Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
File: U78N14DbA47OFNQEWbq5xo9phTs.mft (raw, json)
Hash identifier: z/sxxAPwD0qihMiCWTvOqyuUfilOi6iEmjz8TZnQNHI=
Subject key identifier: E2:00:44:48:57:A7:0B:EC:BB:0E:BE:0E:E2:DC:AE:55:F5:7E:36:7C
Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Certificate serial: 2211
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
Manifest number: 21D1
Signing time: Fri 28 Mar 2025 15:58:47 +0000
Manifest this update: Fri 28 Mar 2025 15:58:46 +0000
Manifest next update: Fri 04 Apr 2025 15:58:46 +0000
Files and hashes: 1: U78N14DbA47OFNQEWbq5xo9phTs.crl (hash: k9t93b9FmAx8wxxjxteRPn+q4H9hqlmkjwBzOvWGnWU=)
2: 3EEE50E6A36B11EF9E46987EC4F9AE02.roa (hash: f7G+JecOso1tq/2DrQIIrvlSbJcZUWeFUA+OwYgWNPo=)
3: B937CBBA6DD411EF977CA52AC4F9AE02.roa (hash: DNPEZoiqquqZXGfdK28t7zQLFNY8ea/+gAa4O/ZRs1s=)
4: E6EA5626B3A311EF9D9F7429C4F9AE02.roa (hash: 5MZ9veHGyaXeOyXtrCjxvwY/A+cD12Cktg7B3S+6l+A=)
5: 235019148A3911EF864D8512C4F9AE02.roa (hash: hnfY3HHIXsd6wmd3BY/eNxymbtFAwmDiWZ9khlttIH8=)
6: FD2941A0BBC311EEBE58430EC4F9AE02.roa (hash: X2aoTMKWDO3O+NQTnXw87sQERWlGRf5FlK95mjGB8r4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8721 (0x2211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FCD6
Validity
Not Before: Mar 28 15:58:46 2025 GMT
Not After : Apr 4 15:58:46 2025 GMT
Subject: CN=67e6c737-1cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:a5:da:bf:08:ea:30:40:89:f6:6c:c7:05:
ea:1c:4e:39:9b:84:c9:3b:29:d0:b7:54:c5:f2:be:
b6:84:39:39:36:34:75:00:01:e9:c9:06:f1:e6:44:
9a:d5:b5:4c:23:ee:06:62:fc:95:3f:15:f3:dd:8f:
a8:37:6f:0a:e8:3e:5c:c6:04:36:36:02:10:2f:76:
2e:94:83:e1:8d:66:74:46:27:6d:e5:7d:91:97:1b:
53:e9:e1:a3:b8:6c:7b:02:60:c5:71:cd:3e:c4:95:
dc:7a:ce:74:d3:3c:c2:79:60:01:ab:e2:0e:81:36:
8c:ad:03:45:80:3a:f4:f5:1d:d5:ab:b2:b0:69:c3:
e2:3d:c4:28:24:dd:cf:e3:7d:04:3e:bf:51:84:2f:
73:9d:ef:3d:f2:a3:91:11:0f:89:ba:fb:1a:1c:f8:
dd:6f:95:96:36:f7:1c:37:b9:a1:fe:55:8d:3a:e2:
46:f1:72:0d:f4:85:3f:ba:1d:7e:6c:3f:2c:72:b4:
f0:62:fd:37:ff:c8:28:ab:9d:66:4a:1e:40:63:8a:
bf:d6:40:f8:9e:bc:02:f3:ec:ea:96:0c:ac:0a:f0:
02:54:f2:40:26:77:27:e1:54:c4:0d:34:36:d8:5d:
fe:c5:b6:28:b1:da:b0:27:3b:ed:f1:64:d4:e8:15:
dc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:00:44:48:57:A7:0B:EC:BB:0E:BE:0E:E2:DC:AE:55:F5:7E:36:7C
X509v3 Authority Key Identifier:
keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:49:91:18:71:67:ec:97:48:c2:83:d3:93:f9:25:1d:af:ae:
06:fd:4e:0c:32:6f:23:fb:2b:e4:d0:63:ee:2c:b0:67:58:4e:
df:a5:3f:01:ed:d9:66:0b:79:f1:23:1c:19:09:b7:aa:ec:73:
09:74:ca:b8:de:50:ac:0f:1e:c2:15:9b:37:8a:d6:c8:1b:0b:
5a:fb:26:ae:9d:6a:61:25:7a:02:95:1e:6a:db:89:ca:71:e4:
97:f2:dd:ae:b5:46:ef:56:35:ed:c3:d4:fa:c1:0c:f6:8c:0b:
2b:81:80:77:7e:cd:26:fa:6a:89:c2:26:6c:e8:18:a0:fc:fc:
e2:0b:13:5e:03:54:28:35:d5:49:7d:40:aa:bf:b7:a9:41:ce:
8a:01:55:2a:b4:aa:b2:ed:a8:07:86:55:30:aa:f4:56:0e:22:
66:e4:37:86:fa:02:eb:c0:12:2f:38:ee:66:10:07:b2:f4:f5:
f9:30:2a:2f:63:e2:db:43:b1:80:9f:a7:0e:36:09:f8:32:90:
63:7e:42:79:45:72:4b:f7:f1:de:ba:e9:6c:38:39:21:18:db:
c7:71:4b:7d:0a:c8:d6:45:cd:11:41:f8:e1:54:b3:2b:25:c3:
0c:1d:0b:05:0d:e3:2d:d3:38:8c:ed:7f:32:fd:71:19:87:e4:
01:54:19:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:12 2025 by rpki-client