Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC387/FAD8C6965E2D11EC827FC065C4F9AE02/XVCUeOpbctGX5DJlkElFTwPkwi0.mft
File: XVCUeOpbctGX5DJlkElFTwPkwi0.mft (raw, json)
Hash identifier: P8bHNmkN/H3KtGpy8MTxAhQ79kUYtiHq7nIhA04dOr4=
Subject key identifier: F8:43:90:B6:2E:4B:03:77:B5:D5:36:C2:F7:73:04:4E:33:4E:42:9A
Authority key identifier: 5D:50:94:78:EA:5B:72:D1:97:E4:32:65:90:49:45:4F:03:E4:C2:2D
Certificate issuer: /CN=A91FC387/serialNumber=5D509478EA5B72D197E432659049454F03E4C22D
Certificate serial: 0290
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XVCUeOpbctGX5DJlkElFTwPkwi0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC387/FAD8C6965E2D11EC827FC065C4F9AE02/XVCUeOpbctGX5DJlkElFTwPkwi0.mft
Manifest number: 028A
Signing time: Fri 27 Jan 2023 03:55:05 +0000
Manifest this update: Fri 27 Jan 2023 03:55:04 +0000
Manifest next update: Fri 03 Feb 2023 03:55:04 +0000
Files and hashes: 1: XVCUeOpbctGX5DJlkElFTwPkwi0.crl (hash: s65795mQyxN/6L6jlqjbGeorjf+KbosyB6bKF4t0XFU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656 (0x290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC387/serialNumber=5D509478EA5B72D197E432659049454F03E4C22D
Validity
Not Before: Jan 27 03:55:04 2023 GMT
Not After : Feb 3 03:55:04 2023 GMT
Subject: CN=63d34b18-0428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b8:dc:58:1c:64:06:fc:c6:14:d4:30:d1:f6:
bf:f4:00:4f:d0:c1:c6:e1:10:4d:64:55:d1:42:98:
3f:56:62:7c:24:e3:02:16:70:2c:26:61:80:e5:92:
c0:1c:03:a0:e5:26:f6:00:1c:c0:c3:50:2e:58:97:
06:26:09:61:88:5e:75:92:9d:e7:04:d4:e7:f1:35:
7c:ee:24:9a:dc:71:be:cc:30:00:17:03:da:03:6a:
d0:4b:f5:93:db:27:cd:9d:4d:f6:a7:73:19:2c:fb:
3e:6e:71:30:f9:40:d6:3b:45:4b:e2:ee:36:ee:16:
12:e8:95:78:8a:24:6c:24:5b:e6:b9:fd:cb:57:ab:
8b:d2:0e:36:36:58:4b:95:8f:38:3c:d0:f0:6c:4c:
9c:1d:f8:78:6e:4a:0e:11:b1:8d:22:69:7c:42:22:
b2:da:14:36:24:3f:00:53:c9:a2:f3:0a:47:ee:b0:
22:0c:28:dd:5c:00:cb:2e:6e:86:8f:7f:46:5d:3a:
6e:de:03:ec:29:4f:24:c4:c0:cf:60:1f:26:cb:cb:
e4:d9:d5:b1:17:b4:a9:c2:27:48:f9:93:42:24:57:
28:72:33:3f:b9:c8:ee:f7:42:ee:a7:e9:44:e5:04:
a2:b0:12:5a:ea:5c:c5:31:79:7f:ec:72:33:b2:fb:
a3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:43:90:B6:2E:4B:03:77:B5:D5:36:C2:F7:73:04:4E:33:4E:42:9A
X509v3 Authority Key Identifier:
keyid:5D:50:94:78:EA:5B:72:D1:97:E4:32:65:90:49:45:4F:03:E4:C2:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC387/FAD8C6965E2D11EC827FC065C4F9AE02/XVCUeOpbctGX5DJlkElFTwPkwi0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XVCUeOpbctGX5DJlkElFTwPkwi0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC387/FAD8C6965E2D11EC827FC065C4F9AE02/XVCUeOpbctGX5DJlkElFTwPkwi0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:fd:96:76:d5:c7:72:fd:c8:92:bc:e0:17:08:b7:9d:93:c8:
4f:b0:cb:91:e6:83:2f:f0:fa:ba:a3:08:dc:ff:c6:00:e6:1c:
4e:8b:a4:bb:fd:7c:29:61:c7:57:21:bd:b5:28:46:0b:cc:a0:
3f:e9:31:89:00:09:31:a9:1b:b4:99:9f:6b:9c:87:61:58:18:
a3:2e:c8:be:61:a6:b7:17:c4:07:23:61:06:25:8f:53:b0:41:
c5:17:21:8b:11:63:72:63:78:c2:15:62:df:88:58:27:a2:a2:
a4:c3:f4:de:34:28:dc:c9:e0:e6:22:3a:7a:89:7c:b5:2b:09:
06:61:a9:dd:3e:17:d8:c4:db:c2:c8:2b:82:d5:15:53:51:cc:
bf:1a:23:4a:5c:c6:87:66:42:fe:7a:fa:cc:84:bf:9c:f6:9e:
ed:ff:9e:04:a6:de:1c:98:62:2e:3d:fa:bb:f1:c7:3e:a7:51:
5e:ba:12:ab:08:08:c0:da:a7:a7:77:9b:7a:25:59:26:36:f9:
06:42:c2:2b:3a:e3:46:63:9b:98:ca:22:02:02:77:f1:30:ab:
22:77:e2:2e:fe:d0:6c:94:ff:f1:3a:ad:29:ff:71:b4:91:5a:
fc:89:45:8f:3d:38:97:7b:73:91:25:40:60:da:d4:1f:77:93:
07:cd:84:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org