Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
File: JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft (raw, json)
Hash identifier: MntT+FBboOf+pHeCiwqdhKx3XIKuMgiqgx7BbNPH5fA=
Subject key identifier: 65:2E:E0:85:5A:34:62:1C:04:38:B1:A6:19:95:55:E6:17:C1:FB:BA
Authority key identifier: 24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26
Certificate issuer: /CN=A91523C5/serialNumber=243D92437CE230503E548EFD293C2A6381B5C426
Certificate serial: 0DF3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
Manifest number: 0DE8
Signing time: Fri 28 Mar 2025 17:59:14 +0000
Manifest this update: Fri 28 Mar 2025 17:59:14 +0000
Manifest next update: Fri 04 Apr 2025 17:59:14 +0000
Files and hashes: 1: JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl (hash: 5JDjpjN8Eqfae6Q72jdqmuVw3YJitJr7xrucic49pW8=)
2: 72D9F434AD2411E98D9E935AC4F9AE02.roa (hash: 6yiyih3iYU5SXCZve8BQVAbNfjgN61udEXmY/BbF0dY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3571 (0xdf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91523C5
Validity
Not Before: Mar 28 17:59:14 2025 GMT
Not After : Apr 4 17:59:14 2025 GMT
Subject: CN=67e6e372-058f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:92:0f:89:95:a5:b9:92:47:5b:fa:7a:e5:
6c:a7:3a:94:0b:56:06:89:03:0a:59:7c:74:8f:27:
b9:bd:06:1f:f7:fe:19:e6:83:f6:ee:70:1a:41:65:
05:80:6a:0f:ec:db:7e:5f:0b:e7:32:e3:33:f5:e8:
ea:1e:c6:32:84:af:d7:ed:20:bb:c8:d8:11:af:01:
e9:3c:c9:81:40:d3:7c:1b:6f:aa:18:74:bd:9a:e6:
4e:3d:9b:da:4e:a9:11:d3:a7:66:21:06:af:c4:c1:
54:f5:a7:a4:3b:9f:83:df:ac:97:f2:8d:de:1e:33:
d6:cc:83:b7:3c:a5:ae:3f:25:1f:5a:c9:f1:eb:86:
96:ee:fb:a6:89:e6:a1:da:7c:1d:56:45:21:e6:bf:
29:b0:9f:28:03:3b:e0:86:dc:ae:61:f3:e2:4c:97:
ab:f7:5a:eb:e1:ea:07:c6:3c:70:ba:3d:7e:b9:b4:
d8:94:96:10:1f:ad:18:97:02:5c:ed:9d:27:53:81:
8a:79:bc:ff:02:62:06:d1:0b:90:f0:5d:6a:e6:1c:
ee:9b:d8:b7:e9:a5:3a:c1:7d:e3:86:d0:6b:f2:ea:
77:3b:f4:84:94:fb:d2:7d:f9:20:56:7d:42:6b:3a:
4e:92:1f:6a:c4:e5:a7:8a:cc:b4:31:c2:d7:f6:88:
43:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2E:E0:85:5A:34:62:1C:04:38:B1:A6:19:95:55:E6:17:C1:FB:BA
X509v3 Authority Key Identifier:
keyid:24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:e7:b1:c6:e8:5e:5d:6e:2f:ad:36:63:54:ac:34:15:1c:85:
b1:4e:a2:67:5c:c9:78:8b:4c:a1:2a:84:e5:77:4c:13:82:58:
64:44:32:3f:7c:8d:1d:88:6c:b3:47:59:4c:37:cd:64:02:1d:
ae:ca:75:52:0e:f0:27:ea:fa:04:b1:18:d3:8a:12:50:9d:c1:
35:a2:05:7b:88:cf:f2:24:ea:12:b9:64:41:3a:a5:8e:cf:b6:
c6:b3:19:0a:7e:63:f0:38:64:b8:51:54:cf:07:64:1e:72:65:
58:d5:9c:b7:5b:16:7e:02:0e:dc:d0:ce:41:e3:f8:1c:4a:ec:
eb:ff:ab:fc:92:ea:37:5e:2d:c0:6e:f9:c1:da:a9:94:91:90:
5f:91:31:8b:dd:c9:81:20:37:9b:97:35:29:f9:65:c2:4a:16:
f5:72:1a:1c:45:16:ba:53:f8:ba:48:a9:44:d4:ad:34:23:a2:
b8:f5:14:4e:62:80:8a:63:da:d9:51:73:40:e1:33:c5:90:d1:
1b:20:11:f4:a1:bd:cc:ad:1b:aa:e3:4a:c0:0d:fd:7e:44:7e:
91:33:04:e9:b2:15:a7:ef:a7:ea:dd:1e:87:56:de:59:31:aa:
8d:fb:6b:6a:24:3a:d1:a1:31:ed:6e:95:32:81:ec:01:0b:e3:
ce:51:a9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:32 2025 by rpki-client