Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft
File: lDuBQuFVPslGJaRyTlaYKhVY_pw.mft (raw, json)
Hash identifier: N2mM4cyXgkeMYyi/FGCfVwmlRb+IH21wG8H7uyNonlE=
Subject key identifier: C9:F6:8C:3F:00:43:05:6C:FB:F9:01:47:D2:90:A4:37:B5:64:3B:1E
Authority key identifier: 94:3B:81:42:E1:55:3E:C9:46:25:A4:72:4E:56:98:2A:15:58:FE:9C
Certificate issuer: /CN=A91582D9/serialNumber=943B8142E1553EC94625A4724E56982A1558FE9C
Certificate serial: 1772
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft
Manifest number: 1F4A
Signing time: Fri 28 Mar 2025 16:42:22 +0000
Manifest this update: Fri 28 Mar 2025 16:42:21 +0000
Manifest next update: Fri 04 Apr 2025 16:42:21 +0000
Files and hashes: 1: lDuBQuFVPslGJaRyTlaYKhVY_pw.crl (hash: a+GL0wVeYpHSgvBb30CGnnoTqmx3hmf/a/KGFnoyL9g=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6002 (0x1772)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91582D9
Validity
Not Before: Mar 28 16:42:21 2025 GMT
Not After : Apr 4 16:42:21 2025 GMT
Subject: CN=67e6d16d-97d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:17:03:a4:6b:5d:c9:80:9c:3d:ca:ee:17:
e8:57:b1:76:1a:b5:7a:64:ab:1c:d5:1e:7f:58:50:
9e:f6:83:f2:49:27:f6:d2:6f:72:32:a8:99:3e:e8:
0a:82:9b:0d:ab:d1:46:93:74:51:f6:c0:9b:78:76:
fa:5b:2b:dd:b1:a5:e6:dc:cd:33:7c:ca:43:49:5d:
ab:19:cd:ee:6b:06:82:84:70:28:83:53:1c:5b:f2:
a9:bf:54:f5:14:d0:13:94:3d:15:45:a8:66:da:15:
e9:fb:91:bb:28:66:e2:81:47:b2:f3:95:91:e4:70:
f1:a8:8c:07:6a:7b:87:63:1a:41:99:17:55:96:10:
5c:6d:2b:fa:a7:34:28:ba:c5:94:7a:bb:d7:d7:c6:
23:e4:8a:15:89:e9:c1:8d:18:8a:74:ba:99:32:4f:
d5:48:60:22:7b:55:72:e5:d6:9b:86:e1:c3:9d:bd:
3c:ff:65:23:cf:b9:2e:c4:36:44:7d:dd:f0:a6:aa:
55:17:ed:ae:19:e9:23:26:d9:7b:a5:6d:f1:ae:cc:
79:a1:b2:56:92:64:1d:c9:38:84:61:ef:03:b0:f6:
e2:6a:25:c3:79:36:26:b5:8d:d6:65:e4:a7:05:e7:
4f:86:44:63:f1:ce:db:c6:b0:19:8d:88:70:a1:76:
6d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F6:8C:3F:00:43:05:6C:FB:F9:01:47:D2:90:A4:37:B5:64:3B:1E
X509v3 Authority Key Identifier:
keyid:94:3B:81:42:E1:55:3E:C9:46:25:A4:72:4E:56:98:2A:15:58:FE:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:33:a5:de:57:f1:f4:48:73:2a:12:ed:6a:ff:6a:21:2f:55:
9f:ef:38:3e:07:c6:6a:08:1f:cf:86:8b:c4:68:69:fe:31:6c:
c2:9f:01:76:01:ba:02:ac:67:a3:11:26:dd:80:3f:93:62:ad:
ff:e8:78:0d:21:b9:88:4e:44:4a:6e:a9:e1:e8:71:d7:42:cd:
94:2b:14:55:aa:04:6a:10:9a:f3:1e:c2:2b:a4:38:1b:a6:74:
ca:a3:de:30:99:4e:8c:7a:c4:03:98:b6:c5:b8:e5:d9:88:d5:
05:41:53:13:64:d2:8c:95:46:46:36:c4:a5:80:90:ad:1b:6e:
d5:c8:ce:cd:78:af:5f:a2:4f:fb:a9:25:6e:56:f6:38:33:0e:
52:44:85:0b:ed:04:b6:0f:a2:d0:11:ce:e8:f8:8a:92:d3:8c:
65:c8:a7:8e:1e:58:d3:31:64:07:b1:f1:1f:58:f1:62:b0:8f:
21:55:61:f6:ed:a0:bb:96:f5:b7:59:64:d6:1e:6e:04:a1:ca:
94:96:8e:54:35:09:11:39:52:b7:12:5a:ba:bb:a2:11:a8:24:
e3:b3:6a:19:8c:07:02:ec:9b:cb:ae:cf:b7:2f:5e:c4:99:2e:
a5:60:7b:0e:ee:15:20:fc:64:5a:ef:44:5f:4d:5d:1d:c4:0a:
31:12:bb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:36:03 2025 by rpki-client