Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
File: pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft (raw, json)
Hash identifier: /If0qghT0QNe9DFJhxn2tqNPvw4fUVlxzqPv4NtfQLc=
Subject key identifier: A7:09:0F:6F:CA:EE:73:8C:26:2D:FE:50:A2:AE:71:05:C2:D6:17:7B
Authority key identifier: A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66
Certificate issuer: /CN=A91E3B25/serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66
Certificate serial: 1687
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
Manifest number: 1F45
Signing time: Fri 31 Jan 2025 16:41:16 +0000
Manifest this update: Fri 31 Jan 2025 16:41:16 +0000
Manifest next update: Fri 07 Feb 2025 16:41:16 +0000
Files and hashes: 1: pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl (hash: eyUj0Txb3ij0rbWOH0UPlCIZyyxyiOjYwug488ME2nc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5767 (0x1687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3B25/serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66
Validity
Not Before: Jan 31 16:41:16 2025 GMT
Not After : Feb 7 16:41:16 2025 GMT
Subject: CN=679cfd2c-44b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:02:94:85:ee:b8:0d:6c:ea:94:b4:ed:29:
af:42:38:94:7e:69:a8:f0:d3:8d:cf:67:6c:51:c6:
48:2e:b5:4c:81:dc:c8:68:b1:d3:77:c9:66:72:5d:
51:c3:d1:3e:8f:37:72:89:5a:50:7e:8a:80:e5:35:
17:7b:c4:0e:d8:1b:70:b6:c7:5b:33:6b:12:dd:82:
83:ef:67:e4:69:37:af:c3:89:0f:c7:3d:ea:80:e2:
c0:22:a5:64:d7:6d:9a:2f:ec:71:5b:79:95:f6:78:
e5:e0:5d:18:68:4b:08:e6:c9:56:e0:65:ed:89:a6:
cd:2a:e0:e5:9f:2b:68:04:c3:03:60:aa:89:b9:fe:
70:7b:71:f8:01:7b:a5:73:23:ff:9f:51:ac:90:14:
e8:ef:be:c0:14:65:7c:61:c0:f5:46:43:21:e0:6d:
6e:43:b8:34:43:b3:16:79:44:6b:e7:c3:e3:bf:4e:
2b:98:d0:30:ff:46:a0:e7:3f:7a:f2:82:ed:b3:8a:
fc:e7:f8:ca:6e:c9:fa:7a:46:5d:54:d3:f9:04:0a:
e4:6a:02:f3:2a:92:e1:18:d5:0e:65:7f:9a:eb:1a:
fd:98:f7:09:4c:20:24:8b:48:b7:e6:42:ce:90:64:
42:34:ae:5f:b0:92:25:5f:d4:59:43:f0:2d:68:e5:
47:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:09:0F:6F:CA:EE:73:8C:26:2D:FE:50:A2:AE:71:05:C2:D6:17:7B
X509v3 Authority Key Identifier:
keyid:A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c7:67:5f:70:6d:2a:39:11:e7:25:2e:39:4a:26:eb:72:87:
74:3b:25:ed:ba:d8:8e:5d:29:66:62:6f:74:81:50:79:3b:f5:
e7:4b:ab:07:2c:38:8e:bc:fd:ad:b7:0d:90:7f:c2:a7:43:60:
da:a4:8c:6e:81:29:76:57:c5:cd:75:bf:56:9e:df:0a:72:fc:
63:1d:79:6d:ae:52:4a:48:94:97:03:9d:08:1b:c3:d6:a8:fe:
64:e9:40:88:fa:cd:d3:e0:f6:69:ea:9f:71:02:20:b7:86:f4:
9e:9e:1d:5e:de:21:af:32:1b:0a:f6:21:7f:70:29:a6:78:7c:
af:a6:9f:60:14:c1:fc:fa:8c:b9:ce:58:17:51:3e:4c:7c:1a:
a8:ed:ca:cf:e3:93:22:f5:ca:a6:bb:c4:c6:b6:d6:93:52:c5:
5d:ea:5b:a2:30:54:a3:b4:df:20:70:10:25:86:3b:5a:56:fa:
30:e2:26:c6:af:cb:48:85:23:88:75:9a:38:64:85:02:e5:48:
c5:ed:4d:97:73:dd:60:6c:22:2f:10:ba:8a:1f:f9:74:89:6a:
81:16:a6:fd:8a:a2:17:7c:0e:e1:c9:a9:65:ac:2d:c1:b9:02:
c2:79:35:ac:c4:a5:f2:50:3e:73:af:9d:f8:3b:4d:36:29:34:
a0:67:23:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:38 2025 by rpki-client