Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
File: 4VZP2lztXK5pQVMJftGUJVEgkiM.mft (raw, json)
Hash identifier: 3c2YVoX8SIa+oxZ9Or6S2daIybmMURoxQknpHG82zYE=
Subject key identifier: 6F:B2:84:9C:57:B2:FD:67:7B:21:A6:3D:A4:EA:94:EE:4B:01:63:5D
Authority key identifier: E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23
Certificate issuer: /CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
Certificate serial: 3573
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
Manifest number: 34FE
Signing time: Fri 28 Mar 2025 14:30:36 +0000
Manifest this update: Fri 28 Mar 2025 14:30:36 +0000
Manifest next update: Fri 04 Apr 2025 14:30:36 +0000
Files and hashes: 1: 4VZP2lztXK5pQVMJftGUJVEgkiM.crl (hash: elW4k8ZtQ9mmUk7plKsCIvqS5lPRVacyBAOkP6ry+MM=)
2: F33B0916E75611EFA2A35C73C4F9AE02.roa (hash: KSCJVQafrlNBevBAAWLwTgDTtUIYrQmh69ZO5vW4WbE=)
3: 165CEF66E60911EB950D930DC4F9AE02.roa (hash: uP3i0qS5LluMvfR2PfesmPxlO4qRQ5bVxk7dZvX0wPI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13683 (0x3573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A300
Validity
Not Before: Mar 28 14:30:36 2025 GMT
Not After : Apr 4 14:30:36 2025 GMT
Subject: CN=67e6b28c-5f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7b:09:19:c6:36:30:b9:05:1a:0f:ae:7d:69:
6a:05:2c:49:61:6e:e7:8e:91:83:8d:81:de:bd:66:
90:b3:e2:70:a5:51:bb:e1:bd:f5:34:3c:86:55:7b:
a8:2f:ab:4a:16:4a:62:2d:7e:bf:22:71:30:94:8c:
17:2e:fa:6b:e1:b1:b7:46:30:ca:da:ac:46:d2:c2:
93:de:79:ad:ab:ad:29:3c:2d:28:29:20:7b:99:e6:
1c:d7:fb:bc:ed:d9:90:8b:43:4a:69:71:38:22:04:
3a:f4:e8:88:63:fc:c2:bb:d3:09:cc:47:19:3f:d3:
32:cf:7b:29:96:1f:a5:92:ce:17:18:e2:d7:07:b1:
6a:c2:63:75:08:87:15:f6:58:49:96:b3:8e:29:d4:
d4:f3:3d:8d:82:87:3b:95:b8:e3:22:16:e9:3a:76:
53:ee:cc:83:e8:c4:bb:b0:aa:7f:87:c8:a4:03:c7:
f5:95:ea:9c:67:c8:70:dd:99:d5:2d:29:88:fc:3f:
6f:54:22:28:97:a7:36:75:52:14:39:ef:62:e3:26:
bd:e1:d1:1e:cc:ee:5c:1d:4e:f2:23:ff:e8:bc:40:
25:0a:d2:27:5a:24:59:50:63:c8:31:79:c3:f5:4d:
3c:22:a7:5b:bf:e5:77:52:d1:d1:c8:cc:e4:8a:83:
2f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B2:84:9C:57:B2:FD:67:7B:21:A6:3D:A4:EA:94:EE:4B:01:63:5D
X509v3 Authority Key Identifier:
keyid:E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:94:d9:25:b9:b0:e4:7e:98:eb:59:20:a6:6c:bc:6b:69:cc:
7d:d5:b6:f2:40:3c:d9:67:bd:f5:0b:8b:fe:f1:dd:f0:41:22:
19:6d:ff:34:20:bf:c6:43:a3:6a:14:45:04:10:c8:79:77:b2:
35:98:73:96:9a:ea:8c:c6:e0:73:61:2f:1e:36:9a:8f:2a:c1:
df:bb:21:cd:45:d8:58:d9:16:b8:93:19:7e:aa:4e:6f:11:ae:
65:70:17:15:2b:96:9f:12:29:ef:e9:76:20:62:96:5c:21:db:
31:5c:fe:f5:81:32:f9:e5:73:a2:f5:bf:b3:aa:82:ea:2d:4b:
69:92:b1:f1:b5:ba:3c:06:09:fb:db:f9:d7:54:ce:97:fc:79:
45:09:e5:ed:4f:a4:d0:a8:ad:70:ee:85:10:ae:b6:cb:16:cb:
f6:4f:9d:73:3d:12:24:f2:77:8c:87:7e:ed:f1:8e:16:f4:80:
37:d0:c3:43:52:90:eb:07:64:dd:35:a6:79:c2:91:9f:20:af:
d1:c6:80:86:32:1d:f5:76:60:e9:6e:a2:58:19:b9:68:2a:8c:
cf:17:c6:63:b1:2f:c6:4b:54:e0:88:7c:6c:00:94:39:f9:53:
0f:77:f7:c9:e5:7b:65:ba:2d:0c:23:cf:87:d6:c4:a5:2c:ed:
35:b1:b7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:22:18 2025 by rpki-client