Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
File: y-ExoIOkVjx8Q52webZLatEQGnw.mft (raw, json)
Hash identifier: nT+tyICThzRbd8uSzKNfbtl19Ji3g82QAlsXe/DaDjQ=
Subject key identifier: 5A:A7:7E:76:4C:46:13:E1:C7:19:71:19:B4:11:6C:1D:A2:4D:AE:8F
Authority key identifier: CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C
Certificate issuer: /CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
Certificate serial: 086F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
Manifest number: 085B
Signing time: Fri 28 Mar 2025 20:59:13 +0000
Manifest this update: Fri 28 Mar 2025 20:59:13 +0000
Manifest next update: Fri 04 Apr 2025 20:59:13 +0000
Files and hashes: 1: y-ExoIOkVjx8Q52webZLatEQGnw.crl (hash: EKF2Nhbux4C4zbvM/4Y71jgcqPqeQXjLixl/gUemw7k=)
2: 90D4C28CC2BA11EA8A079767C4F9AE02.roa (hash: e+13EZAvpj9mc2IILMERDnSK9NszhBMUbUBC2BNslfY=)
3: F043A0CCC2B411EA9BAFF054C4F9AE02.roa (hash: NHcEruSqBuMj/IPzd/3S47VAhmXWgMgQYut3Slp0jA8=)
4: 91B81F1EC2BA11EA8A079767C4F9AE02.roa (hash: HnUSTDgiOASq4KYnjuG0nd8h+Pt87RrArwZX9gcI9gM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2159 (0x86f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EED0
Validity
Not Before: Mar 28 20:59:13 2025 GMT
Not After : Apr 4 20:59:13 2025 GMT
Subject: CN=67e70da1-53b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:40:2f:17:87:5d:9e:b8:83:b3:5b:32:ba:ee:
6a:5d:91:8e:1c:17:dd:36:ee:e9:86:ab:4f:a7:e5:
91:b1:e9:c2:ec:7b:a5:89:59:23:98:27:30:df:71:
c7:5f:0d:8f:81:64:bb:21:f8:81:c6:2a:be:00:e2:
81:74:13:5e:52:aa:91:60:3b:14:c7:8f:f8:e4:32:
e4:79:32:a2:73:76:5d:23:65:74:10:f1:c5:50:57:
3a:aa:bc:d2:c3:38:94:a0:69:4a:10:e0:bb:e8:22:
82:93:90:78:cf:c0:9a:be:21:be:c9:75:36:f8:7d:
2f:7a:46:29:e3:64:f7:66:08:5b:77:ea:4c:f2:87:
9f:ae:88:5a:15:ea:9e:7c:93:98:7e:eb:5e:ed:89:
18:98:2f:da:06:9f:b4:32:e6:b9:f3:0d:0f:de:d5:
92:0e:41:65:ae:2c:f1:2e:41:6c:5a:5b:ca:ae:29:
15:f5:85:bd:db:9d:64:2f:31:42:ad:9f:93:50:d4:
99:79:af:34:52:95:7d:3f:4a:08:55:7c:0e:b1:0e:
71:2b:1f:c9:a0:45:88:f6:46:96:22:5e:f3:b7:cc:
46:b8:38:b7:97:6f:7d:73:93:b8:7b:93:bb:65:44:
98:77:c0:7f:4c:9b:29:6d:bb:be:2c:40:cf:4e:59:
00:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A7:7E:76:4C:46:13:E1:C7:19:71:19:B4:11:6C:1D:A2:4D:AE:8F
X509v3 Authority Key Identifier:
keyid:CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:f0:da:4c:fd:01:aa:6d:92:c1:f9:65:90:7e:a8:4f:05:80:
66:d9:e1:7f:5a:dd:70:1c:87:ab:81:de:d1:39:31:e6:36:d9:
f4:4d:8e:dd:82:5c:a0:48:b3:8f:70:da:bf:3f:7e:ee:be:71:
ca:73:1a:68:f3:5f:56:8e:a4:b9:e6:b1:71:3b:b0:29:62:40:
8f:f4:b6:10:64:b4:ad:f4:0f:b4:fd:c6:df:34:25:b1:70:17:
42:fa:ba:8f:ef:00:d7:6a:14:61:f6:5e:3b:8a:71:a7:e8:bc:
ae:84:f3:70:88:34:03:da:19:9b:2e:35:4a:78:34:f7:eb:f8:
de:56:81:dc:f3:4d:f4:e6:5a:22:15:b9:a8:ee:94:2b:ac:e3:
c7:19:6c:f9:9c:e0:53:6b:59:ee:3f:2f:d1:db:76:04:7d:f6:
0b:ce:1f:62:a9:e3:af:2c:4a:b5:f7:59:f3:ac:5e:ad:1e:e8:
40:ef:fa:c1:91:11:90:48:64:a9:08:9e:9b:40:d1:74:eb:10:
78:4e:ad:cb:91:1b:63:04:aa:7a:70:a2:42:86:1c:ea:93:1e:
22:0b:ae:35:2a:36:cf:32:67:e8:a7:46:08:37:18:5c:77:0e:
92:ca:bc:5c:e9:52:0f:b8:29:10:c0:62:cd:57:6b:33:cc:77:
bf:e8:d8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:53:48 2025 by rpki-client