Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft
File: Di3qFP18_9DQqeo-N0N7keRUsjY.mft (raw, json)
Hash identifier: rfJzkY0xvkaCXS1tdVExoZ7yEq+G1iJuHcXVsBvDOyo=
Subject key identifier: 40:0F:E3:0A:89:EE:0D:CB:E9:0B:56:D2:C4:89:15:53:0C:71:96:B5
Authority key identifier: 0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36
Certificate issuer: /CN=A91560A3/serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236
Certificate serial: 1160
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft
Manifest number: 115A
Signing time: Fri 28 Mar 2025 17:21:37 +0000
Manifest this update: Fri 28 Mar 2025 17:21:37 +0000
Manifest next update: Fri 04 Apr 2025 17:21:37 +0000
Files and hashes: 1: Di3qFP18_9DQqeo-N0N7keRUsjY.crl (hash: j/pmh0vDCiCUL/G1VoB33EKC7MO0I8SPlZW3/DRq0dM=)
2: 2245CE0A606811EB80E3D531C4F9AE02.roa (hash: PSSQDCbjfGOv5hsREHHq3AE69qVBQBbQjxmYclshFuc=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4448 (0x1160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91560A3
Validity
Not Before: Mar 28 17:21:37 2025 GMT
Not After : Apr 4 17:21:37 2025 GMT
Subject: CN=67e6daa1-3254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:99:ac:2f:cd:58:fc:77:04:93:f7:c5:54:7c:
24:1b:8f:b9:ef:b3:09:44:6d:dd:fb:b4:95:dc:bd:
0e:46:39:93:d1:88:9e:9f:7c:f1:1a:54:b0:cf:25:
63:27:7c:c6:93:f2:16:61:4d:dc:c1:36:2c:51:10:
d3:69:97:d9:aa:a2:ca:af:ad:44:2c:9c:3a:14:2c:
f4:e6:08:fd:a1:df:ea:6a:49:ad:b3:ca:e7:dd:b0:
fb:29:b3:fe:f1:76:51:c1:3c:48:11:34:25:e2:11:
c4:32:c5:f2:89:27:2e:60:e2:26:92:d2:7f:7b:e9:
fa:f7:09:85:56:db:9c:7c:3c:8d:43:6c:e3:ce:71:
26:7b:ef:a6:49:86:a4:06:09:fc:e6:82:ee:5a:32:
4d:57:cb:e5:ec:87:a0:cd:6f:21:d1:21:1e:ec:5c:
66:8f:bf:da:ea:c1:ce:8d:df:95:4d:79:06:c1:94:
29:2d:30:31:28:6b:84:84:a5:25:69:55:81:ce:7d:
cd:dc:f2:c8:2e:7f:42:e2:b7:09:4a:17:57:61:9c:
26:30:3c:ee:40:71:8a:31:e3:8b:a9:69:48:b1:44:
ad:ce:9f:35:68:16:1f:fa:d0:4c:00:b4:5d:49:ff:
69:82:a7:e4:04:69:82:19:08:63:86:a2:e9:34:20:
c4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0F:E3:0A:89:EE:0D:CB:E9:0B:56:D2:C4:89:15:53:0C:71:96:B5
X509v3 Authority Key Identifier:
keyid:0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:ae:cd:db:86:9c:7a:d3:da:b7:97:49:ec:27:4b:de:c7:a0:
b9:72:50:84:e3:3f:4d:94:b2:5c:6a:5d:c0:18:58:c8:e5:41:
0c:23:21:ec:02:94:f2:25:0b:5c:fe:9f:60:c3:d3:58:17:2f:
e2:26:1e:64:25:59:22:ee:08:71:94:ce:30:cb:dc:a7:72:0a:
bb:19:0e:11:6e:00:72:66:ae:bb:31:6d:09:50:f2:46:8a:a3:
52:e2:e9:0b:70:2b:94:cc:d5:4d:70:08:31:91:cc:66:b2:4e:
0a:9f:f4:4b:fa:64:ef:fa:57:90:dd:35:5a:16:74:dc:65:a1:
a9:69:bf:f9:a9:d1:f6:6f:a2:ac:6c:0c:36:85:1e:94:9b:f1:
96:f4:f9:9e:1c:cd:29:c1:82:5d:2b:99:11:46:93:e9:b9:b7:
b1:22:b2:9d:8a:f0:ba:fc:c9:ae:20:dc:8a:ef:10:ef:b4:e1:
70:2c:dd:c7:a9:66:4f:96:b0:1a:4c:e1:17:d4:2f:39:57:ea:
86:7d:43:ff:dc:ee:f4:f4:91:fc:23:f1:fd:ea:1b:db:d9:69:
69:4f:f7:5a:96:80:31:4f:0f:7b:62:70:80:d6:49:c8:79:ab:
fe:30:51:c8:42:5b:be:de:d4:a1:5d:8e:a5:a9:af:b8:ee:83:
47:24:92:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:39 2025 by rpki-client