Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft
File: 3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft (raw, json)
Hash identifier: krJUjm5qspH28S3vuVLCYr0xwk++m4IT2TDvv2OWmR4=
Subject key identifier: C1:40:C4:DC:16:93:E7:AE:EA:F7:87:C0:8C:A6:16:E5:DA:5F:97:B2
Authority key identifier: DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB
Certificate issuer: /CN=A91116D1/serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB
Certificate serial: 0BF7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft
Manifest number: 0BF1
Signing time: Fri 31 Jan 2025 18:33:00 +0000
Manifest this update: Fri 31 Jan 2025 18:33:00 +0000
Manifest next update: Fri 07 Feb 2025 18:33:00 +0000
Files and hashes: 1: 3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl (hash: ngD5X0Sudb/JpZrBTKTAd6Xibjs3J0lhm4t/rlPHljA=)
2: AD532D26090211EAAD8D5786C4F9AE02.roa (hash: zMbxVtz2dv4BRq8dK++ZIDeWN8B3kY7lSogxQf54mCs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3063 (0xbf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91116D1/serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB
Validity
Not Before: Jan 31 18:33:00 2025 GMT
Not After : Feb 7 18:33:00 2025 GMT
Subject: CN=679d175c-3963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:62:2c:16:6e:e6:a8:c8:85:7c:54:e8:14:
6a:d2:3d:32:5a:1f:f0:38:e7:df:31:c2:7b:3b:68:
26:aa:29:4f:d6:f7:2e:d6:d9:d7:aa:45:ed:ec:7b:
b3:67:1f:64:34:f4:7b:df:7d:ec:a0:f8:58:f1:6a:
b4:b1:75:79:6d:4f:30:bb:a0:e7:81:f4:6b:05:e2:
be:d3:80:d0:05:a9:fc:9b:d5:ab:f5:65:82:94:1d:
07:89:5d:4c:03:d5:11:0b:30:8a:8d:ee:ee:fa:08:
cd:70:de:4c:73:e5:f8:95:ee:37:14:aa:c9:8a:49:
2a:23:15:d2:92:9f:b6:91:32:3c:b2:66:c5:d1:6f:
71:b7:53:5f:95:1f:26:b3:40:cc:a0:a2:49:7c:06:
19:17:fd:4f:1e:f7:5f:a7:ff:38:c1:c6:16:1f:1e:
ec:1c:12:13:fb:4b:e8:8f:9a:0e:a6:46:77:da:f9:
1d:b8:f8:b8:87:08:a2:91:f0:95:f4:e9:8d:24:49:
af:19:25:38:e0:36:9f:7c:52:e7:ed:9d:61:60:0c:
b8:dc:e0:e5:7e:f6:db:89:6c:db:64:c3:8d:1a:04:
76:d6:26:81:ec:a7:7e:db:7f:cd:f6:cd:f6:6b:e9:
d7:0f:09:f3:9a:84:57:13:05:ce:9c:c2:a2:6d:d6:
80:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:40:C4:DC:16:93:E7:AE:EA:F7:87:C0:8C:A6:16:E5:DA:5F:97:B2
X509v3 Authority Key Identifier:
keyid:DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e5:72:48:91:80:ab:fb:ed:26:0f:99:6d:f3:90:f2:3a:a1:
62:ef:56:17:ea:8c:a8:f5:77:00:43:a8:95:55:7c:bc:ad:04:
3b:74:11:50:2e:b7:6f:c9:c0:25:5e:dc:25:c3:22:0d:3b:3d:
b4:0a:db:ee:40:e1:f5:6a:95:5e:0e:54:38:c2:8a:af:79:dd:
87:b3:e9:af:3f:13:f0:07:15:1e:5d:49:d0:d7:b8:c0:62:26:
a2:3e:07:36:e6:c3:1d:c4:b7:70:a2:9a:ea:41:97:6b:f5:6c:
7d:44:1a:ca:eb:18:51:2e:f5:40:46:41:6c:7b:80:a3:fe:9d:
bc:63:92:a0:da:d5:55:43:16:b1:7e:38:13:e9:cd:f6:4c:ad:
d8:73:39:cf:ce:7f:81:19:b5:95:f6:ed:97:2f:3e:e2:4e:3f:
47:df:1d:5f:c7:cb:cf:b0:c7:51:6e:ee:e2:d4:8b:73:31:ac:
c9:f2:66:2f:28:78:c3:97:70:46:5e:91:52:d5:34:2e:4f:5e:
c6:17:56:11:9c:2d:27:c9:05:85:dd:1b:dd:55:47:28:11:f4:
91:b3:83:c6:9a:df:81:cc:e1:32:67:52:fd:be:75:a8:07:b8:
21:a0:74:7d:82:e2:bd:5c:48:ea:5e:c9:7b:63:39:3a:9a:81:
f6:4f:77:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:35:54 2025 by rpki-client