Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
File: PbshszWLCF8IIbTcBqkanEXELLw.mft (raw, json)
Hash identifier: rMKk9L/NpDmH00Fw4B1Fv825jQzXrtAKL8/KgSbXjuM=
Subject key identifier: 2D:A0:83:7B:A5:64:F0:3A:B7:72:31:EE:2C:EF:70:B1:43:BE:F0:15
Authority key identifier: 3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC
Certificate issuer: /CN=A9199B5E/serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC
Certificate serial: 014C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
Manifest number: 0149
Signing time: Fri 31 Jan 2025 03:27:45 +0000
Manifest this update: Fri 31 Jan 2025 03:27:45 +0000
Manifest next update: Fri 07 Feb 2025 03:27:45 +0000
Files and hashes: 1: PbshszWLCF8IIbTcBqkanEXELLw.crl (hash: 3559MJdQLHOgJyLAsvNxUADCffr54g00rwTtkyPN37o=)
2: 0FFD0884E94C11EDB883CD14C4F9AE02.roa (hash: LOMVrGcpqBkYXud2B+9+0rUhLbtH2Vrj6cMlX58bV+A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332 (0x14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199B5E/serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC
Validity
Not Before: Jan 31 03:27:45 2025 GMT
Not After : Feb 7 03:27:45 2025 GMT
Subject: CN=679c4331-a298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7e:fa:3a:f0:66:6d:d5:7f:86:8e:e5:43:7c:
94:6e:56:d0:d7:37:2c:29:36:f5:d4:12:a7:92:05:
3f:4f:35:c3:36:be:70:69:59:8a:3f:d3:53:f4:ec:
03:cb:7d:0d:1e:f2:3f:76:81:36:83:b9:f7:df:03:
69:f4:b1:b9:f8:43:72:6b:e7:13:94:11:d5:9d:ef:
a7:f7:84:2e:55:a2:06:bd:7c:71:b7:ef:f3:23:61:
99:4b:17:d4:40:c0:3c:ec:fa:86:ab:90:f0:c2:fb:
28:79:7f:0c:21:e9:b8:b5:9e:4d:a9:3e:2c:23:1c:
61:44:fc:24:6d:44:91:23:67:72:f2:58:5f:cf:31:
a5:87:95:83:ad:95:72:fe:1b:0d:71:60:53:3a:a6:
9c:23:33:e4:33:ed:16:df:67:5c:14:7a:5f:d8:c7:
df:c8:f3:fc:f8:ab:ef:05:a2:09:63:18:27:5d:41:
7b:7d:67:1b:be:83:98:d7:da:99:40:1d:15:20:52:
5b:05:31:ca:cd:de:d2:a5:19:83:e1:80:39:01:d3:
04:ac:3f:96:01:5f:9f:19:7b:cf:b2:6e:c6:94:47:
a1:e0:e4:2d:9e:15:da:ea:5b:2e:a9:a7:f2:21:f3:
03:51:22:6c:12:75:ac:50:01:9b:79:e6:4a:3c:9a:
59:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A0:83:7B:A5:64:F0:3A:B7:72:31:EE:2C:EF:70:B1:43:BE:F0:15
X509v3 Authority Key Identifier:
keyid:3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:99:99:ef:fb:d5:e5:00:fc:9b:90:42:27:38:d6:3b:20:93:
2e:e0:a5:8c:d5:c2:43:2c:cb:d5:f7:93:bf:b7:4a:a3:c6:3c:
da:b7:7a:50:4d:b8:87:cf:af:29:7b:ea:70:a5:f2:d6:76:9b:
20:ea:85:61:db:8e:01:2b:c1:1d:1c:ba:3d:6b:e7:e6:1f:7e:
47:52:14:a6:3e:bf:bd:68:5e:f7:23:0c:2a:c4:49:dc:2f:ce:
45:a8:20:b7:d8:6f:cf:0c:47:27:93:0b:bf:8f:83:b2:88:07:
fa:bc:dd:6b:c2:7f:98:c8:89:50:88:16:3c:b4:b0:41:a9:ff:
1a:a4:ba:9e:1a:2f:8d:20:4a:93:e6:7b:bd:ab:7a:8f:8d:c6:
e7:49:68:78:7c:a9:2a:8e:b8:51:b7:48:93:f2:cc:97:c8:3f:
a5:f4:4f:9b:69:48:47:25:c0:84:b6:d1:a6:d8:ef:29:3a:6e:
28:c2:6b:75:2d:44:a3:a4:6a:43:60:6c:a9:27:22:7d:25:35:
be:b2:a0:e0:40:5f:4e:5a:fc:8d:db:52:d5:49:23:0f:a4:a2:
6c:75:66:96:7b:48:14:5b:b7:00:91:99:ea:79:34:14:ec:b0:
8e:bd:0c:50:99:7c:80:31:91:8d:59:7d:7b:51:fd:52:8d:77:
07:ba:08:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:42 2025 by rpki-client