Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
File: mFJq8YqDozT1eZgqMXm23R6X3i4.mft (raw, json)
Hash identifier: 4sepePZcQG8whtey8wszigYcNMqrLAJOQMzanyg29PI=
Subject key identifier: 3F:68:04:8D:4E:94:8E:A0:A6:28:B5:8E:4F:F3:62:11:AB:1C:F3:63
Authority key identifier: 98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E
Certificate issuer: /CN=A91308CE/serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E
Certificate serial: 3463
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
Manifest number: 3463
Signing time: Fri 28 Mar 2025 14:58:48 +0000
Manifest this update: Fri 28 Mar 2025 14:58:48 +0000
Manifest next update: Fri 04 Apr 2025 14:58:48 +0000
Files and hashes: 1: mFJq8YqDozT1eZgqMXm23R6X3i4.crl (hash: xxFN6UR9DO6yOfiR8z75CkhWYpHD+S1lf20OKNrP/wM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13411 (0x3463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91308CE
Validity
Not Before: Mar 28 14:58:48 2025 GMT
Not After : Apr 4 14:58:48 2025 GMT
Subject: CN=67e6b928-2989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3b:db:a1:15:7b:f6:ca:4a:5f:4d:d4:4b:da:
ca:25:ed:35:4d:0c:70:fe:66:b7:c8:ec:84:11:e0:
c2:c1:35:f5:ae:b3:fe:cb:12:b0:bd:24:12:39:97:
d0:44:63:55:c7:8e:1f:3c:89:fd:68:93:93:e5:61:
82:aa:fa:a0:d5:b4:57:6f:da:e6:95:85:e8:2a:ca:
15:d6:91:44:b7:f1:82:84:94:bf:64:ad:c0:09:b9:
82:16:03:13:96:68:e1:2a:93:1a:38:d2:39:a0:a2:
cb:e7:93:16:73:fe:37:7d:6a:bb:ff:34:dc:c6:a3:
4d:de:19:24:66:47:e0:d6:83:fa:c6:8d:46:7a:66:
21:82:37:2a:df:8a:42:f4:7c:3d:fb:41:3a:3e:51:
37:9e:c9:35:ca:37:47:3e:36:48:e9:52:6c:2b:12:
a0:a1:16:63:d2:93:c4:81:8e:60:dd:07:d6:ac:cf:
6b:2d:7f:92:b6:79:27:2c:be:5c:1a:55:66:8f:f5:
5f:40:60:aa:9e:31:08:dd:53:06:94:b6:28:70:3f:
41:86:ac:b6:c6:28:27:86:66:75:96:00:1d:42:88:
fd:cb:dd:83:f0:8d:01:05:c4:77:36:0a:51:fa:41:
0c:df:df:ef:70:26:18:73:bb:3c:2e:b7:55:16:e6:
65:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:68:04:8D:4E:94:8E:A0:A6:28:B5:8E:4F:F3:62:11:AB:1C:F3:63
X509v3 Authority Key Identifier:
keyid:98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:bd:6e:83:3b:fe:46:f7:f4:41:80:7d:8f:a1:d7:e3:85:87:
99:da:75:5b:87:59:a1:f4:93:45:72:e4:a7:2d:a9:73:d2:f0:
72:ff:dc:2e:95:43:e2:56:41:98:8c:85:4e:59:65:2b:25:dd:
f9:a8:38:c3:cd:f6:a6:36:f8:3a:94:47:a3:8c:d1:88:9b:d0:
4a:4e:43:67:36:a7:95:41:2c:2d:22:70:c6:4c:ba:9a:f0:32:
47:ca:84:7d:01:0f:7f:4b:e6:9a:04:ff:7f:9f:d8:ab:48:8b:
f3:f6:17:58:30:3a:fa:5e:6a:07:b5:16:79:00:b2:2f:4e:89:
cc:08:72:18:60:1a:3b:02:26:09:f1:ef:e5:2a:be:b0:1e:8a:
57:05:f7:3c:5a:ae:76:32:e7:33:84:57:7a:cb:fe:8a:a0:74:
5f:ea:53:70:d7:26:ea:0f:e4:83:22:cf:41:9b:14:b6:6c:29:
ba:c8:fe:55:bd:33:79:1b:2f:9b:46:dd:5c:d6:8e:3b:b8:2b:
b1:ce:25:ce:e3:0a:93:2d:55:e6:b9:0d:a0:81:99:55:0f:6f:
37:ab:1e:6f:d3:3b:e3:5d:41:92:55:de:4b:ce:3c:ac:6b:5c:
c2:d2:66:87:c7:3b:6c:f7:40:27:fa:44:6b:6b:32:e0:fb:17:
bd:52:e4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:30:09 2025 by rpki-client