Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
File: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft (raw, json)
Hash identifier: RmJhmzJNxzseXv8854W+9xy+OSTjw8PYSj9yN49bzJM=
Subject key identifier: 54:35:D7:88:8C:12:E5:5A:73:C1:64:D3:6F:1B:EF:58:F4:D4:DF:81
Authority key identifier: ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
Certificate issuer: /CN=A914C725/serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Certificate serial: 191A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
Manifest number: 1905
Signing time: Fri 28 Mar 2025 16:33:14 +0000
Manifest this update: Fri 28 Mar 2025 16:33:14 +0000
Manifest next update: Fri 04 Apr 2025 16:33:14 +0000
Files and hashes: 1: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl (hash: Ssy/VIxmK0Avi7eMXAL+bQlCo/rEtCbp0QP9kpefvLw=)
2: B4DF66BA809F11E7B741FD2EC4F9AE02.roa (hash: WkaE0CXeXaRttmyFDWWMPFZDaH+bNjuHUToZw9FrDRc=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6426 (0x191a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C725
Validity
Not Before: Mar 28 16:33:14 2025 GMT
Not After : Apr 4 16:33:14 2025 GMT
Subject: CN=67e6cf4a-bc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:9b:8f:58:97:f0:e5:6a:41:dd:b7:9e:3e:
73:2a:55:01:07:ed:6b:ae:2f:db:2b:25:76:0c:14:
32:ec:60:7d:42:7d:9f:ad:93:e1:1f:40:3a:8a:bb:
35:54:0d:3f:f0:e1:ce:55:6e:85:14:c2:1b:ad:6f:
a5:6d:5e:39:29:2d:93:3d:0d:77:90:0c:6f:b8:5b:
49:08:bd:a8:c5:50:44:af:71:da:ce:38:b6:74:fc:
17:da:10:cd:4f:09:e3:76:e2:d6:86:77:56:b7:c2:
0f:67:bd:d2:f2:f5:d3:2d:76:1e:a0:db:1e:1b:e7:
31:77:bd:58:28:8f:10:cd:4c:02:54:90:fe:22:9c:
7f:89:00:93:46:e6:fe:d6:3f:3a:88:c7:1c:40:b6:
86:30:2f:58:59:53:da:59:2f:37:06:37:2d:50:77:
98:83:95:43:29:24:ed:3d:87:c4:32:91:11:29:8e:
ad:b2:2a:03:da:2f:34:33:75:00:3f:c8:2c:e5:9b:
6d:4f:ab:94:58:47:bf:1c:8e:85:a0:ce:2e:e4:00:
32:3f:c6:11:c1:54:c4:84:65:f0:39:ed:6f:72:18:
70:40:6b:79:bc:ec:bb:fe:0f:09:ed:44:a6:fb:c7:
0d:e5:03:fc:e0:45:29:92:ab:5e:13:e3:3b:88:86:
e0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:35:D7:88:8C:12:E5:5A:73:C1:64:D3:6F:1B:EF:58:F4:D4:DF:81
X509v3 Authority Key Identifier:
keyid:ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:b1:d8:8f:79:f0:96:aa:8f:2c:ec:16:47:54:4a:42:a9:85:
3d:db:7b:bc:cf:51:0a:b2:b4:ee:6a:91:0a:c7:ea:d2:c2:33:
e7:8d:e7:1c:94:db:ae:73:5d:f5:00:5c:36:e3:dc:94:3b:83:
16:5d:d0:1f:03:20:90:6c:9e:75:7e:0e:06:11:8b:fd:8a:44:
cf:21:3b:9d:06:92:ba:cf:f9:b1:9a:a6:bb:a6:fa:d7:ef:d5:
1a:34:38:cc:2e:f6:ab:78:cc:1d:d3:9e:1d:e1:a1:a8:d3:b4:
56:31:9d:89:73:4d:6e:68:d7:d0:d9:36:d6:24:f1:98:46:6c:
0d:5d:bb:91:9e:31:52:e4:55:80:b4:7d:f5:48:2b:bd:fd:fd:
52:bf:a7:ee:d0:0c:86:7c:83:41:80:da:98:84:8a:83:be:2c:
4c:ab:f5:68:61:c2:01:b0:84:27:6b:81:1d:10:c3:11:e1:f9:
98:b4:5d:61:c9:c2:55:e8:6a:a0:71:fb:fe:af:9d:78:8b:08:
5e:5c:20:61:c0:58:f1:44:b8:ae:fd:ce:39:cb:88:7e:e2:8c:
97:3f:09:7d:08:b0:e6:b9:7d:65:05:1c:72:af:1d:90:77:39:
90:f9:88:25:d5:4a:92:44:1b:b0:e9:2d:0b:44:1c:7a:54:3c:
cc:6b:e0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:28 2025 by rpki-client