Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft
File: NEp3XiRcztCAx5UhWW4yyPBtiMg.mft (raw, json)
Hash identifier: xzOv+Ep6lwywN3CIStDFRQo7mPVvq0gENESUukfNskw=
Subject key identifier: B7:E6:EB:15:35:B2:F2:90:90:E8:4E:C2:24:9A:34:EE:53:0F:FD:1E
Authority key identifier: 34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8
Certificate issuer: /CN=A915517D/serialNumber=344A775E245CCED080C79521596E32C8F06D88C8
Certificate serial: 1783
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft
Manifest number: 176E
Signing time: Fri 28 Mar 2025 16:42:39 +0000
Manifest this update: Fri 28 Mar 2025 16:42:39 +0000
Manifest next update: Fri 04 Apr 2025 16:42:39 +0000
Files and hashes: 1: NEp3XiRcztCAx5UhWW4yyPBtiMg.crl (hash: WU5yvlu/KHiIQV666VwZ5kexmuPIXEpCGai+rTF1Bog=)
2: 2F840DD2740911EDA7146F2DC4F9AE02.roa (hash: PKyy2enQZwJAPAGB65CItDAb1Yve/y7L5I1YK7Ph1yU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6019 (0x1783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915517D
Validity
Not Before: Mar 28 16:42:39 2025 GMT
Not After : Apr 4 16:42:39 2025 GMT
Subject: CN=67e6d17f-450b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fd:8c:97:e5:a8:5d:60:d9:ed:bb:02:25:db:
08:e2:ff:f4:d1:54:07:e7:14:4f:f8:25:e9:fc:90:
91:92:a3:98:a3:90:35:05:fb:a6:ac:79:96:10:0a:
f1:8b:8d:a6:f0:75:46:33:a6:be:2f:8b:b3:a1:03:
c9:57:8c:bf:56:4d:fe:cd:ca:25:52:3a:ae:8b:b6:
44:42:83:78:d7:9e:ef:6d:b5:d0:44:c6:ea:c8:86:
ff:38:f4:71:a1:b0:cc:85:dc:9f:6c:26:3a:fd:91:
40:3c:f5:46:f9:97:57:07:f1:77:6f:6b:51:0e:b7:
30:b1:96:00:85:53:ea:b4:b2:81:98:1b:4a:34:a9:
a7:73:10:e1:fb:e8:c0:10:94:19:92:d7:3e:a8:d5:
62:06:3b:d0:ba:ee:90:12:b2:8c:64:8c:c3:9f:24:
c6:5b:85:8f:52:22:21:cd:1e:92:aa:76:61:49:1a:
0a:b1:0a:82:ad:5d:39:7f:63:6a:db:ed:e2:61:2d:
ee:20:c8:0d:56:3d:5c:a9:bf:8d:45:11:09:79:05:
22:eb:bd:65:c6:70:d5:7b:71:f1:60:2a:f8:6a:21:
5d:ef:3d:0a:12:05:97:96:69:68:75:df:83:f6:75:
d1:82:15:23:64:09:c0:95:88:cb:92:d3:2f:52:c3:
9a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E6:EB:15:35:B2:F2:90:90:E8:4E:C2:24:9A:34:EE:53:0F:FD:1E
X509v3 Authority Key Identifier:
keyid:34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:dc:01:ba:22:34:98:ea:dd:35:a6:58:69:b3:04:9d:35:3e:
40:be:09:ac:78:d5:09:2e:d7:0e:73:f0:85:0d:ca:50:2e:72:
27:ff:9b:e5:a6:ef:6b:50:41:76:de:74:3c:e0:d8:94:10:46:
29:27:5a:91:2a:63:8d:39:57:e2:e8:2b:25:32:14:50:a1:2b:
f3:a7:78:ca:07:17:51:56:8b:6c:39:3d:e6:8f:30:94:54:9c:
04:e1:1c:d4:cf:69:6e:04:57:5f:d8:70:c7:92:60:b2:12:14:
2f:99:8d:37:6e:ee:c2:43:bf:ba:d0:c5:56:26:4b:50:cc:c5:
53:ec:90:a4:3a:bb:fa:6f:ba:a4:6b:e8:34:85:40:a4:c7:03:
fb:d0:ed:db:54:a2:65:87:d2:d9:76:30:0f:ee:71:b9:bb:d9:
0a:8e:9e:7a:76:47:79:eb:0c:14:f3:e0:ad:61:10:57:4c:95:
21:0e:38:e0:5f:e3:23:79:e9:c2:52:2f:12:ee:fb:cc:63:32:
74:3b:dd:ec:84:42:e0:9b:3d:7d:f1:c8:cd:94:6b:5c:d6:00:
42:a0:5e:c1:7b:1d:67:9a:53:09:a6:6a:e7:0a:11:1b:89:bd:
11:74:89:b3:56:6a:7e:db:16:99:19:2d:4c:62:ff:51:45:67:
20:c5:b1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:34 2025 by rpki-client