Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft
File: 8Os9EfDsrmhzaV1az7e0rcVfNFg.mft (raw, json)
Hash identifier: +1pUQNTK268dOUZwEmw4gYtA4xlDNYUc+QGWnXXyGS8=
Subject key identifier: 1A:BA:B4:73:19:DC:28:C9:E7:BF:14:73:D4:DE:E4:44:A9:47:32:04
Authority key identifier: F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58
Certificate issuer: /CN=A91499BB/serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458
Certificate serial: 148B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft
Manifest number: 1481
Signing time: Fri 28 Mar 2025 16:59:56 +0000
Manifest this update: Fri 28 Mar 2025 16:59:56 +0000
Manifest next update: Fri 04 Apr 2025 16:59:56 +0000
Files and hashes: 1: 8Os9EfDsrmhzaV1az7e0rcVfNFg.crl (hash: PV0bn6SegChblsx7OBudtFqYpchsCdpwqpBy77os5fI=)
2: 5F150B08D48611E9A4473984C4F9AE02.roa (hash: oH35QJywcYwQK9w172Dp8G4g95WEClMxQ6f9cBdl364=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5259 (0x148b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91499BB
Validity
Not Before: Mar 28 16:59:56 2025 GMT
Not After : Apr 4 16:59:56 2025 GMT
Subject: CN=67e6d58c-f3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:d6:81:60:56:1d:1e:69:14:22:c5:7e:2b:
6e:19:dc:42:3e:23:61:70:70:30:d9:bd:42:28:81:
cf:62:fd:1e:4c:91:c7:19:a5:c3:da:79:30:9e:1a:
2c:ab:40:2f:33:3b:fa:a8:ea:8c:e5:32:1f:e4:2b:
a4:a0:e2:69:d8:fa:dd:dd:cd:5e:44:b1:d0:df:c8:
52:d4:e0:02:77:57:36:7b:8b:5a:14:f2:4e:f7:cc:
bd:17:16:72:c9:7c:e7:f0:3b:72:fa:86:92:a3:cd:
51:fb:97:79:f7:81:e3:e0:be:dd:a7:35:49:24:ff:
3c:42:f5:6b:7a:6d:f1:a2:ea:f9:a0:ed:52:03:f4:
eb:00:86:fe:83:16:09:8f:9b:e3:5c:e3:7d:ac:a3:
2c:34:c8:ba:06:22:a8:a2:f7:ae:4f:ff:fa:a0:27:
27:3d:f8:bd:1f:9d:03:3a:d2:82:74:d2:bd:5f:fc:
f6:ec:63:c6:f4:f7:9a:57:e4:a2:1c:18:63:73:2c:
04:b7:05:f4:97:ad:5b:a0:5e:8f:ee:7c:51:76:c8:
e9:b2:35:ae:1a:ac:a8:f0:aa:36:75:3a:85:b0:65:
ea:3d:a7:b7:8c:67:4b:44:e4:6a:6c:a8:ac:d1:22:
50:a0:03:92:5b:7c:81:6f:6c:ca:76:e4:ad:65:6c:
de:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BA:B4:73:19:DC:28:C9:E7:BF:14:73:D4:DE:E4:44:A9:47:32:04
X509v3 Authority Key Identifier:
keyid:F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:cf:7d:bd:b8:6b:00:e6:81:66:28:4c:d0:e9:11:e0:dd:a3:
ff:87:aa:a8:99:6a:a9:c5:8d:eb:c1:f5:4e:90:50:f3:86:22:
bb:44:48:01:c8:81:5a:25:28:79:da:a4:a4:82:5e:1c:e0:15:
cf:1e:3c:a5:92:08:c8:72:e5:a2:f2:e0:d9:6d:ea:76:0c:18:
56:a8:2c:18:7a:49:87:91:fc:19:67:f2:24:34:00:f9:95:bf:
24:e5:9c:7f:6e:bb:f5:3a:a2:87:52:28:03:c6:3f:b6:be:c9:
a5:d1:1d:7f:d7:29:01:a8:7d:77:9b:13:08:e8:c6:77:d1:8f:
91:62:1f:49:f3:27:8c:6e:98:49:9a:63:d9:74:46:11:5b:5c:
63:29:5d:f5:1c:4b:84:9b:9d:93:c5:ce:90:30:3e:11:bc:39:
eb:b2:d2:1e:58:03:2e:f4:a1:ab:01:0b:42:cb:22:34:58:59:
0c:bb:73:7a:06:d5:1f:f3:40:17:e0:10:8f:89:6a:1a:8c:39:
e8:b3:2f:5e:d8:f7:2b:74:85:05:92:58:de:96:d0:2f:82:4e:
88:d8:07:0b:d8:a3:b4:e5:cb:dc:3f:fc:2b:66:cf:3d:73:35:
50:05:b8:76:5b:14:dc:79:0a:3b:fc:8c:44:d3:c4:1d:8f:3a:
25:ee:d8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:35 2025 by rpki-client