Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
File: pg-NpHi9dy9PKz5MedXBgd3laJM.mft (raw, json)
Hash identifier: hlrFVx0/ChbJ9pKmrZi5PHnnsgcwuyY8VUk1YWO/oW0=
Subject key identifier: EE:70:A2:7A:58:37:E4:C4:32:80:1D:E2:EF:B7:18:54:D6:54:B9:C5
Authority key identifier: A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93
Certificate issuer: /CN=A91EDADE/serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893
Certificate serial: 015B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
Manifest number: 0157
Signing time: Fri 31 Jan 2025 03:20:54 +0000
Manifest this update: Fri 31 Jan 2025 03:20:53 +0000
Manifest next update: Fri 07 Feb 2025 03:20:53 +0000
Files and hashes: 1: pg-NpHi9dy9PKz5MedXBgd3laJM.crl (hash: LzBuoeDvCUUPMU4MHHnsks9wGA0fjo0KMLtYO7BiV74=)
2: 763018B4D29811ED8CDDB83AC4F9AE02.roa (hash: kB/0ibOjCq9dbW0BRMR/SkO1yELJz7RuZWoFT7e9L1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDADE/serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893
Validity
Not Before: Jan 31 03:20:53 2025 GMT
Not After : Feb 7 03:20:53 2025 GMT
Subject: CN=679c4196-80b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:86:0e:f4:62:f2:02:96:0f:8e:2a:99:da:cb:
e1:9e:54:65:29:17:55:9c:44:aa:6f:11:f7:7b:b2:
dc:30:3d:7c:6b:46:0d:0f:8a:89:b3:30:33:c8:b8:
b6:0a:83:bc:f9:5b:f8:5a:c0:d7:6c:01:53:02:23:
e9:dc:10:59:d9:6d:8f:c9:cd:83:50:82:18:24:dd:
6a:69:ff:6a:f1:aa:2b:0a:f2:14:31:98:8a:cf:09:
10:83:d4:dc:14:d3:a5:a9:62:d5:d3:03:ca:fd:4d:
87:32:69:3c:63:2d:04:66:5e:63:93:ea:f4:38:cb:
61:4a:1f:26:45:73:61:22:d2:b4:2d:e7:d6:88:f6:
fc:66:fc:d9:3e:f5:b6:3c:43:24:e6:e7:f3:7e:d6:
8f:da:e4:1e:ac:05:78:cf:01:52:75:fa:a6:de:72:
5a:8c:6d:1c:41:01:f6:7e:47:fe:8f:77:0e:64:25:
5b:fd:25:3f:0a:e8:d1:5a:a6:f4:7c:57:ed:e7:70:
e1:47:36:59:e6:5e:af:08:7a:fc:15:d0:3b:87:2b:
b3:8b:73:34:f5:f5:f4:94:6c:86:bc:ec:79:b2:d4:
ba:ab:40:db:ff:f7:24:cf:7e:df:3d:30:5c:06:fe:
02:74:66:b5:99:83:8a:fc:db:a4:21:f5:ab:5e:d3:
63:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:70:A2:7A:58:37:E4:C4:32:80:1D:E2:EF:B7:18:54:D6:54:B9:C5
X509v3 Authority Key Identifier:
keyid:A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:cb:a0:7a:f4:fe:6d:be:ea:02:6c:67:0a:8c:6c:03:ea:ed:
48:10:1c:08:a5:27:b3:aa:2f:56:a4:55:39:b2:e5:e5:b4:be:
0f:4b:fc:5f:1a:da:b6:c2:32:cf:32:c8:94:61:5b:0a:db:b9:
d1:9a:4b:f2:7a:21:0c:0e:da:60:5f:b0:ef:19:62:16:c8:61:
b4:9f:fe:a0:d4:78:9d:c6:3e:db:b5:5a:f5:58:25:ef:0d:25:
d4:f5:3c:a5:f4:6c:59:5e:2a:5c:29:5a:c9:67:e9:d3:6a:e9:
4f:d2:25:94:99:c8:85:0f:4d:4a:de:41:cf:1b:48:54:18:29:
09:f0:f5:af:f3:ef:a3:b1:6a:44:70:f4:d0:2a:6e:70:8d:cf:
78:38:66:1a:ef:76:c8:0b:6e:81:71:9a:e9:1f:8a:90:f6:f8:
b0:be:15:50:da:bd:d1:29:6b:d6:77:78:c9:69:9d:8e:8f:e9:
87:2f:6b:56:ba:94:dd:e9:52:69:11:88:4a:48:9f:1d:fa:49:
bd:d1:b0:d6:b8:ae:21:dc:46:1e:e5:20:71:34:bd:ac:6a:6f:
25:c8:4d:8a:99:34:1b:7d:1b:09:0a:ae:82:d2:37:97:de:27:
e1:ed:90:10:9b:d9:71:70:83:ac:67:2e:e5:0f:9d:05:b9:4e:
77:0e:2a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:45:30 2025 by rpki-client