Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
File: b_pdsVnUCjoXLbx09cMrVVF5ea8.mft (raw, json)
Hash identifier: HAvclwtEA/k21bTbDn4ip25FsJdnlCbqzeZilp9+NXg=
Subject key identifier: D8:07:E1:F0:96:5E:DB:92:B9:0D:80:01:27:C9:45:F0:4E:EA:2D:D7
Authority key identifier: 6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF
Certificate issuer: /CN=A913C627/serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF
Certificate serial: 084E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
Manifest number: 0832
Signing time: Fri 28 Mar 2025 21:07:16 +0000
Manifest this update: Fri 28 Mar 2025 21:07:16 +0000
Manifest next update: Fri 04 Apr 2025 21:07:16 +0000
Files and hashes: 1: b_pdsVnUCjoXLbx09cMrVVF5ea8.crl (hash: vk3xpI2HSF8vZssmyBn2gTpQTp01IVmc2ZXfXEysOqc=)
2: FFB3EF94F53C11EEA5B4623BC4F9AE02.roa (hash: /fXh9rRkaaoRPfk33mjMimbuEvetu147WAhHwF4dC9Y=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2126 (0x84e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C627
Validity
Not Before: Mar 28 21:07:16 2025 GMT
Not After : Apr 4 21:07:16 2025 GMT
Subject: CN=67e70f84-8162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:5c:f4:72:ea:3f:d6:65:05:01:b3:53:48:
e7:a2:cd:dc:38:f3:07:a5:73:f8:a5:9e:9a:03:c6:
f7:f4:a2:1a:15:be:59:41:a4:7f:37:a8:ef:8c:99:
41:46:00:d2:19:36:68:cd:df:d8:8c:ab:2b:46:66:
1b:10:4e:d6:c5:79:ef:aa:2c:ef:fc:07:fb:f4:41:
a1:3f:81:c4:80:cf:be:3c:5f:fe:44:8d:02:d7:87:
34:17:55:7a:24:bb:ae:51:02:95:d1:18:00:18:d4:
35:09:27:53:c0:75:ee:24:fe:4c:56:72:e7:71:e1:
6f:0c:6a:4d:2b:19:9e:fb:b1:f5:74:e7:6d:c1:54:
80:8c:e0:36:3e:bf:bb:dd:f0:b1:37:a1:bd:74:64:
71:6f:ea:8a:9c:b8:b4:94:cf:e4:3a:ee:27:2a:1e:
a4:24:bf:28:5e:f8:7e:17:2e:dd:42:ca:8d:73:2a:
00:ec:c9:0d:a2:c0:15:6b:36:0d:03:d0:1a:dc:b1:
5a:8e:2f:f2:bf:58:e5:df:c2:75:8f:e4:c5:18:f7:
cd:b9:8e:f2:3d:fe:08:91:54:04:c9:ce:40:59:ac:
a6:8b:74:29:99:4c:ac:bf:5f:ee:34:39:de:c1:bc:
82:2f:ac:af:38:9b:16:1d:d1:7d:01:83:9e:31:23:
c2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:07:E1:F0:96:5E:DB:92:B9:0D:80:01:27:C9:45:F0:4E:EA:2D:D7
X509v3 Authority Key Identifier:
keyid:6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:7f:7e:d7:92:bc:fb:a5:b1:8b:1f:bd:a8:bf:31:f7:18:96:
77:2b:5c:e5:21:4e:dd:98:aa:15:83:5c:7b:9e:4b:28:89:b9:
70:23:60:0c:dd:9f:28:53:bc:05:e4:d3:1e:86:eb:27:d8:0b:
97:6a:ac:27:6d:75:55:3e:d7:2b:7c:31:33:01:01:a6:ab:88:
4f:fb:48:39:e5:c4:d3:41:e2:de:77:3f:56:5a:22:e8:0f:d2:
cf:22:6b:f8:dc:25:9d:83:9b:23:2c:ee:4a:e3:fa:b4:25:cf:
d4:88:60:75:00:68:f7:85:92:f2:20:c0:43:94:52:08:e3:9b:
ad:87:a6:68:a8:6e:45:81:99:33:d6:ef:8d:6c:2e:03:da:9a:
dc:32:71:33:9d:e8:21:5b:e2:6f:a3:c6:b6:01:8a:0b:77:9e:
e1:7e:87:55:96:ee:36:ce:70:e7:d5:96:b1:73:bf:bf:5f:d5:
a9:72:77:c5:88:ff:f2:c9:c2:41:d2:ef:ad:66:3a:bd:23:a1:
e8:1c:87:31:4e:17:4f:2a:9d:11:a9:94:21:fa:db:ff:29:c7:
a8:7e:58:54:5c:ab:5e:a9:da:af:e8:07:9b:8f:18:32:13:da:
5f:b8:3b:a7:81:b3:7d:79:0d:bf:98:8a:29:ff:f9:21:05:e0:
c9:6d:e5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:22:08 2025 by rpki-client