Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
File: cDaiAHf_h_76NADX-QdrfhmDiy4.mft (raw, json)
Hash identifier: 3yT4SsivDJ6H+FvhQ+dGQxJpzBdOkzPY7XjfFFfbplg=
Subject key identifier: 40:01:24:81:93:91:39:6B:AB:1C:D1:01:CA:B0:3A:39:60:B4:39:AD
Authority key identifier: 70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E
Certificate issuer: /CN=A913F124/serialNumber=7036A20077FF87FEFA3400D7F9076B7E19838B2E
Certificate serial: 01D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
Manifest number: 01D0
Signing time: Sat 29 Mar 2025 02:25:36 +0000
Manifest this update: Sat 29 Mar 2025 02:25:36 +0000
Manifest next update: Sat 05 Apr 2025 02:25:36 +0000
Files and hashes: 1: cDaiAHf_h_76NADX-QdrfhmDiy4.crl (hash: Fh8D5eEMieW7CXCMBCiI9qQhg8z/A76RQ6WvYXYW4QY=)
2: B13C376049EC11ED9EAEAC0CC4F9AE02.roa (hash: 3aaeEi1YrA3uSceTUOZGuJZHBHy8WbpEjF+B/7Isrys=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F124
Validity
Not Before: Mar 29 02:25:36 2025 GMT
Not After : Apr 5 02:25:36 2025 GMT
Subject: CN=67e75a20-4ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:22:d6:b4:52:c5:0d:b5:4b:d4:fe:8f:e3:44:
64:ed:cf:14:35:f6:53:ad:58:fa:aa:d0:c6:66:b4:
ba:1c:b5:98:6f:85:06:79:f6:99:6f:4a:62:d4:a3:
da:2d:41:be:88:84:2d:47:92:d0:ed:c8:10:60:3b:
b0:66:d2:6d:b8:21:9f:64:a8:c7:e8:f6:27:44:9b:
c8:ab:2e:93:04:46:a7:73:34:ca:e6:e5:aa:6a:18:
b4:a9:64:bb:80:22:e5:25:f0:21:ad:cf:f4:7e:a5:
f7:b1:4f:f8:26:4f:b5:dd:36:16:fc:73:73:6e:0a:
4f:11:8c:86:4a:25:16:ae:17:7d:83:62:4e:e8:48:
09:7d:bd:f9:5e:9e:82:47:be:f9:36:15:e6:d5:d3:
97:93:76:40:aa:9d:d3:3c:e3:e9:e9:e8:3e:f4:ce:
2a:4a:0b:57:04:cb:2c:25:ba:e4:ef:b5:fd:fb:f3:
f2:5f:91:43:06:b4:30:68:d1:d7:ff:a7:af:de:4e:
85:0a:89:65:f5:b8:c8:92:5f:fa:a7:d8:be:e5:05:
c2:36:7b:b5:37:59:a6:1a:e1:72:f8:28:16:6e:c9:
8f:06:1e:d8:b7:23:16:a0:38:d6:c2:20:10:f2:55:
85:3f:7f:d6:45:67:01:e3:ac:70:dc:22:93:6e:36:
ff:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:01:24:81:93:91:39:6B:AB:1C:D1:01:CA:B0:3A:39:60:B4:39:AD
X509v3 Authority Key Identifier:
keyid:70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:42:d6:81:6e:f7:f0:a8:c3:d8:d7:7e:6f:60:fb:e5:2c:81:
38:b0:e7:cd:0b:64:a1:b9:a4:68:40:96:3b:3f:ed:1f:1b:d9:
a5:80:89:3a:23:44:eb:c9:42:52:0c:d0:3b:e4:40:5e:59:6f:
2a:8e:46:45:41:ae:d6:4e:66:aa:40:fc:d1:97:0f:e4:c2:39:
f6:ee:36:00:98:5c:53:35:16:e5:80:60:28:ea:e4:8c:0d:5f:
cf:41:64:40:b4:e2:4a:11:a5:e0:a7:66:11:0e:b4:a5:01:53:
25:72:b7:f9:96:b4:00:8a:06:40:35:ca:a2:a3:3f:c9:0b:47:
72:01:42:4c:13:b1:90:a5:e4:20:d8:a5:34:07:df:02:c6:e7:
67:8d:10:41:f9:6c:ef:59:18:be:39:dd:e8:7a:26:04:7b:cb:
01:b6:89:8d:b4:e6:d5:4f:c6:30:f1:83:8a:c2:fc:e0:51:28:
7b:54:89:68:09:18:02:34:80:0c:7e:72:31:bc:af:4d:40:ed:
37:00:f6:f9:0d:82:22:0d:f4:05:8a:1b:76:ba:9a:5d:77:85:
c7:15:a9:f2:7f:78:8a:a9:92:08:0c:56:76:a2:95:20:b8:6a:
34:b6:cb:72:70:39:46:30:b6:b7:09:7e:fe:b4:55:d5:fe:4f:
bf:cd:2b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:52:18 2025 by rpki-client