Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft
File: cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft (raw, json)
Hash identifier: xQ5Na00CcLiZxaA289TsRu4U95qEVe02o46K9b8+kGs=
Subject key identifier: 38:A1:93:8C:CF:67:48:46:9D:D0:97:A4:3C:6E:86:70:41:66:3B:00
Authority key identifier: 70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1
Certificate issuer: /CN=A913CA4B/serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1
Certificate serial: 08CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft
Manifest number: 088E
Signing time: Fri 28 Mar 2025 20:56:36 +0000
Manifest this update: Fri 28 Mar 2025 20:56:36 +0000
Manifest next update: Fri 04 Apr 2025 20:56:36 +0000
Files and hashes: 1: cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl (hash: stMpi8Zi+u+yTyEpQ+az2TkLAQyHsdxzn+g93J2d4Fo=)
2: 7206C9B0B9A911EE82CE6832C4F9AE02.roa (hash: 1BGCuCR8/5XNnfEBqosQ71/PFSfQ7yzaxtqH4ChrsGI=)
3: C714F71CBF9B11EA9CDFD642C4F9AE02.roa (hash: WQhWvpsGEUoUyhuwJrl1CNiZNORHG8GhG41+pFuVnQM=)
4: E6EBBE4A64CA11EE97188C5DC4F9AE02.roa (hash: FPmK/ZWN45BRsvOMGslxfKU8yKPfXq+QEtu+U3CAeqM=)
5: 60D4C96008DA11EEA1B2EE78C4F9AE02.roa (hash: 9dLmROiC4Lw0+lnZo79JQvbFk0n5gZqA79ORbR1QB2I=)
6: C7A523E6BF9B11EA9CDFD642C4F9AE02.roa (hash: /9KNehkZXA610WgWCgrhBX7+tDPfjbkeRPHfwTNaPSo=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2250 (0x8ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CA4B
Validity
Not Before: Mar 28 20:56:36 2025 GMT
Not After : Apr 4 20:56:36 2025 GMT
Subject: CN=67e70d04-deef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:02:d3:0c:8e:d7:75:d3:1a:c6:4c:c6:6d:
aa:86:45:ae:1b:de:ce:0c:6c:a2:93:08:4c:1d:b2:
dc:c9:f7:a5:37:3f:2d:31:69:dd:e4:c2:2b:40:fd:
9b:88:52:57:3b:26:35:fc:b7:f6:28:0e:81:89:ea:
6b:f5:62:05:7c:bc:ab:72:e2:57:df:1e:4c:a3:e0:
83:c5:9e:66:17:e9:1f:fd:e5:29:d1:03:cb:ce:13:
4a:b2:82:94:d8:cd:ed:70:f7:bd:fd:fc:4f:b6:56:
c1:4c:3e:a4:68:50:b4:48:0e:c5:fd:fd:4a:45:88:
82:72:dd:04:d2:72:4a:95:f0:59:ea:09:c3:f6:90:
26:b4:3d:b8:9a:94:70:68:3d:61:ab:46:f8:37:d1:
b5:1a:26:54:44:16:b4:9d:a2:42:12:0a:a6:ed:96:
a5:de:b1:64:29:c8:a2:93:2c:ab:21:f4:34:a5:ee:
7f:c0:aa:95:0e:e3:1d:7e:be:15:1f:76:ba:6c:f3:
8a:ef:81:cd:0b:f4:a6:95:87:7e:df:81:b9:02:72:
e6:2e:3c:9b:ed:63:4f:64:e3:82:b4:c8:fb:d5:12:
1d:23:9d:07:a9:5a:3f:a2:f2:ff:f0:ee:2f:b5:42:
15:d5:98:03:18:44:0a:e5:34:38:14:95:69:7c:07:
0f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A1:93:8C:CF:67:48:46:9D:D0:97:A4:3C:6E:86:70:41:66:3B:00
X509v3 Authority Key Identifier:
keyid:70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:88:3b:06:9b:64:1d:23:4d:d4:6d:4b:9d:9a:3b:11:e4:28:
55:be:02:fb:84:55:e2:13:dc:e3:38:3a:22:84:7d:77:89:2e:
c5:40:05:b5:e7:c3:fb:aa:f8:1e:07:8f:05:cf:49:90:de:c9:
1a:91:94:5e:6d:c4:b6:42:ef:dc:7d:bc:38:11:6c:ba:a3:6a:
cb:c1:e4:58:6f:62:07:47:71:fa:f3:90:7e:73:be:60:ff:ac:
d6:80:84:b9:9e:0d:05:cd:b1:17:53:eb:4b:c3:6a:a6:18:8f:
8c:79:3c:cd:53:a2:97:da:92:9d:45:b8:82:b5:6e:b1:c6:a7:
26:b5:6c:12:39:a6:c6:a8:5a:33:39:bd:ce:43:03:8f:1d:09:
a9:a6:d7:e5:83:bb:76:fb:64:38:b6:91:b5:68:14:de:ce:3f:
20:9a:25:85:9a:27:fd:7e:3a:ae:ba:7d:49:af:9c:f0:46:5f:
e6:57:2b:2d:f2:bc:df:3f:11:2d:ca:8a:47:db:90:66:a1:24:
37:fb:29:9e:f8:bb:8f:1c:f8:eb:36:50:c2:8a:8e:e7:6a:0e:
f7:fc:86:2c:fb:8d:8b:47:d3:91:b3:a0:01:6c:6a:03:09:45:
00:22:d0:b6:af:07:f3:85:c7:4c:7d:74:1c:29:e3:c1:b0:bf:
a9:55:6a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:30:04 2025 by rpki-client