Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft
File: NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft (raw, json)
Hash identifier: 8hFIiJmuhLDbcSsf2nHaOtIANu2bncur2fyIao5Av6Y=
Subject key identifier: B6:A8:BE:DA:6C:07:91:9A:8E:35:36:09:88:AB:F5:00:73:03:81:CD
Authority key identifier: 36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E
Certificate issuer: /CN=A912677F/serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E
Certificate serial: 0A45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft
Manifest number: 0A3E
Signing time: Fri 28 Mar 2025 19:56:27 +0000
Manifest this update: Fri 28 Mar 2025 19:56:26 +0000
Manifest next update: Fri 04 Apr 2025 19:56:26 +0000
Files and hashes: 1: NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl (hash: YqUO5L1/ud+aGfp6OKdqWKoP2V6+Cn/fSw0xs+oTPWI=)
2: B82FA738111C11EBB805F52AC4F9AE02.roa (hash: EJ4VnRATjOO9ERUrQeU1qxPXlhkEMnZWEHJLCS7gQyQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2629 (0xa45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912677F
Validity
Not Before: Mar 28 19:56:26 2025 GMT
Not After : Apr 4 19:56:26 2025 GMT
Subject: CN=67e6feea-e3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c7:9a:30:b8:95:34:77:43:b8:40:c4:92:46:
b1:6f:b3:d1:32:63:a5:0e:3c:5c:3d:dd:a6:60:52:
f2:92:de:8a:db:c4:aa:96:f4:d2:5c:eb:8e:3f:e2:
36:c4:4b:a5:21:5c:67:46:b8:24:4a:96:d2:73:e5:
88:e2:33:4a:41:d2:81:e2:a6:37:df:43:84:55:4d:
46:95:41:d0:1f:de:92:32:4b:bd:de:ad:b7:4a:0a:
c7:41:68:fd:39:9d:ea:99:5e:08:50:33:16:e1:52:
ef:a2:6b:5c:b8:34:e0:25:36:02:07:7a:63:19:48:
c7:c4:65:73:48:22:57:7f:67:44:a8:17:86:56:42:
e3:94:d7:3c:bb:17:d8:31:8c:60:d2:00:a5:bb:bc:
2b:d9:f0:f5:2f:ea:05:e8:f7:29:f3:84:98:00:fb:
42:a2:13:2a:9f:c5:0b:70:ea:f5:23:8c:26:b8:c8:
28:58:93:8e:60:33:b8:c3:fa:25:36:89:61:59:59:
73:2f:4e:9c:b4:0d:06:1b:a6:c4:1e:a6:95:91:06:
28:4a:36:56:41:59:92:ef:fc:8b:ad:0a:10:20:7c:
fa:dd:d3:58:a9:53:d4:61:ae:ff:50:5d:04:62:3c:
e9:9d:0b:84:cc:61:cd:1a:b0:ad:3f:87:83:02:ad:
77:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A8:BE:DA:6C:07:91:9A:8E:35:36:09:88:AB:F5:00:73:03:81:CD
X509v3 Authority Key Identifier:
keyid:36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cb:db:74:01:9a:6f:44:0d:1d:80:15:d1:98:9d:b9:b9:6a:
30:72:4a:af:12:4f:5c:db:70:db:9a:43:b2:7e:29:8e:96:d1:
38:23:86:63:e8:bc:c4:eb:ae:72:0a:51:16:50:b1:0f:10:ae:
a9:c1:31:a9:32:78:59:4c:4a:18:f4:56:98:50:e0:39:5b:c6:
64:d9:15:fa:0e:75:fd:4b:1d:33:bc:b4:fc:9f:f9:1a:57:d6:
40:73:90:80:6a:8f:93:76:25:0a:9d:88:63:9e:4c:23:5a:65:
04:6b:e3:7b:04:fc:56:28:82:f8:57:79:74:2e:de:13:d9:97:
00:3d:5e:4a:5a:04:d1:42:1d:f4:8d:e0:dd:fa:b2:19:5c:af:
15:a8:86:b3:09:3c:71:53:00:9d:60:36:9d:ff:a5:14:d4:be:
20:7f:98:7a:ba:18:f1:1c:2f:99:55:cb:10:ff:25:2d:78:2c:
1c:a9:4f:e9:c5:c7:47:c3:41:ac:09:90:79:b5:e5:2a:07:c4:
a7:e0:8f:21:11:f9:fb:4f:c9:c6:a9:7c:41:31:db:c4:84:67:
5f:73:6a:20:70:5c:9b:bb:a4:6b:4d:11:4b:8c:3e:2f:80:ec:
60:dd:a8:a1:d1:47:a2:4e:31:1d:07:16:d2:5f:d3:81:98:bd:
3f:a4:77:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:26:55 2025 by rpki-client