Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft
File: GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft (raw, json)
Hash identifier: ZrLZaJckqAC1aA7kOOeJDQQkrl55oHpL4ZQ61HhmE6M=
Subject key identifier: 65:FC:B2:0F:C3:6E:1B:05:01:AB:B9:07:BD:51:96:1C:DF:7B:95:35
Authority key identifier: 19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22
Certificate issuer: /CN=A91475C0/serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522
Certificate serial: 12A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft
Manifest number: 1291
Signing time: Fri 28 Mar 2025 17:12:22 +0000
Manifest this update: Fri 28 Mar 2025 17:12:21 +0000
Manifest next update: Fri 04 Apr 2025 17:12:21 +0000
Files and hashes: 1: GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl (hash: jORV4D99Jdq9MjFMhoeb7j0HWhGFP9SpnEU1QmAwq48=)
2: 1341A108C14C11E888561034C4F9AE02.roa (hash: uCzrcOZ6wMggtTT6lyh83cBZPMtDpVknNnh01V6TMIg=)
3: 13F37A72C14C11E888561034C4F9AE02.roa (hash: k8xb8lrujgkG8RL08aJsFU4NdjV1eIzGYv9lZHgCcyU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4773 (0x12a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91475C0
Validity
Not Before: Mar 28 17:12:21 2025 GMT
Not After : Apr 4 17:12:21 2025 GMT
Subject: CN=67e6d875-e81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:a5:2d:35:fe:f5:d1:da:15:de:a5:89:91:
ed:db:74:d0:e2:50:4e:9d:27:0d:a2:26:89:8b:20:
af:61:8c:35:3f:cc:46:6c:10:29:f6:3f:48:82:8b:
64:9c:7f:de:bb:c1:47:6d:6d:0c:ed:4f:10:d3:ba:
c5:36:1f:67:bb:79:73:41:70:e8:95:25:24:38:d0:
53:04:61:db:71:8b:2d:31:e9:65:58:ab:7f:10:9d:
55:8c:e9:d6:02:1b:1b:fb:f0:a9:e9:15:66:1f:97:
71:d7:93:f3:b9:aa:6d:4e:17:64:3c:95:db:ff:b1:
49:81:27:c9:e5:9d:71:bc:dc:fe:90:7a:d6:3b:20:
79:39:fd:86:b5:20:74:cb:94:fb:32:fb:b5:02:24:
9d:82:37:52:d5:dd:76:88:ef:88:7e:f7:75:0e:ff:
46:38:d6:ee:d3:93:46:46:9e:3b:bd:56:ae:c2:f1:
54:e8:6d:70:b0:19:0f:f4:6c:dc:3a:b3:2e:e7:24:
2f:0b:7a:1a:02:ef:f6:96:41:41:bf:6f:ea:7c:a8:
17:10:7d:d0:08:38:4e:4f:fc:48:72:40:c6:55:f4:
c2:7b:05:cd:73:eb:00:b0:2f:6b:79:c9:ab:7a:c3:
28:69:bb:9f:76:06:74:09:ee:8e:e8:c0:3c:a6:5f:
30:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FC:B2:0F:C3:6E:1B:05:01:AB:B9:07:BD:51:96:1C:DF:7B:95:35
X509v3 Authority Key Identifier:
keyid:19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d8:61:08:ac:4c:a9:65:bd:62:f3:b3:44:95:67:c0:8c:93:
2a:8e:f5:f2:7a:ec:5e:d8:5b:49:c3:c1:77:75:f8:3b:95:83:
ed:e9:9d:42:3d:1b:a2:be:08:47:fd:a3:d7:94:31:60:d2:b9:
89:d8:95:87:b5:ed:91:9f:2d:5d:86:c2:0c:c1:bc:97:ae:94:
18:2f:1e:7a:2c:ca:fe:42:39:17:92:7e:44:bc:66:c3:80:81:
31:d3:a6:00:99:c2:61:1b:b4:9b:cc:a2:04:bd:bb:6c:02:b0:
ef:e2:38:53:80:0c:14:38:09:b8:fd:17:f4:7d:c0:16:86:d8:
99:00:be:55:11:2e:f8:15:5c:91:ee:9a:a3:a0:48:b6:95:9a:
3b:9c:a3:67:d4:55:3f:6c:4e:2d:f7:66:cf:a4:02:c7:98:24:
f1:6c:db:55:e8:dc:b3:97:01:a2:b0:ed:64:dc:93:3b:b9:ec:
8f:36:6c:75:d1:55:1e:d9:ba:46:74:71:33:ae:67:f1:5b:b2:
e9:ca:6d:b1:12:c4:22:67:79:bc:20:07:67:f0:9d:77:2e:90:
6b:df:29:a3:f2:a2:a6:3c:fe:a4:4f:4c:89:67:b7:74:49:9a:
fd:3b:e4:ed:53:0b:bd:b8:a5:9b:23:39:93:ff:01:06:83:3b:
3f:d4:1e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:30:25 2025 by rpki-client