Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
File: d2KqgncCDQu1x1mX3l99ilFC3xQ.mft (raw, json)
Hash identifier: IN1xnROQB3mvtJ6FSWMc8ijJIzpuu92oDDoqZ83QBkg=
Subject key identifier: 3E:D3:13:10:AB:14:6E:CA:AD:24:71:7B:91:CE:DB:67:1D:4F:C8:71
Authority key identifier: 77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14
Certificate issuer: /CN=A911FAC3/serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14
Certificate serial: 1374
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
Manifest number: 135E
Signing time: Fri 28 Mar 2025 17:07:11 +0000
Manifest this update: Fri 28 Mar 2025 17:07:10 +0000
Manifest next update: Fri 04 Apr 2025 17:07:10 +0000
Files and hashes: 1: d2KqgncCDQu1x1mX3l99ilFC3xQ.crl (hash: 9M+zOi45b+FlNql/vB4ivRYyAYWAhitWa0M4MZ/ZLak=)
2: 4338FC5CFB5611EBB7032080C4F9AE02.roa (hash: jXq2yfYI+6Vq13ZwndDj/+d34MA8vN7mKixhRF47lwg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4980 (0x1374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FAC3
Validity
Not Before: Mar 28 17:07:10 2025 GMT
Not After : Apr 4 17:07:10 2025 GMT
Subject: CN=67e6d73f-e6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0b:24:91:d4:33:85:96:f0:b5:a0:95:a7:ee:
49:74:85:d7:d7:8d:c3:cd:e4:92:f8:32:80:58:76:
13:35:c7:ea:79:ad:94:e9:0c:41:b2:56:fa:a3:ed:
99:01:06:63:1d:2b:82:7e:3b:be:50:f9:44:8c:df:
bb:a0:39:a0:7c:95:6e:67:77:5f:79:e8:31:6e:6e:
e7:10:4c:f4:52:6a:82:bc:80:83:b1:11:5a:c2:e7:
6f:82:24:88:5a:c3:79:fc:bd:60:0f:65:7d:6d:2f:
70:9b:21:10:fc:4c:bd:5b:10:c3:47:a9:ea:49:ec:
d7:54:09:3c:0f:bd:a9:2a:ba:80:df:a7:77:9c:e8:
db:86:7a:03:b4:09:5e:7f:16:7c:85:55:33:87:e0:
05:50:1b:41:d8:e4:68:d7:77:e4:7a:bd:fb:32:fb:
06:26:f7:b3:36:86:47:2d:ba:2c:01:4a:5a:12:8a:
57:b8:4a:b7:72:b7:74:6c:b0:41:5d:ee:5d:0a:d0:
f0:f8:82:c8:7f:ab:45:41:e6:db:95:5d:31:a2:30:
02:7e:06:73:a7:df:48:9d:61:a0:b9:4c:79:31:84:
25:be:10:f0:98:27:35:16:f5:6b:90:49:e8:09:06:
e2:c0:00:e5:bc:81:53:49:7d:20:ca:f0:67:ee:7b:
91:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D3:13:10:AB:14:6E:CA:AD:24:71:7B:91:CE:DB:67:1D:4F:C8:71
X509v3 Authority Key Identifier:
keyid:77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5f:cc:02:41:9d:38:db:b8:cd:aa:95:f8:91:da:7e:89:84:
c1:26:27:85:e7:3c:85:c3:c1:40:4b:1e:c2:28:35:34:d2:ba:
3b:1d:bf:1e:2e:3e:d0:1c:04:63:f6:cb:f5:77:7d:30:1d:c9:
a0:a8:b2:0e:0f:57:9b:b3:39:01:ca:5d:d8:85:78:77:94:bb:
da:c6:d6:79:75:7f:93:13:c5:33:92:b1:47:e5:58:6a:3f:e9:
dd:50:ff:15:e8:d7:fe:88:bf:ca:91:b0:42:05:ce:37:3b:ac:
77:3a:3e:e4:8b:be:d6:3c:2a:7d:90:47:7c:83:8e:44:fe:64:
ad:28:4f:22:e8:29:84:6e:91:c8:45:47:9f:da:8e:0d:fc:46:
78:17:e8:62:89:cb:43:80:2b:3f:4e:ec:0a:3d:84:1a:9a:1c:
31:a6:17:ac:bb:74:84:aa:a0:7c:5b:ec:c0:9a:43:b2:63:bf:
6d:3c:29:9f:30:3d:60:77:3e:14:70:42:c7:44:7c:83:76:b3:
1e:69:ef:36:0b:5f:e3:1e:c6:94:52:48:0a:2a:3b:d7:ac:b6:
ea:46:5d:70:8d:b1:9f:3e:28:f6:b2:a6:c0:ff:da:66:72:e2:
e9:af:cf:bf:74:fb:82:8e:3d:b2:d5:fe:4b:73:78:f4:14:87:
44:68:40:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:21 2025 by rpki-client