Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
File: 0DLgYUkj9KWCM463Y2w5aErtUe0.mft (raw, json)
Hash identifier: lJSb/0XJjcB/1rn88ov70l6voGMkN7BhUxKEmwz6IgM=
Subject key identifier: C1:04:F8:E0:EA:EA:C8:3F:9F:90:5C:D3:FD:A7:C3:F7:88:BA:23:89
Authority key identifier: D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED
Certificate issuer: /CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED
Certificate serial: 104B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
Manifest number: 1040
Signing time: Fri 28 Mar 2025 17:30:32 +0000
Manifest this update: Fri 28 Mar 2025 17:30:31 +0000
Manifest next update: Fri 04 Apr 2025 17:30:31 +0000
Files and hashes: 1: 0DLgYUkj9KWCM463Y2w5aErtUe0.crl (hash: uhAakiUhjqsyDUv8v+mzpsCOZZZx8AWrQfdxmn2nrlU=)
2: DBC08AD4457911E9BA84DA51C4F9AE02.roa (hash: 3uEvau4LmZq2DpE2z3DPriV9G2TAsCRZC5hyBAIi04A=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4171 (0x104b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913559B
Validity
Not Before: Mar 28 17:30:31 2025 GMT
Not After : Apr 4 17:30:31 2025 GMT
Subject: CN=67e6dcb7-7c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:d3:72:4c:a8:31:c0:da:b1:fe:84:0b:37:
2d:a8:a2:e4:bc:61:ac:21:e4:6b:bd:69:3d:cb:1b:
73:b6:a3:6e:e4:05:7e:36:b0:55:d2:2b:d3:0f:76:
38:aa:c2:9d:d1:68:6c:a1:26:ae:cf:94:72:0c:3b:
0a:11:1b:16:f1:c7:45:7f:2e:8e:4f:1c:bf:1f:a4:
d0:64:9c:e2:9d:9c:60:07:45:c8:c9:51:7a:a9:35:
24:7c:92:e2:ae:33:80:d1:ee:2c:49:3a:17:8c:44:
82:44:c5:4d:2e:81:a7:15:d3:86:a0:c0:73:0b:4f:
61:c2:9b:0d:d4:d8:83:6b:4d:b3:da:df:a1:86:0c:
2a:86:84:c8:92:dc:6d:e0:e1:ed:b1:a6:aa:58:d6:
4d:f6:f5:6b:ef:1a:ea:6b:60:00:63:7d:bf:5b:54:
22:47:38:23:59:d7:23:ec:38:d8:dc:1c:2b:48:63:
8f:5a:0a:b8:9b:96:cc:f6:65:69:44:7e:9f:ef:2b:
31:19:5a:7a:96:29:64:80:38:fd:c2:bf:5a:55:5e:
19:c6:72:54:4a:95:a7:28:63:53:79:8d:39:e8:13:
24:a8:c1:d4:1a:e3:f4:a5:d1:5d:6d:2a:2d:28:4e:
4e:66:49:29:83:17:9e:f1:f5:63:3d:c8:74:59:61:
68:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:04:F8:E0:EA:EA:C8:3F:9F:90:5C:D3:FD:A7:C3:F7:88:BA:23:89
X509v3 Authority Key Identifier:
keyid:D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e0:73:89:f6:f0:10:d3:e7:9a:0b:01:a6:c2:3f:ea:78:ab:
38:87:84:7a:8e:8e:f3:4d:17:5f:bc:eb:bb:72:b3:8c:b7:cf:
39:8b:d4:f0:3f:d9:38:6f:a8:97:f8:48:fd:6e:e2:ad:12:3a:
4f:a9:33:71:08:84:c7:4b:17:9e:29:5a:00:06:68:c1:f1:a4:
ae:ee:a0:16:8a:1e:c5:14:a5:d0:45:ab:14:3f:36:56:65:ed:
b6:7d:36:38:7e:62:85:3b:2c:f1:ac:d6:94:f0:84:56:2a:a2:
f8:de:10:05:4f:1b:04:8f:e7:c8:be:f3:5f:3e:c9:d6:56:ea:
e9:c9:14:98:d2:04:ae:47:10:2b:95:96:8f:c4:46:ad:8f:39:
13:a0:c0:33:2f:18:0c:1e:c7:ea:2e:bd:6b:e3:14:25:fa:99:
16:5f:83:97:f6:fc:49:f4:67:65:dc:55:7e:0c:d9:85:77:93:
34:5f:3f:a4:c1:e9:86:86:6a:a6:4d:86:ae:71:a1:6c:76:e9:
3a:3d:03:c2:62:83:02:24:d2:fb:63:7d:f8:7a:be:f5:d0:ec:
ab:ea:fa:d2:77:76:3c:c3:89:4d:9b:ba:99:6b:e6:6d:69:ea:
68:18:b3:8e:19:17:21:9d:54:1c:24:ae:0b:87:e2:4e:bb:52:
05:27:66:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:52 2025 by rpki-client