Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json)
Hash identifier: FWs3EYtwaZSQjj4XnzL1gUEGoDRBrsEBSTlPaDdJeFk=
Subject key identifier: E0:1D:A1:9D:FB:8A:C4:F4:06:14:FF:D8:4D:F5:F0:E5:24:CC:7C:88
Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00
Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00
Certificate serial: 1177
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
Manifest number: 114B
Signing time: Fri 28 Mar 2025 17:23:01 +0000
Manifest this update: Fri 28 Mar 2025 17:23:01 +0000
Manifest next update: Fri 04 Apr 2025 17:23:01 +0000
Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: X57HHBIbhyhKHXUTAbKHiWmMxWxgMOx5VYNQ1OmusgM=)
2: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: eq/Jdt+R7/hZ4YW911X1nuNYUDsfy1mJ/nRJ7y06DWU=)
3: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: AKBOJFiK0CGzPrk1VjRavIF25nDnN6CV5txK6KFEoQM=)
4: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: mTC+0v+tu7i1qyU8oj/k9Utbi2nUrKBfJp5EbQJr3jw=)
5: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: z4Zna+X57y726pmGPGMeS7qfbOq2Xmw5XRAkrcvpEs8=)
6: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: HiYjj0p3JXRse1uC7XLEGyug0M30GyJfvcEMlo7b1CI=)
7: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: Tc4kPNK+2PBhLQIxN1GXPm3IRuhcOCLKA9GmTtF5VIw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4471 (0x1177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91112BC
Validity
Not Before: Mar 28 17:23:01 2025 GMT
Not After : Apr 4 17:23:01 2025 GMT
Subject: CN=67e6daf5-d978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:37:bb:c0:47:ad:0e:e4:cc:b8:c4:98:cf:86:
d7:74:3d:31:39:ab:94:68:8e:37:c8:dc:19:28:ee:
01:88:27:c9:37:63:fa:e1:49:e4:29:18:e8:c2:90:
3a:41:73:02:75:69:46:fe:7c:87:1b:d4:d5:21:cd:
3a:94:ff:fd:4f:40:15:bc:b9:9a:dc:38:2d:52:b8:
7f:44:b8:a6:b9:66:1b:9a:9b:e8:4e:aa:ea:35:52:
2a:03:60:cb:e0:78:08:0e:96:10:15:a7:48:e4:67:
57:57:ed:0a:b2:30:e5:ef:d9:25:30:04:c9:c2:cd:
ea:a4:07:22:0d:18:7b:e1:7a:36:77:09:b3:8d:bb:
59:58:b0:45:ce:20:70:15:64:35:7f:05:e5:10:3d:
fc:96:e0:4e:26:fd:70:95:0c:e4:02:57:00:16:89:
1d:a1:31:7b:61:02:ed:a3:c0:97:46:68:37:3c:d4:
20:fc:2b:7c:85:ad:5d:de:6b:a9:87:2f:b3:f0:a4:
4e:40:4a:91:d0:e6:b4:70:6f:2f:08:31:80:e4:a0:
40:70:f9:ab:be:ab:2e:88:50:d0:54:ea:dd:90:3d:
6e:2c:c9:15:0a:e8:b7:06:9b:a7:66:e1:17:0e:26:
75:78:91:34:48:33:d8:c8:00:a9:5b:57:9c:c7:b9:
58:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1D:A1:9D:FB:8A:C4:F4:06:14:FF:D8:4D:F5:F0:E5:24:CC:7C:88
X509v3 Authority Key Identifier:
keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:d9:3b:b3:87:c8:3b:66:18:ce:98:e1:de:38:d8:52:6d:d4:
f3:42:fb:8f:d1:79:08:0f:2c:61:52:24:55:9c:c7:a2:d3:90:
1b:28:f8:e9:20:56:ac:12:33:b8:67:70:b7:d4:ce:b7:6b:09:
7f:68:6e:d2:d2:ef:22:46:d8:51:1f:26:fc:bf:4e:cf:82:64:
8d:36:ad:21:e6:62:e0:cc:24:7c:15:04:61:21:27:8d:19:e1:
17:d9:94:bf:91:d8:7a:7f:6c:60:08:71:7c:d2:e1:1b:d4:68:
b3:60:bf:e2:b7:27:07:c7:86:4f:32:b1:94:29:36:1f:46:1c:
6e:31:4a:d7:ff:4a:73:3c:d0:0c:bd:50:53:e6:61:63:fb:4f:
fe:ba:28:14:e7:c2:5b:72:ef:49:5e:7b:4a:30:8b:7b:a9:52:
ce:6b:ca:3d:d6:85:30:26:de:03:76:a2:af:3b:bb:da:21:64:
53:69:84:77:41:24:7a:e8:5b:16:4f:fc:46:17:0f:0c:e0:33:
d7:54:44:57:65:13:91:af:cd:f8:e1:6b:31:e9:77:98:7f:85:
62:0e:ac:7c:2a:f7:69:95:4b:33:7c:29:97:7f:ca:dc:ae:8a:
fc:64:0e:59:df:42:84:6d:9b:56:13:07:ce:69:85:ca:22:0b:
21:92:b5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:14:58 2025 by rpki-client