Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
File: 1NfdJccT56lVTPNS2TK_gNplLeQ.mft (raw, json)
Hash identifier: GgosjldYr6zSRrEFq1TGiAa/LBwnLLghcVmIxIYtD74=
Subject key identifier: 78:1C:11:9E:C8:72:F9:20:11:CB:19:FA:82:93:32:EE:12:DD:CF:07
Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
Certificate issuer: /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Certificate serial: 0886
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
Manifest number: 086B
Signing time: Fri 28 Mar 2025 20:56:56 +0000
Manifest this update: Fri 28 Mar 2025 20:56:56 +0000
Manifest next update: Fri 04 Apr 2025 20:56:56 +0000
Files and hashes: 1: 1NfdJccT56lVTPNS2TK_gNplLeQ.crl (hash: PH4IlkgdYsX9rkjM+0riXc97WOJmzfmcv5hWvr9JBAM=)
2: 53224C1ADDA311ECA6964F20C4F9AE02.roa (hash: MbDPgGu0QclVT9FsJP5AAT1eEmuh3d/Dz6sn+R/b6KM=)
3: F7968CA6C01411EA912AC365C4F9AE02.roa (hash: cq2+wmybE1qpMjYmMXJ1sPoAauOtHlCzziVm+2eI9Iw=)
4: 5280D466DDA311ECA6964F20C4F9AE02.roa (hash: 82RI8awYpynCWEC9v44MXxvIjgMncGXtmCbSpuF8EGw=)
5: F814A546C01411EA912AC365C4F9AE02.roa (hash: 55QHl+d6Jc6Afsomh5duijKv8tF3LE8W2FzT9OQDDqI=)
6: C21DA992E83B11EBB3231D5EC4F9AE02.roa (hash: NQcAjbSAwzYhxeooFE30slWX1sySx4pom2WdezOetYg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2182 (0x886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A64F
Validity
Not Before: Mar 28 20:56:56 2025 GMT
Not After : Apr 4 20:56:56 2025 GMT
Subject: CN=67e70d18-9584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9b:bc:08:fa:ea:42:69:25:42:84:a6:9c:ab:
45:81:ad:cd:7e:38:c1:ae:d7:86:d9:61:89:e7:be:
50:a3:30:39:9e:b6:02:c7:a2:b8:88:10:97:77:c6:
ad:ff:2b:b6:be:cf:ea:91:8d:5c:c5:57:5e:37:68:
67:ec:22:dc:66:63:ca:81:17:5d:ae:63:78:89:52:
51:db:ff:f5:c4:81:ff:82:9a:af:ff:1b:23:37:7e:
76:1b:3b:21:b9:ac:26:1c:c1:6c:38:88:84:50:86:
22:26:fb:2f:fc:5b:a3:1f:60:d7:a1:9b:51:4b:65:
41:85:e4:13:37:13:e0:23:d1:85:d5:6d:30:02:4e:
f8:a7:ce:4d:58:a3:d7:ba:a2:3e:0d:82:15:db:f8:
06:6d:9d:e1:14:00:c7:60:2f:af:7a:b3:fb:3a:42:
5b:85:f3:ff:c7:00:49:4a:7e:06:d4:62:ae:57:f8:
20:1c:76:c7:d8:4c:5a:9a:ad:61:be:7a:eb:e0:f9:
d9:64:ed:ad:2a:6f:04:41:2f:e4:15:ab:15:5d:fc:
26:95:45:9d:32:de:78:85:12:c0:21:80:b0:1e:4f:
25:ad:c9:87:be:5d:f7:f4:d8:b0:60:b2:f2:e5:b1:
70:a1:eb:4e:de:bd:9e:88:3f:e4:ba:3f:e5:31:71:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1C:11:9E:C8:72:F9:20:11:CB:19:FA:82:93:32:EE:12:DD:CF:07
X509v3 Authority Key Identifier:
keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:94:2f:17:f3:9a:fd:25:e1:df:e9:28:1e:4e:e8:ae:80:d4:
fe:44:0b:47:10:99:39:42:96:d8:96:ef:ba:f0:d5:7e:c6:0d:
50:dd:f9:c8:6f:ad:a8:cc:34:2b:4b:1d:09:18:05:81:38:11:
5b:84:55:0a:c0:24:8e:37:1c:3a:80:99:90:d5:15:c0:ed:51:
c0:07:d1:76:15:54:28:b3:b1:35:62:60:ea:cf:b4:3c:ca:6d:
ed:55:92:f5:82:95:44:8e:df:62:70:e5:de:c1:2e:5f:1e:9f:
f9:37:33:bc:7b:cb:9d:cd:e4:62:40:15:0b:bf:4d:6a:13:b0:
d4:a9:76:6e:73:8c:18:cf:96:c0:06:05:6e:67:b5:90:7d:72:
96:1c:b8:a8:ae:6b:74:8b:43:ee:f2:83:18:34:e9:99:a1:d9:
e7:86:b0:79:6e:11:1a:85:07:65:dc:46:53:f8:1f:b6:19:f0:
e5:2d:12:dd:b2:cd:9a:db:aa:2a:f2:ef:5f:b9:82:65:be:7c:
95:ab:40:a5:94:f9:34:58:b5:b9:64:98:b8:44:d5:d2:ce:d9:
55:21:19:3b:45:15:16:e0:d2:d2:5a:77:38:a9:11:7e:6d:f0:
0e:76:44:da:a5:ca:8c:ab:2c:ec:4f:22:da:ac:37:60:01:de:
bd:c7:97:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:08 2025 by rpki-client