
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft
File: UoKkZCr301eZKRu6RH6hQlGk1fw.mft (raw, json)
Hash identifier: Sr14BjZvMqFr2QIQKO8H/57b5Q4i0NsJQd70vS83UiA=
Subject key identifier: FA:A0:DE:CE:0C:20:F9:88:FA:80:B1:E6:CB:E4:93:00:B4:F9:91:77
Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC
Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC
Certificate serial: 081B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft
Manifest number: 1F4B
Signing time: Fri 28 Mar 2025 16:42:24 +0000
Manifest this update: Fri 28 Mar 2025 16:42:24 +0000
Manifest next update: Fri 04 Apr 2025 16:42:24 +0000
Files and hashes: 1: UoKkZCr301eZKRu6RH6hQlGk1fw.crl (hash: v3/rpRjnWUpmGL9C4Oq/MOcFUvvE6hk8d99JDkoohRA=)
2: B5E806CC8BC711EE899A5284C4F9AE02.roa (hash: A9NER4RWLAzUHssj8hz2WdFFJOhX2P8OvSLz/oFPj9Y=)
3: B797228EC64E11EE939CA20CC4F9AE02.roa (hash: siSSx9lHP7D6IdchQxrvTKGXiqmq86MYM45+RonrTU0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2075 (0x81b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91582D9
Validity
Not Before: Mar 28 16:42:24 2025 GMT
Not After : Apr 4 16:42:24 2025 GMT
Subject: CN=67e6d170-410b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:36:b3:6f:2a:bb:fd:71:c2:66:33:db:27:
66:75:78:3d:e8:62:19:80:f0:45:bb:95:10:47:c6:
ad:a6:9f:26:62:23:00:78:07:f8:a4:d5:5d:c6:73:
c0:da:7a:94:d1:a7:40:42:ff:3e:bc:e7:49:59:56:
f3:cb:10:a6:f0:93:23:47:10:89:ce:3a:c1:bb:08:
b6:56:57:51:73:a4:64:8c:33:55:40:a7:06:6f:8e:
71:d2:c4:bc:05:d7:a2:84:02:3b:57:af:68:59:ec:
d9:3d:5a:ec:af:f6:0f:84:f6:f7:79:d5:e9:f7:9b:
c2:86:9b:a6:20:bc:d1:0c:e2:7f:a0:bd:0f:00:95:
15:9e:bc:4f:59:7a:b6:3b:ce:f3:9f:b2:2b:08:66:
d1:8d:10:70:d6:67:04:0a:f8:96:ae:45:a0:bb:72:
fa:c9:ff:40:95:90:c8:69:ba:6e:41:c5:9b:10:3b:
9a:70:fb:08:50:63:36:16:f6:8d:f4:e1:51:f6:ed:
dd:f3:21:0b:43:78:39:61:df:fa:c8:cc:8e:3f:08:
cb:49:5a:b0:33:98:7e:4a:4d:c1:8b:1b:42:e7:97:
fc:55:62:55:76:99:33:b7:85:23:14:6c:c3:58:e4:
7d:b1:0b:61:1c:04:8b:3f:11:af:56:83:a3:06:9d:
16:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A0:DE:CE:0C:20:F9:88:FA:80:B1:E6:CB:E4:93:00:B4:F9:91:77
X509v3 Authority Key Identifier:
keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:59:12:88:02:a3:da:c2:ce:01:8a:29:7c:71:92:d3:dc:d2:
d6:26:40:7a:70:c4:bc:fb:46:74:94:8b:a6:97:79:cf:cf:dc:
d1:8a:e5:55:77:56:63:7e:20:ab:4a:60:7d:3f:de:f9:5c:ee:
94:57:5f:94:35:94:2e:f6:2b:c6:c2:ba:11:06:b1:ed:82:b5:
3b:08:5b:68:18:fc:ea:4f:2d:ee:e4:d8:0f:8d:e1:b5:5f:a7:
67:71:69:d0:b6:43:1b:85:87:3c:6a:13:a7:f9:1b:95:20:01:
46:4a:1c:2e:86:4a:ce:88:b3:13:ed:ad:48:e9:ec:b9:39:2e:
55:13:9d:cc:5e:0a:1d:a0:72:19:c2:3f:14:34:04:38:7a:29:
bd:8d:b7:11:3d:f3:c8:06:b8:7a:5a:25:30:06:78:cc:f9:d3:
b0:09:1f:85:88:71:d5:50:3b:eb:8c:62:fb:ae:95:c8:30:2f:
14:49:b9:a7:3b:fd:f4:e4:cb:59:cf:6d:21:89:54:e5:91:87:
3d:59:1e:71:7b:1b:93:f3:ee:2e:00:94:a9:fe:16:74:b9:cd:
ac:d9:e8:37:3e:c3:b9:9f:3a:ff:0b:39:7a:c9:25:fd:8e:5d:
e2:4f:43:c1:1d:af:ae:29:27:c4:9e:c4:70:d7:6c:d2:f6:a2:
d4:6b:7b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:54:03 2025 by rpki-client