Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
File: rtuffjhfpkQ204S8t7kuCUaVVDM.mft (raw, json)
Hash identifier: wvrAfux22oek9O2bYK+DAvP9SbexDO9L6iBnon5QvCY=
Subject key identifier: 38:4B:CF:9A:D5:31:08:8D:69:A2:C2:EE:9E:15:B9:E2:7D:BB:62:BF
Authority key identifier: AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33
Certificate issuer: /CN=A911424D/serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
Certificate serial: 0ECB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
Manifest number: 0EC3
Signing time: Fri 28 Mar 2025 17:47:25 +0000
Manifest this update: Fri 28 Mar 2025 17:47:25 +0000
Manifest next update: Fri 04 Apr 2025 17:47:25 +0000
Files and hashes: 1: rtuffjhfpkQ204S8t7kuCUaVVDM.crl (hash: H85J/k9JnrykZbzu4RknSbMt3jkaWYNdn7hIxFiLVNs=)
2: 87625FC0812011E9890A4533C4F9AE02.roa (hash: +5h350Entxop10VDTkTCS9JuaJOuqYNRDCA3VkMIaEo=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3787 (0xecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911424D
Validity
Not Before: Mar 28 17:47:25 2025 GMT
Not After : Apr 4 17:47:25 2025 GMT
Subject: CN=67e6e0ad-3723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d9:48:69:8b:bc:4a:75:d8:b5:d6:c4:ad:8d:
ef:6d:05:e6:60:a9:49:b6:dc:ee:0a:f6:fb:3a:8d:
06:6f:49:d4:e8:71:76:84:06:e9:de:26:4a:17:50:
26:e8:a4:d4:7a:f8:e5:bb:28:43:34:96:f5:cf:44:
81:1e:5f:5a:83:b1:c2:b5:c4:c1:31:8c:44:d2:7b:
6f:f0:e0:74:3f:f5:00:03:2f:d5:00:bd:e4:b1:fe:
ac:f0:86:2f:be:2c:ab:6e:5a:cb:c0:0d:3a:56:d6:
87:88:19:22:bd:cd:78:95:a2:a7:d8:01:05:69:29:
1b:f7:20:d5:ca:0f:4d:85:37:8d:da:b7:a2:a1:97:
1f:f7:a7:01:4a:40:3b:d3:1b:62:23:a6:19:5d:47:
b6:27:a8:d2:79:9e:e5:8d:24:c9:c3:e9:bb:f9:9b:
20:71:c1:b2:83:fa:d7:72:88:d8:e0:18:5e:70:75:
46:c1:26:46:56:6c:52:0e:df:0c:5b:a9:6b:24:99:
9e:17:61:24:ae:6d:ab:77:04:c4:4e:28:40:51:4f:
b7:d4:9e:aa:5f:69:c2:83:7e:fd:3a:06:fd:8a:27:
a7:3a:8c:dc:f2:a4:1e:7e:35:3e:4e:71:0f:da:89:
8f:2e:f8:bf:2e:0c:88:e8:61:a3:0c:04:06:82:a9:
f7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4B:CF:9A:D5:31:08:8D:69:A2:C2:EE:9E:15:B9:E2:7D:BB:62:BF
X509v3 Authority Key Identifier:
keyid:AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:af:12:38:f3:82:8d:d8:63:08:2d:03:d6:cd:7a:59:d8:16:
87:05:88:2b:a3:b4:e2:6c:60:03:9a:80:cb:fe:9c:14:83:59:
7f:53:35:7e:cc:8f:24:7c:2a:a1:f7:02:54:1d:a3:31:3d:af:
04:88:d4:9a:01:30:81:e3:3e:31:4c:c3:16:f9:7c:5a:cc:45:
da:ec:0f:41:62:74:2c:9a:ab:aa:d9:31:9a:4f:12:56:46:f3:
ca:63:a7:ea:74:16:f4:7f:e6:07:ea:ae:0e:79:90:d7:9b:7e:
bc:7f:ab:f9:2d:29:12:e2:79:7a:69:49:8f:3a:f7:af:9c:d4:
4d:d6:73:6a:99:01:06:02:cd:b5:38:01:e4:5e:78:bf:fa:9b:
75:24:75:d0:ee:49:83:80:a7:1b:c3:ed:8e:47:ed:40:c4:4c:
51:d6:b7:9d:a7:82:1d:ec:f7:38:67:44:0f:c2:ed:2d:f3:79:
b3:98:fc:6d:6f:06:19:b8:33:a9:7a:d0:4d:fe:80:37:df:41:
32:c5:93:19:a8:5c:a1:19:da:35:4f:82:e0:8e:33:fb:3d:1f:
69:df:9b:6e:fd:9f:d9:bc:3c:84:5f:2c:42:b4:9a:c4:ba:e8:
3c:01:f9:aa:3d:21:17:e0:a3:7e:55:12:c9:6f:f8:b1:bc:c4:
29:54:b7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:27:36 2025 by rpki-client