Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
File: l_PsEBRVjghHCgOpR4yE8j5FADo.mft (raw, json)
Hash identifier: kBds/lyup0GHiyt4U+RLIdKpv93XplPIlAWsG+M0i8g=
Subject key identifier: CD:4D:9C:47:B5:BB:51:58:1E:C6:E8:B9:C8:DF:A9:CC:B4:09:77:EB
Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A
Certificate issuer: /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A
Certificate serial: 014F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
Manifest number: 0142
Signing time: Fri 31 Jan 2025 03:38:49 +0000
Manifest this update: Fri 31 Jan 2025 03:38:47 +0000
Manifest next update: Fri 07 Feb 2025 03:38:47 +0000
Files and hashes: 1: l_PsEBRVjghHCgOpR4yE8j5FADo.crl (hash: jUTORg9pUe3oVQoqZA9CUxgcwysm0juonZbIioKcMF4=)
2: B7D34CC444ED11EE8D931624C4F9AE02.roa (hash: o91C1jFze1aQemqWDwZsi+b9/Rmy3VyieJUeIkyvzoc=)
3: D78EA2DE44ED11EEA6685324C4F9AE02.roa (hash: /JrzSFgR8sIchQqbAkxuKHvug5BLuVR/st4b3ZlxES8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A
Validity
Not Before: Jan 31 03:38:47 2025 GMT
Not After : Feb 7 03:38:47 2025 GMT
Subject: CN=679c45c8-6775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:78:8a:a4:19:24:0b:ad:93:bc:cd:a7:26:
0a:9f:a9:fc:4b:8c:68:e2:5d:60:41:af:f8:5a:0e:
ca:26:00:69:89:4a:5c:b6:bc:7c:36:82:85:c0:26:
c1:aa:b8:c3:af:52:ed:ec:e5:a5:f6:32:28:f8:c8:
fc:b0:60:dc:38:cb:d0:71:cd:8b:31:87:e8:51:e7:
86:79:3a:45:8f:6d:70:7c:c1:0f:ee:7b:92:57:b5:
0d:99:e0:c4:ff:07:94:ad:07:c4:ac:82:aa:e4:fe:
54:d1:b9:18:af:2a:33:5c:4f:c5:7b:c7:97:94:98:
34:94:e7:f4:77:65:38:d9:76:c5:d0:41:0a:1e:fb:
3b:8f:e3:c3:a9:64:fa:c8:a8:22:08:8c:0a:bf:ea:
af:c4:e8:56:b4:8c:88:62:af:dc:c8:84:e5:3b:6f:
fa:73:d9:8b:42:dd:c9:54:9e:d3:4a:c0:45:69:0e:
00:71:c9:08:cf:d0:c7:5f:5b:20:ad:21:7b:3a:f4:
ef:85:f5:e8:bf:98:d8:59:85:33:33:03:8c:3b:3c:
a1:ce:de:f1:cc:ef:f2:3a:ec:66:0b:9d:f1:45:7e:
d3:36:55:06:5a:44:67:2d:ec:2e:70:8a:be:42:c9:
3a:46:c1:83:18:92:4b:1f:5d:2d:3c:2e:1f:69:9d:
a6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4D:9C:47:B5:BB:51:58:1E:C6:E8:B9:C8:DF:A9:CC:B4:09:77:EB
X509v3 Authority Key Identifier:
keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:1a:7e:63:72:5b:0b:04:ed:6a:72:61:14:6d:50:88:d8:b0:
cb:f5:89:3d:d5:a4:96:f5:49:d4:c8:e4:67:3a:06:62:06:9c:
b3:b9:39:5e:b9:32:2c:98:7e:15:69:9a:41:1a:96:50:ea:9e:
93:5b:92:cc:49:8b:0b:2b:bd:58:ff:3e:b2:c8:e0:a1:72:b0:
17:a7:3d:eb:67:16:e6:4a:fd:e3:ac:61:e1:58:41:09:98:0f:
1d:13:4e:38:b5:38:ec:c7:5f:3e:97:31:6d:f6:51:82:d8:7c:
30:95:9a:02:4a:1b:3a:96:58:72:d9:67:18:b0:82:56:05:ea:
c3:17:71:e7:7e:ed:19:ab:f5:b6:2b:68:57:77:7a:c7:7d:46:
da:ed:31:1a:ed:47:c5:de:a7:a3:b9:9f:af:cc:90:24:40:a5:
ea:ac:2e:a6:b8:d4:17:93:eb:a8:09:47:fe:a6:74:db:7f:62:
b2:13:31:6c:d1:ed:7d:b3:91:03:10:1e:fa:28:35:25:a9:4b:
fc:06:cc:78:11:f7:f2:ab:1a:40:74:d4:75:f1:fd:f7:15:09:
82:5d:c4:14:df:a4:ee:3c:bf:9f:48:57:b6:b3:ca:51:7b:f7:
7b:c8:5e:21:b1:41:89:86:b7:84:bb:21:c9:39:23:87:b3:f5:
8a:3b:f7:b4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTJFOTIxMTAvBgNVBAUTKDk3RjNFQzEwMTQ1NThFMDg0NzBBMDNBOTQ3OEM4NEYy
M0U0NTAwM0EwHhcNMjUwMTMxMDMzODQ3WhcNMjUwMjA3MDMzODQ3WjAYMRYwFAYD
VQQDEw02NzljNDVjOC02Nzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyeV4iqQZJAutk7zNpyYKn6n8S4xo4l1gQa/4Wg7KJgBpiUpctrx8NoKFwCbB
qrjDr1Lt7OWl9jIo+Mj8sGDcOMvQcc2LMYfoUeeGeTpFj21wfMEP7nuSV7UNmeDE
/weUrQfErIKq5P5U0bkYryozXE/Fe8eXlJg0lOf0d2U42XbF0EEKHvs7j+PDqWT6
yKgiCIwKv+qvxOhWtIyIYq/cyITlO2/6c9mLQt3JVJ7TSsBFaQ4AcckIz9DHX1sg
rSF7OvTvhfXov5jYWYUzMwOMOzyhzt7xzO/yOuxmC53xRX7TNlUGWkRnLewucIq+
Qsk6RsGDGJJLH10tPC4faZ2mawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1NnEe1
u1FYHsboucjfqcy0CXfrMB8GA1UdIwQYMBaAFJfz7BAUVY4IRwoDqUeMhPI+RQA6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkU5Mi8xODg1QTZEMjA2
Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpnaEhDZ09wUjR5RThqNUZB
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xfUHNFQlJWamdoSENnT3BSNHlFOGo1RkFEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MkU5Mi8xODg1QTZEMjA2Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpn
aEhDZ09wUjR5RThqNUZBRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBwGn5jclsLBO1qcmEUbVCI2LDL9Yk91aSW9UnUyORnOgZiBpyzuTle
uTIsmH4VaZpBGpZQ6p6TW5LMSYsLK71Y/z6yyOChcrAXpz3rZxbmSv3jrGHhWEEJ
mA8dE044tTjsx18+lzFt9lGC2HwwlZoCShs6llhy2WcYsIJWBerDF3Hnfu0Zq/W2
K2hXd3rHfUba7TEa7UfF3qejuZ+vzJAkQKXqrC6muNQXk+uoCUf+pnTbf2KyEzFs
0e19s5EDEB76KDUlqUv8Bsx4EffyqxpAdNR18f33FQmCXcQU36TuPL+fSFe2s8pR
e/d7yF4hsUGJhreEuyHJOSOHs/WKO/e0
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:44:52 2025 by rpki-client