Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
File: VVzqN0EM0oazHxoArfYlPUzgUjI.mft (raw, json)
Hash identifier: tnN6prkm9ErECD7mWFp83r/L341nHBCmhV+LUftDYiw=
Subject key identifier: FF:D9:F9:EA:11:AF:96:42:65:2E:4A:A4:54:85:50:2A:C4:A2:B2:CE
Authority key identifier: 55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32
Certificate issuer: /CN=A9137522/serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232
Certificate serial: 346A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
Manifest number: 3465
Signing time: Fri 28 Mar 2025 15:07:04 +0000
Manifest this update: Fri 28 Mar 2025 15:07:03 +0000
Manifest next update: Fri 04 Apr 2025 15:07:03 +0000
Files and hashes: 1: VVzqN0EM0oazHxoArfYlPUzgUjI.crl (hash: SB7c7Bse6i2Nz7mEGCAqd/QKH1zrSssUh928Tq01Q30=)
2: FF9802D6FE3911EBBCE1485DC4F9AE02.roa (hash: rKiJ/h4am+FFw7G2LT8pzc4HoVXZT8DnOASCeasqP8w=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13418 (0x346a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137522
Validity
Not Before: Mar 28 15:07:03 2025 GMT
Not After : Apr 4 15:07:03 2025 GMT
Subject: CN=67e6bb17-090e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:77:e6:d1:19:88:d4:7f:0a:dc:5d:a1:ba:
1a:e2:b3:7f:df:d1:db:7e:33:5c:a4:23:33:41:e0:
6e:19:2d:4c:f9:1b:a9:2f:a5:33:9c:49:14:33:c2:
a4:73:8e:65:54:6a:d7:f5:8b:e2:00:1e:ef:ad:6c:
f5:2a:e3:70:7a:ba:de:de:08:e9:56:ad:89:6c:ff:
68:a8:bb:a0:ef:f3:f7:fc:ce:df:3b:5b:c1:68:65:
8a:69:e9:c8:89:31:92:97:b1:df:ee:0d:29:d2:ad:
52:26:4d:9d:56:3d:7a:4a:7f:03:cb:4b:86:71:58:
7f:65:b5:55:98:43:ee:8a:2c:32:01:4a:30:11:74:
b3:a8:cb:31:14:f1:fb:86:88:17:25:70:ea:cd:07:
03:62:cf:86:ea:fa:32:fe:9a:08:7e:33:c9:00:57:
8d:4a:c4:05:b3:43:95:4b:c1:95:1c:53:b5:de:e7:
90:79:57:25:19:2e:de:5e:cf:3e:4f:8a:46:58:7d:
20:4a:8d:1a:86:1f:5f:9e:f8:7d:13:13:bb:c5:c7:
90:16:99:0d:e7:69:c7:a8:4b:bd:4f:84:aa:33:3e:
27:fd:25:39:48:ac:f7:3d:13:e4:c0:8a:9b:18:51:
aa:09:b2:c7:ad:05:52:15:c9:c8:ca:5a:f2:26:c3:
e1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D9:F9:EA:11:AF:96:42:65:2E:4A:A4:54:85:50:2A:C4:A2:B2:CE
X509v3 Authority Key Identifier:
keyid:55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b3:ec:2a:a0:a5:31:eb:fb:aa:63:01:21:b8:31:b7:8b:f0:
95:05:13:13:56:ee:28:0f:bb:ed:35:1c:e5:b5:fa:47:2c:54:
b1:1a:7f:35:bd:76:d6:a3:f8:ca:68:29:2d:c0:79:45:02:27:
fc:4f:8b:40:f4:43:d0:12:19:9a:da:1e:e1:f4:82:59:61:3a:
c4:54:d6:ca:bf:ee:cc:dc:13:59:76:5c:07:3d:e7:38:db:3b:
f1:cb:b2:d2:32:4f:47:fd:b6:a1:27:97:6f:d3:94:a6:81:a9:
a6:18:9c:9c:44:22:6a:77:c2:c3:88:01:55:6b:79:9c:8d:f9:
c7:61:b3:3e:12:0a:17:55:8c:b3:f1:70:dd:24:bb:36:87:df:
7e:76:31:be:0f:3a:e1:47:2d:e2:e3:ff:24:a7:5a:3a:34:34:
aa:8b:c5:1f:3c:47:b7:db:84:06:a7:39:30:9c:b7:b5:26:e0:
d4:a4:58:00:05:17:06:92:f1:7d:2a:41:95:49:68:4a:5c:a7:
59:d5:e4:52:c2:7d:a3:b2:1f:af:5b:ad:02:ff:c2:2a:71:b2:
ef:c6:8e:fc:9c:b3:0f:05:11:e6:56:da:1e:4c:13:3b:10:86:
a5:4f:e7:e0:0d:3e:d3:3c:83:aa:f1:a1:6b:24:98:f0:cf:26:
3e:2d:f8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:10:39 2025 by rpki-client