fef5ufllZOX6iXAky3BtHli4YWdesM+JbCI5BfoodFRkXG4jKxqWPdiF/Khtoo9H
w3PaU8n77Kxyn7SWt60oDbwRG8m6SfO2GHa6y32TkMOym3v43hGRvx8lPc8/w2oe
GHkx1UiUZKrwu0/f9qbbNLtMlI8cis24BrvDJhwvAbIG7xpRjWvC6cJBDom7e10B
z7O0FLQMrbtIBRm6OVLAeg2yyzq/bLP8wCP0px972R8yNNUejIylPQINLC+puby6
tVHQttO3tJbGvBT9663sDt2hNi/ik12U
-----END CERTIFICATE-----
Generated at Tue Aug 27 00:33:05 2024 by rpki-client on console-fra.rpki-client.org