Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
File: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft (raw, json)
Hash identifier: ZVk9S9YdqMCNs3xLOwKpw8fIdsdRcsNUYPpSdawIeck=
Subject key identifier: 83:42:BA:6C:5D:0A:B8:75:D8:3C:AB:8D:AF:B1:8E:59:C0:A7:B4:2D
Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Certificate serial: 0D33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
Manifest number: 0CFC
Signing time: Fri 28 Mar 2025 18:17:37 +0000
Manifest this update: Fri 28 Mar 2025 18:17:36 +0000
Manifest next update: Fri 04 Apr 2025 18:17:36 +0000
Files and hashes: 1: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl (hash: RBnHFJGQF/kUE7mnxrb0JVuCoAaxgra+3JNwSO0xvGY=)
2: 938E408897E011EB8870DB29C4F9AE02.roa (hash: AvnHda6N9uSW4caKdT/1qliaFxGzoCjsBnC7c0M2BTI=)
3: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (hash: +NoTiVoOFpuwdO/IMcCankOcyEeq0d7jzR0LbMB2Mow=)
4: 5614ADF6C2D811EF873CE458C4F9AE02.roa (hash: Je3Z35nzgEvUslXJ4oraJDaijtfqayvpURpYN7cdlFs=)
5: 5B4A8D6EC37C11EF91554967C4F9AE02.roa (hash: DyFZphDj+xYQOQuO59LnOvFtMeJz8Mp/8a6Sd7JeRP8=)
6: 27F7A40AE4FD11E990830B62C4F9AE02.roa (hash: 0CwL/9pIHvX1NQjOju2K8M/8kw+TsmpQ+hJ5ObtVylo=)
7: F68834A47B9811EC94EE077EC4F9AE02.roa (hash: OONv2D6RWPurGG09FFRuE2GGRS9SUWjqXoDwbtFmxSw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3379 (0xd33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DC44
Validity
Not Before: Mar 28 18:17:36 2025 GMT
Not After : Apr 4 18:17:36 2025 GMT
Subject: CN=67e6e7c1-41f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:73:93:96:f7:97:ee:fc:47:f5:a6:65:73:
44:7c:d8:1f:f8:cc:44:01:fe:74:77:5a:7b:36:bd:
7e:37:1b:c5:e4:11:71:25:45:a1:d9:e6:a6:01:b1:
e0:0a:80:1d:56:08:23:16:80:51:77:c3:6a:72:ab:
91:b2:2b:fc:51:ed:07:30:86:77:23:11:f2:70:d1:
4e:dc:d4:18:b9:e0:b6:82:30:3a:c7:fb:88:c7:57:
b3:14:d4:e9:4c:ab:08:f6:e2:b9:b0:80:ea:d2:f9:
90:ca:ab:dd:78:2e:b1:45:81:2e:46:b1:91:9a:ec:
50:57:33:6a:7c:64:51:be:93:e3:1e:a8:74:8c:00:
c1:41:e9:ee:ce:af:45:9e:7b:cf:76:e9:ba:8e:81:
9d:6a:b5:4f:1b:93:36:3f:93:cc:17:a5:7d:a9:02:
83:e0:7e:91:11:a4:62:80:12:6e:95:14:6a:bf:a3:
53:ba:29:16:cd:18:97:9b:b8:88:76:89:43:b9:50:
c5:0a:0e:4c:81:f2:b8:e2:a2:b8:af:6b:7b:f4:0d:
70:f9:e5:cb:20:63:97:85:1c:10:8a:97:f9:b5:50:
80:50:7a:50:06:66:e0:30:2e:9f:c8:cc:22:4b:76:
35:2b:f7:bf:a1:0c:9b:fe:f5:e0:13:d5:db:d3:d3:
27:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:42:BA:6C:5D:0A:B8:75:D8:3C:AB:8D:AF:B1:8E:59:C0:A7:B4:2D
X509v3 Authority Key Identifier:
keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:be:c3:35:3c:d4:b6:d6:de:32:cd:c4:a0:5c:89:5f:a0:71:
23:c1:32:2b:04:a5:ea:d2:02:e2:ae:f8:94:0d:36:13:c5:fa:
8d:2d:f7:ae:76:c0:5d:4b:ab:4c:f1:92:d8:e1:d8:c5:34:a4:
15:50:d7:13:19:94:4e:4c:c2:1d:56:64:92:55:7f:8c:b9:1a:
65:c2:31:c5:9e:97:a2:05:02:4c:f0:20:dc:25:72:5e:4d:86:
6b:0a:96:b3:d4:15:c4:4b:03:76:9c:64:7e:81:47:cb:cd:4b:
b2:02:74:96:bc:7e:40:9e:c7:7e:9f:06:63:20:81:0a:b1:c6:
19:af:97:e9:e1:58:aa:a3:7f:d7:4e:72:86:23:a1:ba:e9:39:
1a:19:28:f3:16:34:05:ee:4f:72:58:0e:2c:b6:0f:d3:34:0e:
2e:da:31:8e:31:85:6c:49:97:7a:e6:f6:2e:77:73:b2:f5:2a:
e0:d3:ce:cd:f8:49:a3:57:1b:fa:8f:b6:2c:b7:01:db:17:53:
7d:90:0e:58:2a:e0:b2:1f:b7:f7:5f:a2:5f:99:ca:2b:99:17:
79:75:14:5b:ff:67:81:51:65:25:58:36:63:30:ae:3c:e5:6b:
67:31:25:60:1d:fd:ca:c9:e1:88:9e:31:3f:f9:cb:e3:3e:0a:
db:16:76:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:43 2025 by rpki-client