Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft
File: iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft (raw, json)
Hash identifier: YHtKSExKpXpOWH08ZOvnq/1DyVLWhBv1yZHNlr92GSk=
Subject key identifier: 4B:B3:23:D3:8E:54:E7:85:B8:2F:5C:D9:58:E4:74:FA:6E:8B:E4:78
Authority key identifier: 88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44
Certificate issuer: /CN=A9157DA0/serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44
Certificate serial: 3478
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft
Manifest number: 346D
Signing time: Fri 28 Mar 2025 14:36:45 +0000
Manifest this update: Fri 28 Mar 2025 14:36:44 +0000
Manifest next update: Fri 04 Apr 2025 14:36:44 +0000
Files and hashes: 1: iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl (hash: daClFipWpqn9A5TUIvjk84St+gf2ZX9me9cQOb4hpKY=)
2: E5A47506DFCE11EFBC4CD631C4F9AE02.roa (hash: oAbHn+ZIVueY57m3XmFrOLBMGmy5b8O5gqzUSLNcsVE=)
3: E52708AADFCE11EFBC4CD631C4F9AE02.roa (hash: dLnVNOk6AACzjjAAnQNLqgLe86qSgv2DVsFZWQrJkGE=)
4: E7CA9A12F28F11EF94898048C4F9AE02.roa (hash: rJGKRn0XyR4kN0LyLJ82cFypSKxMq+DWtPISJ48AypM=)
5: E4BA3CE8DFCE11EFBC4CD631C4F9AE02.roa (hash: 4+RdyQ+hnd6pbTE/5LdrnKoInk1iU8nhkLu8ihHrocA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13432 (0x3478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157DA0
Validity
Not Before: Mar 28 14:36:44 2025 GMT
Not After : Apr 4 14:36:44 2025 GMT
Subject: CN=67e6b3fd-d498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:fe:30:a5:68:03:fd:e2:f3:9d:2b:09:8e:
10:7f:55:29:77:2c:3b:20:91:ec:0d:47:57:be:d0:
1d:9a:40:8f:aa:26:71:a4:00:84:31:00:8d:da:b3:
4a:4d:3e:6a:8c:d1:9d:68:87:32:be:78:a4:50:80:
78:84:85:78:ea:a6:b5:57:88:6f:03:1d:df:25:04:
7a:76:39:f1:db:06:04:12:1d:f3:4e:08:77:4e:8d:
8e:0c:d9:46:4d:2b:a8:77:da:4c:9d:ad:bd:33:b3:
3e:27:25:57:35:cf:29:ed:33:05:92:ec:06:2c:a0:
d9:57:69:ba:12:1c:e0:d6:c5:b3:c2:ab:2c:4c:d5:
38:d3:15:c3:45:c9:ed:dd:ae:cd:5f:18:62:45:0f:
4c:1a:c0:a6:5d:86:16:e3:9f:09:f4:06:eb:6f:c4:
29:c4:a0:85:e9:c5:e2:d9:c4:d1:24:82:5a:fb:ec:
24:76:86:04:4a:61:3b:be:2f:1c:03:4b:5b:18:94:
b0:15:b9:5f:80:49:6a:98:c3:b5:45:33:d0:e0:3e:
b8:d7:a2:fb:36:b8:5c:fb:e2:36:7a:d9:7d:73:f0:
73:75:c1:b6:f7:f8:a8:7b:98:0c:14:af:8e:23:56:
b2:72:80:0f:69:ef:a1:72:08:76:93:cc:4b:9e:53:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B3:23:D3:8E:54:E7:85:B8:2F:5C:D9:58:E4:74:FA:6E:8B:E4:78
X509v3 Authority Key Identifier:
keyid:88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:04:de:fe:76:9b:42:24:e5:2e:97:43:c6:51:9f:1d:99:26:
26:80:ef:43:f0:5e:74:85:8d:dd:fc:a9:7d:13:7e:1e:19:46:
ae:8c:69:84:39:e0:c4:53:1d:0d:03:59:89:21:be:67:29:de:
cd:1d:61:d5:4e:c4:3f:66:23:27:7f:2d:4b:3a:d5:64:16:56:
f0:ad:b2:15:03:3d:d6:ab:80:e6:da:19:71:34:a0:65:47:6c:
52:37:8c:2b:a9:a7:de:b0:ed:fd:9a:da:f3:2c:b6:38:9b:92:
2b:ea:19:48:dd:49:8d:54:7f:a4:0c:95:ec:47:e9:14:44:29:
56:7d:70:90:c3:a5:c0:0b:ef:d1:9f:0b:c4:5a:de:cb:4c:41:
d8:b9:22:3f:52:7f:b5:b0:39:ba:61:d7:ba:ef:2d:4d:b7:5b:
d7:87:49:32:78:ed:39:ca:70:29:58:6d:08:a4:f2:bf:92:5f:
4d:4f:49:08:e2:d0:a6:0c:54:9f:e6:fc:8d:78:fa:49:51:bc:
f9:26:57:16:2c:3a:f4:5e:cf:0b:c7:cb:9c:ef:86:17:52:5f:
2e:bb:ee:77:85:7d:85:94:50:15:a7:99:64:33:87:78:69:bb:
67:1f:30:2a:89:8b:05:94:c3:85:1c:bb:9e:2b:a3:2b:70:b0:
b3:e8:cf:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:03 2025 by rpki-client