Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.mft
File: WLauhcbhBzDPdWfXIqNGxJtSKqk.mft (raw, json)
Hash identifier: qB1ETO2miE+DvJKww+uFNfN/iPal3WQTY5Yc6eYrSdA=
Subject key identifier: 82:6C:92:A5:A2:3B:A4:71:9E:77:26:66:C8:4F:4B:21:1E:3E:54:28
Authority key identifier: 58:B6:AE:85:C6:E1:07:30:CF:75:67:D7:22:A3:46:C4:9B:52:2A:A9
Certificate issuer: /CN=A911CE77/serialNumber=58B6AE85C6E10730CF7567D722A346C49B522AA9
Certificate serial: 0795
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLauhcbhBzDPdWfXIqNGxJtSKqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.mft
Manifest number: 078D
Signing time: Fri 28 Mar 2025 21:34:22 +0000
Manifest this update: Fri 28 Mar 2025 21:34:22 +0000
Manifest next update: Fri 04 Apr 2025 21:34:22 +0000
Files and hashes: 1: WLauhcbhBzDPdWfXIqNGxJtSKqk.crl (hash: sIdV0RHGr5+WkgNN+OMAIcjno987fU2rSCX4jItkpvo=)
2: 0136F4540FE611EC8DD2020EC4F9AE02.roa (hash: WY35or/UWPFnJgi7e9bjldWY/rVtpdp9nvzV7837P9s=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1941 (0x795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CE77
Validity
Not Before: Mar 28 21:34:22 2025 GMT
Not After : Apr 4 21:34:22 2025 GMT
Subject: CN=67e715de-8576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:67:39:43:da:fd:9a:72:d1:9b:a7:b3:54:e8:
d1:ea:67:52:ca:db:e5:4b:ac:46:81:14:e7:ec:e8:
a1:3a:1c:b5:e7:93:01:40:1f:cc:86:76:af:47:a8:
bc:f1:c9:47:fb:15:64:f4:5c:fd:77:1f:38:e1:ce:
4f:f4:01:3a:92:c8:c1:70:60:e4:d0:c0:47:37:b5:
09:7c:22:1c:7b:0b:2f:83:0e:9b:19:f1:de:77:e5:
99:fb:e7:ef:c3:fe:f2:ea:c8:0c:c6:87:a4:11:8e:
de:f2:47:16:1e:8e:5c:eb:ea:0a:ee:f5:fe:97:60:
2c:c1:38:d4:f4:39:a9:48:1e:7f:fb:eb:fa:49:56:
ce:74:b1:6f:30:ed:97:bb:ac:db:04:cd:46:a7:f2:
af:06:a1:31:7a:a2:ce:78:d7:5f:09:0b:6f:e8:5f:
4a:a9:4a:bb:cd:6d:1e:8e:81:7a:10:1a:b6:07:a6:
36:92:71:74:b6:72:30:0a:a9:90:2f:36:44:28:44:
5a:06:83:51:03:b7:22:25:a2:70:5f:1b:a9:5a:36:
1a:87:a4:97:a2:0b:ba:8f:ba:35:b1:49:d1:78:b3:
4b:d8:f8:a8:1e:d3:46:87:95:3e:00:0e:ed:13:0b:
7d:ee:11:e8:d3:42:ea:7a:2d:52:01:41:b9:60:51:
00:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6C:92:A5:A2:3B:A4:71:9E:77:26:66:C8:4F:4B:21:1E:3E:54:28
X509v3 Authority Key Identifier:
keyid:58:B6:AE:85:C6:E1:07:30:CF:75:67:D7:22:A3:46:C4:9B:52:2A:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLauhcbhBzDPdWfXIqNGxJtSKqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d7:01:8f:0d:16:94:40:86:9d:4a:2d:9b:1f:59:3c:2d:ee:
4c:25:93:03:56:7e:85:b3:34:a7:eb:a9:af:af:d6:c2:2e:3b:
e5:94:1c:e9:9f:a4:6a:61:18:1b:f9:52:c7:52:01:1d:5e:a6:
40:a5:24:31:cb:1a:e7:48:d6:7c:4d:d6:a8:ab:62:6a:c3:60:
9d:c9:b3:55:77:19:41:b1:81:66:f8:fc:19:26:5a:63:ed:20:
c0:e5:e6:fb:64:c4:5d:d9:21:07:81:33:16:76:63:67:0d:08:
84:76:7e:b4:2c:c2:81:26:c1:1f:e7:60:a5:2f:73:22:96:cf:
df:cb:ac:07:bb:5f:04:35:25:5a:45:16:a9:ad:52:f9:03:bc:
30:d9:e7:03:f8:9a:df:11:a7:ce:af:cf:22:c0:56:e5:5a:33:
5d:7b:80:b5:4b:a2:4d:f9:c6:59:92:2e:19:d8:e9:74:df:19:
36:81:ef:78:68:c9:f8:bc:b2:79:8c:58:3d:a9:ab:b2:dc:9c:
b2:2b:a7:5e:ea:16:4d:ee:d2:0f:4e:af:ac:de:7f:10:6b:bd:
0b:d3:94:fd:ba:12:c1:19:83:71:ae:ea:4d:ca:0c:92:9a:90:
5e:2d:81:48:c9:2c:25:2b:1d:87:94:24:b7:67:7b:8c:a0:d0:
c6:7f:17:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:42 2025 by rpki-client