Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
File: ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft (raw, json)
Hash identifier: Wvd8Yzz+D3+cUNXlAtce9NM3Oquz1fY6VGMXbYiT1wg=
Subject key identifier: EF:15:1D:58:AE:EC:46:35:36:6D:4E:F5:E2:5D:4B:DB:59:E3:CD:BB
Authority key identifier: CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8
Certificate issuer: /CN=A9113683/serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8
Certificate serial: 08AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
Manifest number: 0899
Signing time: Fri 28 Mar 2025 20:50:57 +0000
Manifest this update: Fri 28 Mar 2025 20:50:56 +0000
Manifest next update: Fri 04 Apr 2025 20:50:56 +0000
Files and hashes: 1: ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl (hash: DjqDhLAwW8xGJf5AVdyxq6hVSgXUB4IWyCTSATQEoHU=)
2: E43CFABEB67611ECACB17C42C4F9AE02.roa (hash: ejgjifoiJDZJ+gWsoAobC1JoVa6W0Im+MVj8NKJ7EYw=)
3: A778E94E598911EBA7B14777C4F9AE02.roa (hash: 5yaZ6S1Dp8sDk+BVEX55LZpSEffc1QPyVJT4ZIYCENM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2220 (0x8ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113683
Validity
Not Before: Mar 28 20:50:56 2025 GMT
Not After : Apr 4 20:50:56 2025 GMT
Subject: CN=67e70bb1-64c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:e6:10:e0:a5:a8:12:38:86:32:b2:fa:65:
87:26:0b:6d:fe:89:63:f7:06:4b:17:18:aa:d8:83:
3a:ea:a2:bb:04:4c:f0:22:0c:e2:5a:47:e0:6a:9d:
b0:07:7f:ce:8e:e0:26:41:2f:dc:eb:57:57:2e:d7:
e7:d1:b1:3d:43:cf:33:bf:9d:53:6d:69:a3:22:a8:
0f:91:31:b3:b1:af:37:d7:e4:08:15:ee:e9:db:25:
17:06:d9:94:3c:d4:88:e9:2d:56:4f:82:1e:7a:22:
1b:e4:2a:5a:ac:0f:c5:e1:24:84:c3:29:45:41:00:
df:a9:e1:d3:6e:32:fa:04:03:a6:6b:fc:ab:77:35:
c4:75:ba:46:bd:6e:c4:5d:04:9a:22:e5:6d:ab:73:
2d:f6:e7:e2:16:e3:a9:a4:c0:23:38:23:8f:9e:41:
4a:aa:64:ee:da:79:14:c8:b1:14:3d:9f:f7:9a:05:
48:3a:f7:1e:72:e7:c5:16:c6:2e:74:11:d9:49:51:
35:4d:70:3b:f6:7a:20:6a:03:b0:52:47:87:e0:b2:
4a:1e:67:be:2f:19:22:d8:e8:44:41:ff:3f:4a:88:
a5:23:91:82:f2:a5:67:68:b2:39:49:b8:6b:c5:9c:
d9:7d:3a:bd:88:77:ca:1f:ef:8f:88:fb:e4:1e:4b:
e4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:15:1D:58:AE:EC:46:35:36:6D:4E:F5:E2:5D:4B:DB:59:E3:CD:BB
X509v3 Authority Key Identifier:
keyid:CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:da:20:99:a1:c1:33:76:56:e7:55:f9:9b:00:ca:83:22:2f:
94:22:8d:0a:f7:26:32:98:97:12:c0:bc:b8:55:51:6d:5d:ca:
bf:5e:c7:11:a4:d7:d6:e4:50:03:d4:38:1e:b5:30:65:fd:db:
97:10:03:53:c6:0f:54:c8:3a:75:62:99:9a:86:78:4d:3a:cc:
23:9f:60:5e:cc:1a:2e:ce:92:fa:d3:22:2b:00:e5:59:8e:82:
40:d8:2d:67:89:0b:1a:04:10:66:96:eb:6e:50:55:07:61:a1:
df:19:c9:67:79:e2:a5:0d:07:f6:e7:7b:fe:83:c6:f6:09:6f:
f6:37:14:80:f2:cd:15:99:98:29:20:9f:ea:df:9e:1e:90:5a:
9b:1a:4f:4a:e0:72:7b:ab:75:84:7d:d4:49:41:36:9d:a4:18:
26:00:ac:8e:93:99:48:01:e5:6e:63:c2:b9:59:26:0d:dc:a1:
ae:cc:33:52:a7:49:fd:67:a3:44:a9:a2:02:59:eb:d8:c8:80:
4f:3c:56:74:d5:2a:fa:ba:7d:f1:a9:c2:84:f6:5d:6f:94:65:
50:ae:70:30:40:0f:03:6a:ba:a5:6e:c4:13:19:40:1a:47:1e:
fb:78:7b:31:82:dc:bd:c6:1d:d5:81:ab:2f:be:06:2c:22:82:
47:81:e6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:30:09 2025 by rpki-client