Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
File: wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft (raw, json)
Hash identifier: TT9P8/WT8LaSqj8SnNzgCjLrxzNkujKyhQbbMWbSejQ=
Subject key identifier: B1:F4:6C:BF:D4:1E:DF:99:7A:82:81:BE:EC:2C:CD:05:A4:05:00:1A
Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
Certificate issuer: /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Certificate serial: 176D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
Manifest number: 1738
Signing time: Fri 28 Mar 2025 16:44:30 +0000
Manifest this update: Fri 28 Mar 2025 16:44:30 +0000
Manifest next update: Fri 04 Apr 2025 16:44:30 +0000
Files and hashes: 1: wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl (hash: FCLAl6ptg2sZL0gzqA2hrcESVs3BC7YMP2Sbonam3Zo=)
2: 507A39A632B011EE89DFF774C4F9AE02.roa (hash: TYrZ+B6VIzKW11uXjXFH3B1vYwvh9CEWEvcjwdCYyoM=)
3: 51635E7E32B011EE89DFF774C4F9AE02.roa (hash: PrshPG5oG7Q/ksTfEH95reK4a0iC1d8YmqXN8qzwXXM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5997 (0x176d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91478E2
Validity
Not Before: Mar 28 16:44:30 2025 GMT
Not After : Apr 4 16:44:30 2025 GMT
Subject: CN=67e6d1ee-be36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:a2:74:5f:0f:7a:5f:dc:09:26:ca:2a:d7:
7b:34:fa:8e:3d:19:cf:ef:0e:17:96:68:f9:33:46:
a9:fd:41:78:df:b5:94:67:08:63:d9:b6:00:41:7b:
87:9d:84:e7:88:18:9e:9a:f4:5b:47:93:77:77:ef:
dd:9c:ee:9f:fa:34:a8:c2:54:f7:09:68:12:0f:30:
5d:f2:fd:13:fa:1a:44:db:52:c9:17:79:7b:7d:1c:
b7:7f:da:64:63:40:09:61:bb:79:d5:f2:ef:84:63:
1d:22:81:44:d4:ce:60:35:54:07:8a:ae:cd:e0:92:
0d:4b:ef:1a:bb:3d:d5:ca:05:d4:3b:53:02:47:f8:
8f:7c:ad:74:aa:12:e2:46:1e:eb:06:cf:34:e5:ec:
c7:e4:ca:0c:93:5d:91:59:19:84:18:54:8c:05:0d:
7e:87:a1:c5:2f:e3:5e:39:80:3f:06:60:f5:cd:c4:
27:96:22:5d:66:ca:78:ba:c8:dc:3b:c0:50:b9:72:
69:b0:74:19:58:76:df:34:ce:97:62:7e:ef:b2:04:
58:63:74:e7:58:c4:0c:c9:dc:4f:86:d4:04:30:5f:
55:b4:63:37:0b:83:db:fe:a9:59:4e:44:aa:8b:83:
27:3c:8d:ed:ee:40:46:d6:e1:8d:ca:41:ba:8c:7c:
3d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F4:6C:BF:D4:1E:DF:99:7A:82:81:BE:EC:2C:CD:05:A4:05:00:1A
X509v3 Authority Key Identifier:
keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:a1:73:bd:90:a0:0f:67:b4:f4:1a:c5:79:81:9c:52:71:31:
7a:ec:a7:09:28:97:41:03:18:70:2d:59:09:b6:e7:1b:96:f0:
d5:cf:ab:ea:e1:c8:56:5a:63:3a:7f:b8:9c:91:f3:81:37:4b:
86:17:00:7b:af:de:0f:9b:73:0f:db:91:63:1d:38:f3:23:36:
5d:de:9b:c4:b6:14:59:38:72:86:6a:20:4c:1c:9c:0f:ef:2f:
c5:05:f4:eb:9a:3e:f7:f0:96:d7:d2:72:ed:b7:4e:7d:ce:c9:
30:0a:80:07:ab:7a:94:79:5f:08:f2:96:17:d7:1b:9f:5e:ed:
88:d1:ff:11:80:85:bc:24:6c:98:30:c4:d5:73:14:c1:16:79:
98:77:38:4d:72:35:ca:2d:d0:22:1e:66:53:21:ac:9c:32:56:
c5:cc:2a:33:d4:d1:a8:31:3c:c2:f8:e1:24:60:be:22:80:37:
ae:fb:4f:48:3a:7d:6a:8e:74:42:6d:37:7d:77:67:05:c0:3f:
e7:c3:45:e6:11:eb:d6:b8:d3:f2:43:99:40:9e:60:03:97:7c:
55:c8:4e:15:6e:bc:80:95:88:a9:a6:9c:4c:47:a3:55:76:16:
7b:8d:cb:c1:4b:ab:e7:1c:ad:f7:bf:a1:45:3f:52:07:5b:ce:
33:e6:41:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:40 2025 by rpki-client