Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
File: PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft (raw, json)
Hash identifier: 7Rprvqy2t6Y7gyJah+dRnTnhzb7nV6N8pe9AwQg+Taw=
Subject key identifier: E3:1A:0E:2D:73:36:04:17:7A:03:43:35:B6:C4:39:58:2A:5F:EE:7C
Authority key identifier: 3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98
Certificate issuer: /CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
Certificate serial: 07C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
Manifest number: 0797
Signing time: Fri 28 Mar 2025 21:42:56 +0000
Manifest this update: Fri 28 Mar 2025 21:42:56 +0000
Manifest next update: Fri 04 Apr 2025 21:42:56 +0000
Files and hashes: 1: PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl (hash: YRsytd1p82eGRIswJ1HrHc3Pa9CcZ8ccwFYcX4XNsIQ=)
2: 2B20A2E2AB3611EC9E53765EC4F9AE02.roa (hash: wLoBYFagySqVyKs2XPPhSCHJVe/qME41ikrCOnVJ9BU=)
3: 50C07FEE992611EC94DB646EC4F9AE02.roa (hash: YZmd2iLNXNJxv6AncAala+XytTYlnd/yuwwFnEreN6c=)
4: E1F9AFD2088E11F0BC714F5BC4F9AE02.roa (hash: 3h6nLXTceX/wF05WFNA3RlbPikPnjhO2opac2OLMDxQ=)
5: 476CAD520AC811F0A8700787C4F9AE02.roa (hash: GES2aJGb9vKXtXOggNobGX6z89xMp2LAUs1LwtMA5BI=)
6: 0ACEF76441DC11ECBDB44C82C4F9AE02.roa (hash: yYpvf9p+wsM6J9X86nR8OoM5Locu4ULTbYADmSrh3ns=)
7: 50379A94992611EC94DB646EC4F9AE02.roa (hash: UQSilDbz/hE2pQQ6qsVZpBDsORWehlq7xmMJwgsCEF0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1991 (0x7c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91450A4
Validity
Not Before: Mar 28 21:42:56 2025 GMT
Not After : Apr 4 21:42:56 2025 GMT
Subject: CN=67e717e0-ec77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:22:42:b7:bb:61:fa:21:f9:71:72:4b:49:
a5:1c:79:fd:2f:80:97:c0:a8:db:49:7e:b1:5f:38:
e9:2f:30:5e:cb:a9:d2:2f:c9:01:ab:4a:22:55:63:
3f:30:23:88:d8:48:d6:98:fb:0c:30:92:f9:88:0b:
34:e0:68:5e:2d:f5:38:92:0e:a2:ef:4d:ce:c2:21:
2c:eb:4a:05:e5:65:55:f5:a7:ac:74:f0:70:7c:eb:
74:f4:ac:ef:a9:63:df:18:75:d7:e5:bb:70:8c:9e:
45:0d:4f:65:03:a6:37:82:f4:1c:0d:e7:4d:ea:5e:
db:c8:f0:a6:00:21:1b:6e:e0:a5:80:86:e1:47:20:
8d:63:8b:ce:11:60:bb:1e:17:83:74:85:85:ca:9c:
f5:20:a8:c7:45:aa:d1:83:01:cc:a7:e8:ac:68:e7:
dc:07:73:c1:b0:66:a3:26:48:2a:4b:ef:95:24:80:
85:65:c9:48:fc:0b:4d:3d:2d:60:40:76:a1:50:af:
ff:66:b4:c4:2f:f4:2e:8d:30:78:2c:e6:a7:07:5b:
13:5f:ae:60:d1:3e:77:a4:04:7b:94:32:35:f4:65:
ca:73:dc:81:f2:08:0c:7e:01:24:70:fc:2d:9a:3e:
ef:7c:9b:02:ec:1e:a4:ed:07:11:e8:20:ff:77:5e:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1A:0E:2D:73:36:04:17:7A:03:43:35:B6:C4:39:58:2A:5F:EE:7C
X509v3 Authority Key Identifier:
keyid:3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d4:57:b5:a7:14:c0:be:72:3a:d0:44:6f:a0:1b:90:18:95:
11:57:9d:54:d8:32:2e:fc:d0:d3:29:78:2e:1b:ea:5d:d5:7a:
06:12:10:39:7f:a4:88:b2:51:30:ae:d6:c6:ee:85:a4:68:8a:
65:29:5e:72:43:4c:94:c3:c5:07:99:03:b6:1e:fa:db:ac:42:
79:37:29:22:3c:b3:a0:11:51:cc:07:50:68:75:9b:0a:a3:e3:
0c:13:27:4c:46:38:38:4e:c1:87:8b:5d:fc:41:85:41:f4:87:
52:8d:71:52:d1:79:dc:ed:78:cb:e7:ad:f7:31:ce:df:4a:c2:
f4:b9:db:ae:5f:60:2e:ab:2f:e1:21:28:9c:14:b2:05:c3:20:
94:7b:c1:35:d8:36:e4:86:5f:2f:0d:dd:3e:dd:38:89:12:af:
bf:e7:48:1e:0e:49:91:d7:2f:28:bf:74:4d:47:89:4e:c2:1b:
82:47:c6:80:ed:b9:fd:a7:80:d7:d4:2c:72:d6:ff:f6:fc:cb:
fd:cc:f2:c9:bc:1a:4f:b4:1f:6a:43:74:f6:9f:af:c8:bc:c5:
18:f2:52:44:29:52:f9:50:d3:f7:eb:a6:73:31:87:e8:81:09:
1f:af:6e:27:36:02:aa:04:d4:58:47:b8:0a:49:ce:aa:0b:86:
87:54:f7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:54 2025 by rpki-client