Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft
File: 2VWVxglbTfriy5tFuQicwmI9lKM.mft (raw, json)
Hash identifier: AdjA4csBLoxVXehqdfa1HInDB6c9Gjsqh0tCcwDwDvk=
Subject key identifier: D5:FD:E8:DD:5F:65:14:BB:C3:A3:62:25:77:93:D9:9A:8E:73:0D:D4
Authority key identifier: D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3
Certificate issuer: /CN=A9144E38/serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3
Certificate serial: 0E79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft
Manifest number: 0E70
Signing time: Fri 28 Mar 2025 17:50:08 +0000
Manifest this update: Fri 28 Mar 2025 17:50:07 +0000
Manifest next update: Fri 04 Apr 2025 17:50:07 +0000
Files and hashes: 1: 2VWVxglbTfriy5tFuQicwmI9lKM.crl (hash: HKCFA8+/et1Uc5U3uFzpq0HJmawYqPSZoA952bgfebg=)
2: D7E41D6A788411EA9186C910C4F9AE02.roa (hash: Lhup7Zk9zUWbpx4YvLoYtp8k4a6DjCWODZVfnB4MNOA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3705 (0xe79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144E38
Validity
Not Before: Mar 28 17:50:07 2025 GMT
Not After : Apr 4 17:50:07 2025 GMT
Subject: CN=67e6e150-9bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:ff:06:99:6b:61:ee:38:79:f1:7c:aa:d0:
35:1d:1f:19:a2:b3:ce:b8:13:66:b1:52:d6:81:c0:
84:7d:20:c6:87:78:47:de:17:46:31:0f:e6:ab:12:
c6:c5:32:bf:c0:c1:8a:d8:06:2f:ef:06:63:09:c9:
55:99:72:3d:71:90:92:b8:32:66:c2:a7:b5:2f:52:
31:26:b0:43:17:32:57:fe:9e:9d:eb:6c:c0:78:ec:
a9:6d:ee:c0:d0:e7:4c:57:fa:a6:cf:0b:9d:09:34:
89:26:ca:4f:24:5c:e7:18:0b:3d:f2:d0:7a:04:f5:
71:09:78:9a:6d:01:9f:ef:35:4c:09:a8:93:80:c1:
f0:70:0d:57:c6:33:10:01:46:60:d8:22:e9:be:5e:
57:b6:1f:65:26:6c:64:d0:7f:b5:0c:d8:da:5a:ad:
80:f9:a8:ce:06:a5:0f:e9:ac:a0:ab:f2:49:c5:59:
ab:c0:29:55:28:02:20:b6:64:65:e4:2c:1c:d6:e4:
be:9d:f0:39:9e:8a:b0:b9:f0:75:4c:4d:95:b2:36:
e5:7b:1b:be:15:42:c0:41:d8:e2:1b:cc:72:b9:c3:
e2:ad:41:f6:f1:f3:d5:5c:af:15:b7:03:39:55:af:
a8:eb:ab:00:bd:04:6a:67:50:08:7e:91:5b:6c:ab:
3c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FD:E8:DD:5F:65:14:BB:C3:A3:62:25:77:93:D9:9A:8E:73:0D:D4
X509v3 Authority Key Identifier:
keyid:D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:75:91:ff:7f:29:64:d5:8e:31:99:8f:e8:07:0d:85:53:2b:
46:49:7e:86:73:a9:e0:ac:5e:51:15:fe:19:db:8d:ab:c6:25:
20:45:b1:09:20:60:08:d4:7a:f2:d0:a9:21:9d:3c:bc:74:10:
78:77:81:9a:87:a6:34:9b:55:ee:4a:a4:b3:01:9b:26:66:4f:
78:10:fc:1e:2a:46:64:1d:98:ff:76:25:db:7c:a6:fb:01:da:
61:be:01:27:5e:a4:8b:4a:e5:15:e9:0f:51:f5:28:95:bf:5c:
c4:da:75:0a:48:32:8c:c5:db:d2:b4:59:24:95:ff:d5:ac:76:
b8:71:36:00:31:ad:ad:7c:e5:06:b7:9c:b5:c5:89:9d:a6:f6:
19:42:c6:f2:04:15:7b:5e:aa:a6:3c:83:0a:6b:9c:61:4f:90:
ef:4f:b5:db:e6:5f:a2:3a:f8:44:ff:c4:98:55:41:1c:25:b3:
0a:76:65:78:70:f5:07:8d:a5:dd:4a:69:c9:5e:85:b7:b3:84:
66:b2:f8:b0:66:32:83:3c:1b:ff:43:17:73:d1:86:a6:7e:3f:
bf:38:75:c1:10:7a:6c:2b:1d:d8:eb:90:5d:7c:f6:17:26:cc:
2f:ac:92:25:8a:da:8e:2b:ff:35:cd:f9:bd:a4:cd:6b:2c:3b:
23:9a:b2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:20:00 2025 by rpki-client