Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
File: UuFqm4muyCoM8IXPWufcPrCPDJE.mft (raw, json)
Hash identifier: xbyDOCcLdAd2SkhiW8B2Q+L/yTpxEXD7JOOodioY+Ws=
Subject key identifier: 7D:9B:41:91:15:46:AE:70:6C:09:F9:E1:F5:5C:3D:DC:9C:3C:A9:CE
Authority key identifier: 52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91
Certificate issuer: /CN=A915CA20/serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91
Certificate serial: 0FA9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
Manifest number: 0FA1
Signing time: Fri 28 Mar 2025 17:37:56 +0000
Manifest this update: Fri 28 Mar 2025 17:37:55 +0000
Manifest next update: Fri 04 Apr 2025 17:37:55 +0000
Files and hashes: 1: UuFqm4muyCoM8IXPWufcPrCPDJE.crl (hash: NJsWxSC8lA4UbLBZzjMw6X/QbGB0rdrm4en76fhV7VQ=)
2: 63B80D12552011E9BA55007FC4F9AE02.roa (hash: fTPZgUpfkCrRNcsWrVhyFlyMxo5DlfFLB/9BRl5cziM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4009 (0xfa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CA20
Validity
Not Before: Mar 28 17:37:55 2025 GMT
Not After : Apr 4 17:37:55 2025 GMT
Subject: CN=67e6de73-43de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7f:13:f4:d4:f6:50:ab:b1:6b:24:1c:19:86:
f6:67:d0:54:9d:8a:43:09:35:47:c0:e0:78:98:c6:
94:d1:ca:6a:4f:cc:9b:a3:18:60:28:93:98:0b:42:
89:5f:46:27:dc:83:5a:c8:3e:47:34:b8:8e:1e:4c:
74:03:81:7e:b1:05:60:7d:c2:16:c6:c8:e1:2a:67:
67:69:d9:d5:26:69:e1:18:a5:f5:56:70:e2:2e:1f:
9d:4d:d3:b2:56:51:91:7a:51:1f:6e:10:66:09:e5:
18:6b:87:cc:9b:9f:aa:27:fc:f7:4c:aa:ee:7e:a1:
f4:33:06:90:7b:9b:5d:80:19:4e:94:73:db:65:f2:
53:25:b2:1b:5b:1b:2a:01:c3:4b:6c:50:9d:a8:b9:
51:32:74:b8:54:ad:69:98:51:5c:dd:a1:ae:7d:3a:
b8:d8:51:ae:2c:60:49:25:cd:49:f4:2b:c8:33:53:
be:f6:d2:bf:58:9f:af:e8:50:43:39:1f:22:14:e6:
96:58:19:fa:2c:64:ea:1d:50:14:6a:4a:1f:2c:52:
68:68:58:27:0a:cb:5a:df:c0:7a:10:87:e6:aa:84:
25:87:5b:66:c4:b4:33:5b:b9:44:87:4c:10:94:81:
66:a3:57:7f:82:5a:32:db:7d:90:2b:97:26:8b:95:
29:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9B:41:91:15:46:AE:70:6C:09:F9:E1:F5:5C:3D:DC:9C:3C:A9:CE
X509v3 Authority Key Identifier:
keyid:52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:5c:92:d3:42:6b:4c:71:b6:9b:e7:a3:6c:07:20:c5:50:c4:
cf:c3:59:a2:b4:30:5c:38:65:21:26:f2:64:6f:5a:d8:f3:ed:
e8:55:ef:fb:7e:26:81:74:d6:da:9c:0c:30:2e:45:6f:00:48:
5e:6c:7e:6b:fc:16:31:5d:e2:58:c9:4e:96:d9:07:f6:d5:d6:
11:10:22:b8:8e:0d:1f:68:76:55:35:37:3d:42:5f:e6:d9:44:
de:65:a5:49:1e:ba:a3:f1:71:57:e1:82:1d:30:bb:6d:32:7a:
c0:a8:85:3d:ed:06:da:6e:5e:bf:16:2d:d1:20:9c:99:ff:a4:
8b:2a:d1:96:dc:d5:de:e4:c9:55:6d:1c:5c:2d:65:b5:25:24:
06:0c:ac:56:3d:2a:c2:d0:49:d5:e4:4b:49:bb:d9:10:79:b7:
80:85:25:e3:fd:ef:d4:22:61:7e:bd:51:58:84:d1:f9:f9:ad:
51:ad:6c:41:4b:f0:aa:ed:0c:d0:09:43:54:f0:49:ac:45:d0:
7a:23:8c:98:66:51:37:65:d8:81:1b:1e:1c:34:b6:a2:62:8b:
00:2d:3f:a9:b2:d6:ef:c0:88:8d:13:37:37:06:04:03:84:e3:
cf:db:8c:87:f9:2e:3f:27:fc:4e:0a:6f:4a:c2:cf:50:a7:52:
0c:a0:ab:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:41 2025 by rpki-client