Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.mft
File: 1zeXYY6FX6yWIhuDcZ1a3qR_mCk.mft (raw, json)
Hash identifier: 7YZ8n12QcaMIMB9+uzooAykBqlrKg6s0abopvlNCT5k=
Subject key identifier: C1:2C:C3:98:22:AB:09:18:68:2C:AB:93:F0:0D:A1:C8:50:07:E6:85
Authority key identifier: D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
Certificate issuer: /CN=A91D253A/serialNumber=D73797618E855FAC96221B83719D5ADEA47F9829
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.mft
Manifest number: ED
Signing time: Sun 21 Apr 2024 05:43:56 +0000
Manifest this update: Sun 21 Apr 2024 05:43:55 +0000
Manifest next update: Sun 28 Apr 2024 05:43:55 +0000
Files and hashes: 1: 1zeXYY6FX6yWIhuDcZ1a3qR_mCk.crl (hash: UR9sUwF45V+GzFJVns6exEmOOMirGEEek90q4aWgc+c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D253A/serialNumber=D73797618E855FAC96221B83719D5ADEA47F9829
Validity
Not Before: Apr 21 05:43:55 2024 GMT
Not After : Apr 28 05:43:55 2024 GMT
Subject: CN=6624a79c-9043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4a:92:64:9a:50:3e:cd:b9:79:70:32:89:10:
31:26:30:a4:99:75:da:a1:b1:19:e0:1e:7d:d3:63:
da:a4:28:e9:4a:1a:93:41:56:29:6d:1a:5e:b0:cc:
ab:83:d6:d2:e2:39:4e:5e:b1:9e:6d:b1:fa:56:8c:
a0:d1:4f:99:ba:7e:6c:63:7a:46:ab:4d:95:4b:c6:
b5:73:07:c9:53:1c:5f:da:32:d5:5d:dc:80:57:1f:
f2:64:fd:78:c0:0f:56:29:2c:94:d7:6e:91:ac:4f:
03:79:77:9a:4e:09:fc:8b:04:50:14:21:0b:aa:ec:
05:36:82:72:2e:4c:ea:38:24:a9:5b:0d:31:15:38:
00:76:74:78:41:29:41:2d:25:73:5c:f5:bb:77:6b:
90:93:17:6e:a9:26:4a:ae:94:45:c4:32:21:5d:40:
41:2d:70:89:8c:27:5e:ef:88:9e:f1:82:2a:ea:ea:
4e:53:4e:89:d6:94:f1:fc:f9:70:e8:aa:0b:01:9c:
76:e1:7d:d4:43:24:ee:10:22:a8:fa:fe:bd:5e:8a:
1b:39:69:3b:38:26:e4:cc:b3:b0:91:c1:33:84:0f:
fe:9c:46:09:52:c7:c7:3a:90:24:c4:bf:0e:21:7c:
7d:b6:d4:51:3a:56:70:71:46:16:18:27:26:0e:d1:
00:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2C:C3:98:22:AB:09:18:68:2C:AB:93:F0:0D:A1:C8:50:07:E6:85
X509v3 Authority Key Identifier:
keyid:D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:a0:09:53:05:50:83:cc:7d:34:01:ff:bf:b2:3e:57:c3:06:
c0:b8:8d:22:9d:24:68:0b:c4:cd:7e:79:b7:a3:e7:82:0d:ca:
c0:c9:04:9e:fc:33:29:04:5a:71:75:cf:fc:b9:1d:ea:fc:50:
66:e0:48:e8:f7:bf:04:08:f1:56:c3:1f:f1:d3:61:90:57:60:
e2:13:9b:14:de:81:ec:d9:4a:a0:c5:2c:bc:0f:63:ae:54:ad:
06:9b:5b:3b:99:3b:e9:d9:72:07:2a:a0:b5:eb:53:ae:7a:88:
4b:26:fb:2d:fa:aa:86:b8:d0:a3:12:4f:14:90:15:85:3d:9b:
30:21:ef:97:58:63:1e:98:37:20:b2:c7:3f:82:79:f3:35:a3:
3a:ec:fd:11:d5:ab:d2:61:ae:a5:cf:bc:56:eb:72:c8:d3:b6:
25:a9:3d:38:e4:03:7b:99:fe:62:a6:cb:ea:18:2d:2f:1e:8d:
24:40:ee:d0:84:a7:c6:f1:8e:59:8b:86:ab:6f:a0:82:8e:44:
3c:aa:6b:4a:c9:f7:03:e8:a8:73:c7:8a:f0:13:91:4b:4a:ad:
70:e9:ad:85:ac:55:03:11:80:2e:88:f3:74:5b:42:31:6f:90:
b1:37:10:fe:56:e5:de:c6:28:e7:13:47:4c:83:e1:21:c4:a0:
6b:ce:b9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 07:08:09 2024 by rpki-client on console.sobornost.net