Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
File: pslhETDFFnRVE26Fq_I2qqqTe60.mft (raw, json)
Hash identifier: QdYKQq3RXY91oN+nRflrFCMhnfxePtl0leSTsuxjkwg=
Subject key identifier: 9F:7A:61:3E:18:5E:F1:FB:84:8A:85:BC:8E:BE:60:F4:0C:49:AE:8B
Authority key identifier: A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD
Certificate issuer: /CN=A91C3DC8/serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD
Certificate serial: 0BF8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
Manifest number: 0BDD
Signing time: Fri 31 Jan 2025 18:42:47 +0000
Manifest this update: Fri 31 Jan 2025 18:42:46 +0000
Manifest next update: Fri 07 Feb 2025 18:42:46 +0000
Files and hashes: 1: pslhETDFFnRVE26Fq_I2qqqTe60.crl (hash: AttCn0FhLSAOk7m+EMnn1W4rQmydaNdkkRe3CNNHOS4=)
2: D29DE1E6C98611ED8D5AE04CC4F9AE02.roa (hash: +1WLQRV04Ed2oW4QFm7/7ippf8dDjkisALZjf/MJ6Po=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3064 (0xbf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3DC8/serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD
Validity
Not Before: Jan 31 18:42:46 2025 GMT
Not After : Feb 7 18:42:46 2025 GMT
Subject: CN=679d19a7-96c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d8:68:54:f0:1d:8e:ed:7b:5d:95:3c:d8:38:
7e:02:13:ca:d9:ec:af:15:95:25:1d:d7:de:52:f6:
19:61:d5:97:19:3f:bd:26:78:08:3f:d8:c1:75:10:
38:7a:f1:86:11:6d:52:8f:6f:bf:ed:3a:5b:b9:68:
7f:85:22:2f:ed:4d:f5:86:59:a0:4d:64:ae:d4:e8:
42:9a:63:69:fd:6d:f5:6c:d4:08:62:ec:4c:5f:a4:
be:d0:c2:65:ce:bb:96:23:8c:c5:8d:b7:eb:bb:b1:
58:8f:ca:d0:21:64:32:97:c1:7a:62:37:ac:ac:3d:
94:28:f6:75:9e:04:47:d0:63:e7:2f:7c:71:96:b2:
3d:b0:e5:ab:90:1c:23:24:30:20:7b:17:a3:f7:b5:
3c:00:df:3b:4c:d5:2d:96:de:bb:ef:66:7c:90:ae:
b4:17:bf:0c:7e:21:c8:c8:f1:5e:6a:7a:ba:0b:a4:
c0:ce:16:db:a6:1d:94:3c:5a:f1:4d:af:07:3b:79:
5e:9a:25:8f:99:7d:d8:e7:7f:09:f7:4a:ff:14:88:
91:a6:99:7f:a9:ba:db:e8:51:b9:fe:f9:49:f9:c7:
1c:be:e6:91:2a:a5:bf:8b:e5:fb:5e:a6:65:f6:04:
9b:cc:cc:cb:f9:7e:7f:47:be:92:12:50:8f:d7:6a:
e5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7A:61:3E:18:5E:F1:FB:84:8A:85:BC:8E:BE:60:F4:0C:49:AE:8B
X509v3 Authority Key Identifier:
keyid:A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:32:bc:a0:e4:db:b9:36:0c:ae:0b:c4:10:93:54:5d:5c:ab:
82:19:b2:9b:93:63:73:e3:7d:3f:20:04:14:aa:0f:da:8b:cd:
e2:c6:02:8f:c0:83:d3:d0:c2:63:c9:f9:89:80:25:75:89:c9:
09:07:b7:4b:72:86:e8:52:d7:1f:ca:b8:63:dc:ec:8c:10:45:
b2:7e:46:29:0c:d8:88:cf:03:82:f7:e4:33:75:8b:37:68:bd:
7d:a7:42:e0:1a:05:a3:69:e2:25:2a:2f:74:31:4a:b0:ad:41:
d3:7b:a1:e9:cf:44:62:bd:cf:af:39:22:0d:fb:c2:99:62:06:
ab:c9:82:02:37:94:9b:61:fc:96:1f:f3:16:a2:bb:fd:92:e2:
2c:f2:56:1a:b5:37:27:4f:e2:de:06:fa:5a:51:c0:ab:6e:e2:
4a:4f:2a:2d:f7:95:c2:85:64:33:21:08:73:bc:54:8a:ce:2f:
bd:3f:24:58:26:ed:88:e2:5e:ff:93:f5:f6:e0:92:0a:5e:e8:
8e:58:25:f9:bd:aa:3e:59:2c:ad:30:59:ff:fb:fd:f4:54:e1:
ac:f7:65:e6:ef:68:50:3d:51:44:a3:88:64:6f:38:b1:ba:da:
52:c1:d1:e1:47:34:4f:a9:50:99:3e:9a:2c:e0:7b:9a:f3:f5:
3a:65:6c:46
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzNEQzgxMTAvBgNVBAUTKEE2Qzk2MTExMzBDNTE2NzQ1NTEzNkU4NUFCRjIzNkFB
QUE5MzdCQUQwHhcNMjUwMTMxMTg0MjQ2WhcNMjUwMjA3MTg0MjQ2WjAYMRYwFAYD
VQQDEw02NzlkMTlhNy05NmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1dhoVPAdju17XZU82Dh+AhPK2eyvFZUlHdfeUvYZYdWXGT+9JngIP9jBdRA4
evGGEW1Sj2+/7TpbuWh/hSIv7U31hlmgTWSu1OhCmmNp/W31bNQIYuxMX6S+0MJl
zruWI4zFjbfru7FYj8rQIWQyl8F6YjesrD2UKPZ1ngRH0GPnL3xxlrI9sOWrkBwj
JDAgexej97U8AN87TNUtlt6772Z8kK60F78MfiHIyPFeanq6C6TAzhbbph2UPFrx
Ta8HO3lemiWPmX3Y538J90r/FIiRppl/qbrb6FG5/vlJ+cccvuaRKqW/i+X7XqZl
9gSbzMzL+X5/R76SElCP12rlYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ96YT4Y
XvH7hIqFvI6+YPQMSa6LMB8GA1UdIwQYMBaAFKbJYREwxRZ0VRNuhavyNqqqk3ut
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0RDOC9FNUNBRjkzRTEx
RDgxMUVBQjcxNjdDNEZDNEY5QUUwMi9wc2xoRVRERkZuUlZFMjZGcV9JMnFxcVRl
NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BzbGhFVERGRm5SVkUyNkZxX0kycXFxVGU2MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
M0RDOC9FNUNBRjkzRTExRDgxMUVBQjcxNjdDNEZDNEY5QUUwMi9wc2xoRVRERkZu
UlZFMjZGcV9JMnFxcVRlNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBSMryg5Nu5NgyuC8QQk1RdXKuCGbKbk2Nz430/IAQUqg/ai83ixgKP
wIPT0MJjyfmJgCV1ickJB7dLcoboUtcfyrhj3OyMEEWyfkYpDNiIzwOC9+QzdYs3
aL19p0LgGgWjaeIlKi90MUqwrUHTe6Hpz0Rivc+vOSIN+8KZYgaryYICN5SbYfyW
H/MWorv9kuIs8lYatTcnT+LeBvpaUcCrbuJKTyot95XChWQzIQhzvFSKzi+9PyRY
Ju2I4l7/k/X24JIKXuiOWCX5vao+WSytMFn/+/30VOGs92Xm72hQPVFEo4hkbzix
utpSwdHhRzRPqVCZPpos4Hua8/U6ZWxG
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:56:07 2025 by rpki-client