Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft
File: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft (raw, json)
Hash identifier: BJBjjbEQWD9Qx3U0FJgXPNQF8xPefTXSGSpWmGYgcww=
Subject key identifier: 71:F0:D1:C6:2F:7D:5F:06:8D:4F:B1:3E:E7:3C:7C:3D:50:79:45:2B
Authority key identifier: 03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90
Certificate issuer: /CN=A911FA99/serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890
Certificate serial: 0B24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft
Manifest number: 0B1D
Signing time: Fri 28 Mar 2025 19:24:01 +0000
Manifest this update: Fri 28 Mar 2025 19:24:00 +0000
Manifest next update: Fri 04 Apr 2025 19:24:00 +0000
Files and hashes: 1: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl (hash: +i5dwnr2eBHASVInyupmdkGi7V02+6w4HaIwye4RQdg=)
2: 730BD0EC384011EAADE7134BC4F9AE02.roa (hash: paapjxPleKLebHDMRnmQwPcu9J7d7Sr7UlJFEzedjKg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2852 (0xb24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FA99
Validity
Not Before: Mar 28 19:24:00 2025 GMT
Not After : Apr 4 19:24:00 2025 GMT
Subject: CN=67e6f751-9cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:48:e3:4a:ae:ff:bd:87:af:2c:b4:31:79:
f1:6e:e4:ef:0f:4f:66:37:fd:30:3c:ee:65:46:b4:
00:b1:11:9a:02:80:18:8c:7f:b5:a9:65:24:ae:09:
cc:49:3c:96:bb:ad:82:50:15:61:16:ba:b7:73:ce:
46:66:42:4c:81:ed:23:f1:e6:80:b5:ef:46:8d:0a:
22:9c:92:43:ab:87:e0:9e:bc:30:76:b9:5e:77:e0:
a5:c4:c0:b4:78:91:2d:a3:cb:7c:5f:8c:c8:d7:45:
22:22:99:cf:92:44:a3:fd:14:c1:7b:d2:9d:67:50:
4b:9c:b5:f2:79:60:de:46:0c:f2:c3:ba:8b:0e:57:
19:f1:a3:bc:b4:71:4a:91:ce:da:71:40:d7:ca:a3:
62:3b:20:26:a6:e0:68:b2:27:86:a2:a0:27:34:71:
e2:14:b0:ba:37:7d:c0:52:8c:d8:b0:db:97:a4:c0:
06:50:19:b6:1e:41:a6:ae:53:c5:79:86:22:f2:9e:
1c:ca:b8:41:63:59:1a:72:7d:6b:5a:f6:2e:17:fd:
02:a6:cf:f3:9e:c2:6d:a8:1b:1f:e2:6a:05:e2:2f:
6d:9e:ed:c8:15:6f:5f:88:b9:3f:71:c1:08:bc:74:
12:b2:48:47:3a:26:77:f1:c7:05:26:04:33:81:68:
5b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F0:D1:C6:2F:7D:5F:06:8D:4F:B1:3E:E7:3C:7C:3D:50:79:45:2B
X509v3 Authority Key Identifier:
keyid:03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:73:75:5c:23:ea:a2:d6:5a:16:89:ce:cd:18:6d:cc:66:f6:
0d:04:5f:8f:55:31:94:9e:08:35:01:f2:31:1b:4f:e0:42:cf:
64:5d:72:d1:4a:fb:75:e0:5b:82:f1:3c:4c:12:13:a5:64:e2:
03:97:95:4a:3f:8c:85:c5:0b:e0:2b:8a:17:51:4e:19:8d:62:
18:cc:4f:c2:68:30:a1:00:2d:38:44:2b:01:53:55:56:8f:f1:
c2:80:72:e2:de:f2:89:a9:d6:10:35:a1:76:8d:a3:8d:e9:9a:
9e:0e:72:7f:8f:8d:41:d5:8a:61:d1:3b:cf:cf:be:cd:22:09:
3f:11:1c:5c:2d:da:5d:a6:74:d4:22:cb:2c:26:ad:23:09:54:
8f:b3:9c:f4:35:d0:10:71:d9:80:af:1f:48:06:84:37:13:66:
e3:fe:81:28:55:b8:b1:06:72:e1:3e:ee:d4:2e:8e:3c:44:a9:
2e:b3:42:62:d9:c8:d4:f5:75:3e:fd:d8:01:c0:30:09:99:da:
e0:63:eb:29:6b:e8:4e:03:34:f2:0d:fa:9d:e7:1e:27:4b:db:
6d:3b:f4:3d:8a:91:9a:8d:f1:08:ba:f3:78:a9:6d:d6:f7:5b:
db:dd:bd:7e:d0:80:3f:a7:ad:e8:74:e5:5a:7f:bb:99:80:79:
03:12:c2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:28 2025 by rpki-client