Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
File: vRTPGp8I9oE3_oEWzXdq29sv77Q.mft (raw, json)
Hash identifier: 0n/KBu0FmedhfaOnI/THkyf+3xlrL6aVfkWtY6QATZ8=
Subject key identifier: 85:B9:AD:B4:A7:83:FA:32:0E:B8:BF:6F:6A:99:9D:2E:BF:2A:70:FB
Authority key identifier: BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4
Certificate issuer: /CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
Certificate serial: 03B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
Manifest number: 0FEC
Signing time: Fri 28 Mar 2025 18:34:10 +0000
Manifest this update: Fri 28 Mar 2025 18:34:09 +0000
Manifest next update: Fri 04 Apr 2025 18:34:09 +0000
Files and hashes: 1: vRTPGp8I9oE3_oEWzXdq29sv77Q.crl (hash: riLno3DQcL3b3eoZvVffpk4cYMPxsP4UlfGT89gG4e4=)
2: D5DBA6BC63ED11ED851C647DC4F9AE02.roa (hash: Cu7mP4ScFcEgh99akamYEaBRClwxLE+oM+a0PvnQM0M=)
3: 5277F6368D2411EC816B4C70C4F9AE02.roa (hash: jmM2MyWVgkGoSl8m7eT/QohnLLhAgCt5V5ifbC8tFnE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 950 (0x3b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119A40
Validity
Not Before: Mar 28 18:34:09 2025 GMT
Not After : Apr 4 18:34:09 2025 GMT
Subject: CN=67e6eba1-de45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:7f:41:a5:04:4e:f6:3a:af:6b:43:94:fa:
71:3a:b0:b9:56:70:15:4d:79:8f:db:c9:82:70:2e:
f0:16:72:a8:93:6f:2b:83:de:a7:47:81:7d:26:33:
66:2a:64:52:7b:04:f7:66:95:72:c8:7d:5c:7c:8a:
07:a3:66:e3:8f:95:00:aa:f3:ca:f9:46:cf:84:b0:
76:da:37:94:a7:40:8a:65:2b:22:9c:95:07:01:94:
c6:2a:d8:fe:f5:b1:48:e8:14:21:07:63:54:9c:9c:
01:2c:d3:d8:9f:d0:ef:7e:18:b3:f1:53:bb:0c:53:
a1:f6:33:b2:f3:b5:11:59:fd:fe:86:c4:f0:c0:9d:
1a:f9:55:92:89:7e:c3:8c:c7:aa:17:ee:01:80:d8:
58:eb:a3:74:f9:ee:33:91:04:e9:d5:02:e7:b7:79:
68:73:83:0b:1c:75:f3:fe:d9:cb:ac:1f:fe:23:f0:
b1:fb:30:15:db:67:9e:9a:93:f0:3e:81:6e:af:d5:
b5:9a:d9:83:70:6e:03:11:39:6c:14:a6:ac:aa:2a:
0f:09:a2:fb:7a:e3:2f:9d:33:e8:35:d4:aa:f3:c2:
21:45:34:8e:ca:20:f4:d5:3b:43:e3:22:b6:23:2d:
67:79:0f:27:a3:c0:4f:74:e7:0b:84:97:ec:38:5d:
a0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B9:AD:B4:A7:83:FA:32:0E:B8:BF:6F:6A:99:9D:2E:BF:2A:70:FB
X509v3 Authority Key Identifier:
keyid:BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:5f:08:ae:cc:ce:e3:2d:0f:db:63:80:6c:52:16:02:df:1d:
dc:8e:88:3f:48:d3:87:ae:b2:0d:8f:d2:b2:a2:e4:1c:72:21:
d1:0f:3f:90:9e:74:00:23:8e:41:85:88:fb:9e:b1:3e:b9:f9:
6c:1f:4f:9e:8f:6c:d1:0b:d1:8b:52:cf:66:a3:57:60:74:60:
70:91:23:2b:7b:ea:20:8d:82:21:fc:13:bd:e0:76:b2:64:36:
ff:0c:3c:11:07:5f:92:76:4e:c7:4b:da:47:19:45:44:71:c0:
4d:1a:4d:e1:44:45:62:c1:ae:b1:5d:4b:ae:30:8c:8e:8a:79:
63:38:83:d9:2b:45:40:92:96:bd:6a:a9:25:b8:40:e9:f7:77:
ec:c6:88:46:35:8f:d2:66:e1:1a:50:fd:11:53:d1:64:f9:44:
12:18:0f:a3:32:10:2e:0e:14:5e:83:f3:be:01:66:83:30:76:
a6:00:7c:1b:80:c3:1a:22:58:7a:95:c6:64:11:9f:12:c5:96:
4e:2b:70:e9:cc:ae:76:ee:a4:4a:e0:d4:3e:80:18:43:24:e7:
14:6d:cb:5b:ae:88:4c:72:19:22:e0:40:c8:c9:63:b0:76:17:
e8:8f:cc:87:5b:4b:d6:78:b0:8c:a3:5e:56:43:80:fc:14:4a:
86:b8:b4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:33 2025 by rpki-client