Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
File: H5ogKJzpMW5ls9tyToxzYGyPhks.mft (raw, json)
Hash identifier: Ev4w0pDEgzPr3cOa6Eoxhh+k0mvO8Y29hXS4ISBf3FY=
Subject key identifier: 5D:6A:FF:E7:0F:6D:55:A2:59:42:C0:34:A6:E5:EE:63:3D:1E:04:C4
Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
Certificate issuer: /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Certificate serial: 0C13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
Manifest number: 0C04
Signing time: Fri 28 Mar 2025 18:51:09 +0000
Manifest this update: Fri 28 Mar 2025 18:51:08 +0000
Manifest next update: Fri 04 Apr 2025 18:51:08 +0000
Files and hashes: 1: H5ogKJzpMW5ls9tyToxzYGyPhks.crl (hash: Z/btvqZ6/xd9MAbHn8P3SWlMzX2zL3z7BEe7xafkLrE=)
2: 172E487A416911ECB6B11742C4F9AE02.roa (hash: tMpcaYfBD1iobeLdQwhWt6/SJfz2AnFABrMU1WC/vqA=)
3: 67827BDC0B8511EA97C80D52C4F9AE02.roa (hash: kiKJ+nah+NBAeLG9hlQHszkTVk53ALCt/csxQaC27/w=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3091 (0xc13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BF33
Validity
Not Before: Mar 28 18:51:08 2025 GMT
Not After : Apr 4 18:51:08 2025 GMT
Subject: CN=67e6ef9d-f989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:51:6b:ad:ff:6f:0b:82:a1:67:22:e0:1c:
af:72:bf:7b:0a:cf:47:7f:e0:0d:46:be:30:78:eb:
4d:08:80:9f:8a:e8:e7:43:6e:6d:17:f2:53:fc:76:
bf:b6:f4:f2:bc:b9:35:81:eb:0b:e2:6c:ea:4f:0d:
de:ae:7a:f3:b2:02:7c:5a:34:f5:91:83:4d:94:97:
6c:bf:99:5d:89:28:62:db:1e:80:4c:60:8c:5b:98:
c9:fc:b7:12:ef:fb:7c:d0:b0:b1:00:74:f6:01:70:
99:42:92:3f:bf:f1:89:ff:55:ae:5d:60:4b:ac:a4:
cd:49:5f:3a:b1:a8:50:13:16:fb:0c:32:58:f0:27:
95:aa:5f:28:c6:cf:62:d3:cb:bc:51:91:7c:ee:ed:
17:bf:dd:51:de:d9:d8:11:e5:47:7b:45:d5:e1:fd:
ae:3f:89:13:a9:71:c6:d9:32:b9:07:f3:94:67:98:
21:7d:c4:4a:dc:d9:2e:10:6c:3b:05:46:70:89:6a:
7c:b8:d1:1c:50:dd:e0:91:9b:41:65:99:ef:26:85:
88:78:1f:a8:72:4b:b0:e5:f3:08:db:f5:c7:d8:56:
03:80:fb:30:71:26:53:c1:03:5b:28:0f:11:6d:3e:
00:d6:89:2c:91:36:91:75:4a:17:98:c7:a5:3c:da:
d4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6A:FF:E7:0F:6D:55:A2:59:42:C0:34:A6:E5:EE:63:3D:1E:04:C4
X509v3 Authority Key Identifier:
keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:a5:be:1b:62:b6:46:60:8e:29:72:cf:f3:1c:1e:74:59:3f:
0f:e9:c7:fa:01:1a:fd:37:2c:e6:8a:a8:cb:27:9a:fd:ee:cd:
f5:28:14:76:62:e2:15:c7:74:b1:d1:41:0c:56:fe:d6:cb:44:
5c:da:53:cb:9f:22:90:1b:02:b9:e0:d1:24:48:64:f2:d1:5b:
47:01:fc:c0:c5:a7:f3:77:88:80:ff:56:b5:94:d8:6b:80:33:
34:42:4d:67:b1:21:e5:b1:a3:8d:7c:01:a2:70:1f:f5:79:70:
6b:67:e8:19:6a:cf:56:c5:13:de:82:44:c3:b5:56:34:59:23:
ed:c3:ac:3f:3d:70:db:d7:d9:5e:06:af:88:b0:5d:76:37:04:
22:eb:a3:df:a0:5e:bc:d3:b5:75:f5:13:26:5b:bd:48:45:7b:
fd:89:25:e1:b2:65:10:42:ef:50:41:b4:5c:bb:0a:9e:55:36:
97:89:75:9b:7e:90:b7:cd:f2:a2:6a:40:b1:00:3d:70:ba:03:
e1:65:36:87:dd:17:91:67:60:99:d8:82:ac:03:ba:10:1c:27:
90:ee:62:1a:95:6e:b0:08:28:ca:9f:16:c5:8c:07:1a:8c:6f:
dc:c0:10:be:74:9a:1d:40:b3:9f:b8:87:03:fa:3b:b7:0f:95:
ab:1d:1f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:40:06 2025 by rpki-client