Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
File: tADiGrPTJXQtuHeDDrxEB233CUg.mft (raw, json)
Hash identifier: y/P08NxQ/KXql8K2FWMhvaUWibx0RO/DoRaaUQKmbXc=
Subject key identifier: 5B:F4:F7:FB:96:DE:83:F2:35:76:AB:48:6A:71:0C:B9:32:76:A9:CB
Authority key identifier: B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48
Certificate issuer: /CN=A91658EF/serialNumber=B400E21AB3D325742DB877830EBC44076DF70948
Certificate serial: 0EE3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
Manifest number: 2B29
Signing time: Fri 28 Mar 2025 16:56:28 +0000
Manifest this update: Fri 28 Mar 2025 16:56:27 +0000
Manifest next update: Fri 04 Apr 2025 16:56:27 +0000
Files and hashes: 1: tADiGrPTJXQtuHeDDrxEB233CUg.crl (hash: vYVdlz8KDyoYastERTJ1vOIZPdZQIGW+CnA3lbVAuk4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3811 (0xee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91658EF
Validity
Not Before: Mar 28 16:56:27 2025 GMT
Not After : Apr 4 16:56:27 2025 GMT
Subject: CN=67e6d4bb-3034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cb:f2:4b:6c:26:32:50:a5:59:4b:6a:a2:2c:
9c:e6:77:51:4d:69:41:e9:fb:e5:f9:ba:96:d6:96:
54:c7:11:92:d2:2a:ee:33:d6:b3:d8:e6:65:7c:3b:
86:65:82:8b:ed:38:ba:d8:71:fa:c4:24:8a:65:bb:
c4:65:b8:9d:a5:50:d1:53:1a:a6:fb:a4:81:a5:62:
a4:be:3b:2f:01:ce:59:aa:e0:61:76:73:1e:64:0f:
4a:b9:52:32:e1:7c:3b:0f:29:4c:8b:a1:17:40:5d:
61:f8:96:a2:cf:a4:46:4b:ab:a9:f4:0a:cf:cf:20:
2c:9e:ce:c4:36:67:97:62:ce:92:d7:6b:c2:66:89:
59:e2:f9:6b:6d:35:5b:bc:9b:d8:c7:b4:6b:19:ba:
1b:66:46:3e:ef:f2:be:be:99:e2:ce:2b:29:56:0a:
2a:db:0b:3a:9b:98:5e:5c:c1:b3:76:b5:33:ed:71:
0a:78:36:15:d6:dc:3a:db:98:36:3a:ef:5d:58:1c:
9f:b3:49:37:93:33:2c:be:bf:db:70:93:ba:04:9c:
7a:ef:30:f6:bd:fc:b0:64:82:1e:3e:92:e1:61:2c:
27:ee:ba:d6:24:7b:68:84:e3:49:2c:43:39:ad:aa:
f9:c9:21:bf:df:1b:49:ab:ca:98:4f:bd:9e:b2:70:
56:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F4:F7:FB:96:DE:83:F2:35:76:AB:48:6A:71:0C:B9:32:76:A9:CB
X509v3 Authority Key Identifier:
keyid:B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8d:bd:25:4d:34:cb:d5:56:e5:5c:a9:da:64:76:d7:79:3a:
92:fa:ac:a1:36:66:21:57:6e:9f:de:af:a7:9a:fa:30:b3:5f:
64:57:e0:b7:59:64:6f:06:62:2c:6c:3b:82:25:0a:e8:16:7f:
1f:48:0e:10:e8:4a:0f:97:8e:43:e5:e6:4d:25:8a:bc:b9:02:
3b:11:35:ae:be:02:e6:16:8b:6c:5d:9c:d3:59:67:05:22:33:
ed:30:10:e7:b2:51:71:96:c8:a5:7d:f8:f5:64:37:68:5e:f0:
bf:3a:8e:d7:aa:a9:85:f2:6e:86:72:5c:52:cd:42:41:be:dc:
06:b8:e0:0f:a6:41:a0:e7:f0:c0:61:ee:f2:5c:e2:8f:4c:f8:
65:02:ee:63:d9:5d:d9:33:3b:1a:9e:7c:f5:c8:09:b3:7c:88:
19:71:66:ac:1f:b9:9f:a2:e4:84:88:af:3b:63:6b:74:77:8d:
7b:21:ec:f9:bc:16:16:f4:53:0d:79:81:e5:34:11:3b:43:fc:
03:8f:3d:79:d3:a6:5e:b1:cb:89:1e:f4:1c:04:51:cd:f2:7c:
ca:d7:c8:34:0c:45:1b:bc:bd:0a:c9:24:8a:f6:e9:2a:c5:db:
d1:e6:72:e0:82:72:cc:ad:3d:12:ab:29:58:82:35:4c:67:ce:
d0:94:ed:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:38 2025 by rpki-client