Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
File: t8K-zJe0I3nEStGuteBz4qPaUR4.mft (raw, json)
Hash identifier: QfJvJL/km7ryeW4XzjTc2NSZOHF5RwOcPH7YYhZCj7o=
Subject key identifier: 47:F4:15:99:97:A9:B8:D9:49:0E:92:FD:1E:45:61:59:B8:C7:1B:5D
Authority key identifier: B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E
Certificate issuer: /CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E
Certificate serial: 0455
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
Manifest number: 043C
Signing time: Fri 31 Jan 2025 00:26:46 +0000
Manifest this update: Fri 31 Jan 2025 00:26:46 +0000
Manifest next update: Fri 07 Feb 2025 00:26:46 +0000
Files and hashes: 1: t8K-zJe0I3nEStGuteBz4qPaUR4.crl (hash: nT7JtLpS2/b7mOd08x8PU2Wp367jO6MDQE5ip66rOpE=)
2: 10C1C1C810AC11EFB9D89D46C4F9AE02.roa (hash: fUsXXWScrmbAfu7bJ+mV8P270AK7hMwqCZVEX3OSdLA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1109 (0x455)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E
Validity
Not Before: Jan 31 00:26:46 2025 GMT
Not After : Feb 7 00:26:46 2025 GMT
Subject: CN=679c18c6-67cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:d4:91:04:1c:f0:2f:7e:eb:a9:44:a0:bb:ef:
f8:4b:ad:5f:10:eb:ac:f2:eb:6b:58:be:d6:be:b4:
45:ac:98:d0:4f:ea:74:61:1c:94:c9:2b:f5:56:72:
58:79:0d:0c:c2:b7:2b:15:89:09:a4:69:fe:15:d8:
19:96:0e:61:82:7b:e5:3a:5d:0a:1f:87:72:b3:b2:
08:27:72:e1:d0:1b:45:6c:59:0a:8d:e4:0a:94:38:
06:e4:23:93:64:59:6f:33:88:24:9c:f4:52:8d:a9:
33:d4:6c:6a:dc:97:64:c7:21:76:b7:81:82:ac:2b:
4b:87:fd:f1:4b:91:40:d9:eb:ae:14:02:ac:fa:8d:
19:44:02:08:1e:c7:74:ef:7f:e4:66:53:f2:d2:5a:
1a:d6:0e:3e:21:5d:58:a0:a5:9b:31:23:53:b7:d0:
4d:8d:f5:98:82:46:f5:08:ef:55:82:25:58:31:36:
a2:b7:60:39:98:ef:71:c5:4a:de:f6:84:ce:17:d3:
41:76:82:1f:ee:79:67:a1:44:6b:f7:fe:e0:e9:86:
34:e7:ce:0f:78:9e:18:d6:19:e9:a9:f4:bc:35:dc:
e6:1c:39:b3:62:e3:6d:e0:b7:0a:9f:6e:ed:db:71:
ef:c7:47:96:3d:3a:ef:75:ee:a1:c8:80:3b:c4:e0:
08:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F4:15:99:97:A9:B8:D9:49:0E:92:FD:1E:45:61:59:B8:C7:1B:5D
X509v3 Authority Key Identifier:
keyid:B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:8a:71:eb:c7:44:b3:b8:db:ce:d3:a8:39:64:18:6d:b2:13:
97:95:33:f0:32:31:25:82:88:5c:3f:d7:b7:2b:34:df:25:4f:
c1:1f:d7:1a:18:ef:ea:4b:e4:f9:d0:90:0b:e6:35:d0:04:f6:
8c:6b:da:0b:c1:2c:1b:0f:39:4c:5d:78:47:03:99:4e:c9:5a:
3e:8d:58:da:1d:14:de:41:5f:df:e4:9c:6b:2e:f5:5f:3a:a7:
55:e9:b0:b1:a1:72:da:85:a7:28:a5:3c:a3:4c:4e:d0:9c:cf:
85:9c:77:ff:ff:8d:8f:6a:b9:ca:91:80:35:32:dd:10:38:11:
42:cf:f0:56:29:22:94:98:98:8e:03:84:80:c2:84:33:bd:3d:
41:31:4f:8c:43:f7:5f:ac:20:fe:5f:bf:f8:38:b2:a2:bf:40:
e8:09:b6:e5:36:b0:84:41:24:2f:92:2a:34:11:01:87:89:8f:
92:80:35:74:c4:3d:aa:bc:ef:92:43:09:bc:14:79:e2:ca:ff:
24:ff:d2:cb:d3:c0:f3:7d:c6:cb:8e:f3:82:00:7b:52:7c:bf:
1e:33:30:47:e5:e1:b3:13:70:f4:85:2f:fb:1a:75:74:14:89:
43:94:14:ff:0e:0b:91:f2:65:5d:c3:57:bf:f4:7c:11:7f:46:
63:a1:ce:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:41:07 2025 by rpki-client