Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft
File: D60b00YYTHGSfILGHT-m1-Ry7p4.mft (raw, json)
Hash identifier: XAd/cDRwsq8F/0IwpvaiOtsYtAfrSLI1/34nIcL3Lck=
Subject key identifier: A6:96:39:90:95:C1:F8:36:66:93:31:CC:4B:37:24:21:04:75:D5:3A
Authority key identifier: 0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E
Certificate issuer: /CN=A912A455/serialNumber=0FAD1BD346184C71927C82C61D3FA6D7E472EE9E
Certificate serial: 08B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft
Manifest number: 08AE
Signing time: Fri 28 Mar 2025 20:47:49 +0000
Manifest this update: Fri 28 Mar 2025 20:47:49 +0000
Manifest next update: Fri 04 Apr 2025 20:47:49 +0000
Files and hashes: 1: D60b00YYTHGSfILGHT-m1-Ry7p4.crl (hash: scoX4NFkJLfD3EXATF41qSZjAMsPWSHAzlOWO746Pa8=)
2: E57312C6F59611EFAAD00555C4F9AE02.roa (hash: EmtXDOBjG/CTXXgvoV50JSRMSQiLY5QLi6KhGxpJhT4=)
3: BED97520B1D911EA912C632EC4F9AE02.roa (hash: RzLAz49uNYEbzjghLROSt26QTaPjJAMTg8PAlAw1ytU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2230 (0x8b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A455
Validity
Not Before: Mar 28 20:47:49 2025 GMT
Not After : Apr 4 20:47:49 2025 GMT
Subject: CN=67e70af5-8122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:7d:eb:38:44:97:5d:96:b4:94:0b:37:82:
0c:25:ad:fc:c9:79:92:78:d0:fa:32:10:6b:26:2e:
24:45:f4:83:d0:90:84:aa:11:74:65:ab:1a:82:11:
7b:87:09:68:46:ba:38:cc:8d:19:a2:c6:d6:ce:d3:
fa:2e:b7:7a:69:fa:82:71:96:1c:47:74:a1:14:a7:
a6:9c:21:36:e0:92:db:92:07:8b:da:91:98:b1:87:
5d:7c:a0:ab:16:f0:43:f4:22:cc:13:05:3f:8b:bc:
5c:08:4a:ba:c3:a5:36:58:1e:e0:09:c3:52:0f:a6:
98:a5:75:64:80:6b:bf:59:b7:37:42:cb:08:89:aa:
64:00:3c:d1:40:b0:30:46:ec:ca:6d:96:57:1b:bb:
9e:b6:72:4f:e2:22:f3:da:8d:55:dc:27:51:2a:2e:
5e:6b:58:e1:06:8b:a4:8a:66:5d:40:31:2c:44:28:
a2:87:ad:2d:3d:e5:22:e7:88:e0:a2:c9:79:d8:33:
6e:d4:f6:4b:21:5a:61:39:71:18:2d:6b:f1:40:0a:
6b:f6:a1:21:fe:a8:3d:ae:f9:f3:43:f9:4b:1a:10:
b6:db:95:9c:35:cc:1a:e9:52:33:3d:b7:00:6d:44:
69:4b:09:46:84:fa:50:7a:87:85:34:a7:a9:26:e0:
23:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:96:39:90:95:C1:F8:36:66:93:31:CC:4B:37:24:21:04:75:D5:3A
X509v3 Authority Key Identifier:
keyid:0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6d:0e:b8:0b:e9:7e:15:5a:51:74:a7:6a:e2:8d:41:90:d7:
9d:cb:e1:9b:69:97:d4:c0:e1:2f:4c:f5:84:b9:a1:dc:56:bd:
d0:ce:32:4d:5e:03:40:10:f6:8b:65:76:dc:a8:11:2f:d6:1d:
bc:50:03:29:99:a6:7e:e8:29:a7:a7:12:7f:fe:37:62:71:a4:
7b:6c:0c:d5:8b:7b:2e:86:4f:70:40:8e:77:c6:1c:2f:90:6a:
32:61:19:0f:47:e5:59:2d:57:99:c1:b2:7a:b5:fc:1d:97:c3:
81:b0:9e:74:85:46:99:00:26:12:06:95:b3:cb:e6:7c:7b:df:
01:bb:8a:31:f7:b2:e1:1a:25:6c:98:7f:b5:af:de:ad:9f:cc:
d2:5d:56:f4:b0:9b:2e:df:4b:9c:64:d4:60:13:36:a7:51:b2:
4b:91:cd:a8:82:dd:ee:1f:5a:31:05:84:d3:5e:4b:06:f5:98:
65:9e:a0:24:c4:43:00:04:f5:89:be:aa:06:92:77:c5:2c:e9:
6b:e2:ed:1c:98:81:33:95:38:a2:49:50:f9:e5:c0:1c:8e:6d:
ec:84:4e:fd:5a:bc:55:f6:35:ea:bd:2f:72:15:9f:82:32:54:
6f:a8:6d:50:f9:d7:3f:df:75:97:9a:45:ab:e1:75:da:81:f4:
07:bf:71:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:34 2025 by rpki-client