Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
File: pslhETDFFnRVE26Fq_I2qqqTe60.mft (raw, json)
Hash identifier: we+3q31y2u9jXJXxMuGsnk/WX0mN8iEYpHbbF60YdEE=
Subject key identifier: EF:77:F4:C8:29:2E:C8:11:84:B2:A6:6C:75:7C:BF:DF:23:F4:E8:0C
Authority key identifier: A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD
Certificate issuer: /CN=A91C3DC8/serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD
Certificate serial: 0C14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
Manifest number: 0BF9
Signing time: Fri 28 Mar 2025 18:57:14 +0000
Manifest this update: Fri 28 Mar 2025 18:57:13 +0000
Manifest next update: Fri 04 Apr 2025 18:57:13 +0000
Files and hashes: 1: pslhETDFFnRVE26Fq_I2qqqTe60.crl (hash: 7Zfe9tucG9lPXlcEpZq70Edo8W8baG9rQaF5MHleT7M=)
2: D29DE1E6C98611ED8D5AE04CC4F9AE02.roa (hash: +1WLQRV04Ed2oW4QFm7/7ippf8dDjkisALZjf/MJ6Po=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3092 (0xc14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3DC8
Validity
Not Before: Mar 28 18:57:13 2025 GMT
Not After : Apr 4 18:57:13 2025 GMT
Subject: CN=67e6f109-e3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:96:03:d8:ff:13:6f:30:3d:0c:28:25:d0:a0:
55:63:17:60:d9:47:32:64:e7:7b:a6:0b:4c:fb:57:
15:53:49:17:75:45:47:a7:41:e5:8e:f3:d9:8e:2e:
a4:01:3d:a1:2b:29:33:a5:3d:cc:b0:e2:87:8d:b4:
60:29:24:76:70:48:b7:76:1a:8c:3c:b6:9e:cf:3b:
67:e8:94:4a:30:3b:f6:82:1a:78:c9:7b:92:2d:3e:
84:5a:fb:f1:56:71:ac:b6:75:9b:2e:7e:f6:19:02:
1a:ff:1c:b1:20:5f:15:4a:89:62:1f:82:9c:eb:9e:
27:4b:1b:f2:e6:ea:6d:6e:08:36:38:14:9d:09:3d:
06:a6:3a:3d:21:0f:d0:c0:2e:2e:02:dd:c5:3a:93:
db:ff:bc:8b:b9:ae:7f:31:b4:c4:9a:5d:d6:9c:a7:
e6:ce:94:31:4e:4a:a0:4d:ae:0a:c9:6c:c1:b6:5e:
00:9e:6d:ab:2c:01:54:e3:8c:98:29:40:5b:ee:e0:
6d:c4:82:ea:07:1c:24:66:da:2c:74:9f:63:da:7f:
f2:22:1f:95:0c:2c:46:44:6b:0a:a6:18:65:54:83:
2c:d7:8e:5d:5d:c8:2a:8d:af:81:ee:c0:8d:51:d4:
ff:2e:73:99:cd:bb:84:87:97:76:c7:f2:01:00:b8:
b8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:77:F4:C8:29:2E:C8:11:84:B2:A6:6C:75:7C:BF:DF:23:F4:E8:0C
X509v3 Authority Key Identifier:
keyid:A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:ec:cc:87:df:6c:af:86:7b:25:2e:56:75:cd:7c:1d:a0:af:
4b:44:a1:4a:33:11:14:15:7f:89:7f:9a:a9:dc:8f:b9:d0:8a:
b4:80:de:3f:a6:4c:6a:8a:f2:6d:04:4c:bc:90:6c:17:b9:00:
e3:df:bc:60:bc:ca:92:fe:e3:4e:43:21:d3:58:b5:d1:3d:29:
36:35:ea:8f:63:da:9e:47:3f:e6:b1:8c:3c:e2:7a:6b:23:84:
0e:a9:a1:87:85:0f:0d:63:81:81:59:81:42:8e:e0:b8:99:62:
c9:c1:99:86:13:d6:96:cc:9e:37:e7:b3:4f:33:96:2c:9f:45:
17:45:b5:f3:1e:f4:97:b3:ea:5c:65:da:fc:22:a0:97:ce:4b:
8f:5f:31:e5:2a:78:b5:3b:0c:e7:9d:08:8f:e7:c3:a1:dd:c7:
49:b6:0f:a1:c5:f3:b2:65:80:97:f5:bc:b3:73:42:fe:4e:b3:
50:28:e7:16:76:74:21:58:8f:1d:58:58:ca:25:63:4e:16:f3:
fe:e0:ce:6e:6a:9a:2e:f4:ef:1a:5d:fb:94:83:90:91:05:60:
50:76:24:33:70:da:23:d2:cd:ef:9d:8e:d4:98:f6:9c:7e:0c:
e4:64:0f:a6:3f:19:88:a4:4e:fb:d4:c3:ab:9e:d4:b3:e0:c3:
3b:fd:07:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:20:39 2025 by rpki-client