Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
File: JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft (raw, json)
Hash identifier: e8VIaYP5l1Oz2YyHijE5tsqAP9+xXvZBiiGa4PaLf+Y=
Subject key identifier: B2:D6:FA:59:2D:30:F0:3C:7F:CC:B2:19:FE:F3:89:41:0A:58:A7:DA
Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4
Certificate issuer: /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
Certificate serial: 24D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
Manifest number: 24BD
Signing time: Fri 28 Mar 2025 15:51:28 +0000
Manifest this update: Fri 28 Mar 2025 15:51:28 +0000
Manifest next update: Fri 04 Apr 2025 15:51:28 +0000
Files and hashes: 1: JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl (hash: afLjqa+L7224vLlZzsEAa8wMabCzlisgSx4rK89chrg=)
2: DFA7FACA54F711E7BFB4804BC4F9AE02.roa (hash: UuPwuIeTjohMOX9eFmpeIez6sJHzI9RwlcD5tmgLAN8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9426 (0x24d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AA0F
Validity
Not Before: Mar 28 15:51:28 2025 GMT
Not After : Apr 4 15:51:28 2025 GMT
Subject: CN=67e6c580-31e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9b:7a:6d:e4:ee:5a:85:50:00:21:d9:e8:7d:
13:8b:cb:1d:9e:e7:b8:5e:ca:04:58:26:51:fb:81:
b6:49:da:d2:31:80:3c:b5:f8:63:a7:a0:e9:ab:64:
e4:83:03:4a:16:38:cf:86:bd:da:d6:e4:ab:4f:7d:
92:cc:5d:cb:69:b2:58:77:c0:5a:5e:f4:05:8d:31:
0e:be:10:4d:2d:b3:18:01:b4:3a:52:26:8b:56:93:
88:74:ba:be:0c:63:81:0f:2b:4f:98:c5:4f:80:92:
cd:30:c7:8b:6c:3b:f0:89:28:63:20:93:d1:1d:08:
6a:92:21:c7:c6:3b:ef:49:8a:4f:6f:f1:2d:bd:32:
9a:2d:fe:56:71:33:08:29:ee:b6:48:e5:5d:5f:66:
70:73:65:39:a5:0f:9f:f8:82:d2:f6:96:67:0d:61:
d4:40:06:6c:3a:92:e6:17:7d:7c:b7:02:b1:2d:52:
ad:d5:85:8f:3b:9c:e6:3d:3f:dd:92:c4:60:39:7b:
85:0b:f7:1c:dc:0d:66:46:a7:86:fd:27:7e:c8:2a:
e0:9e:e4:71:8a:ea:56:02:b3:a5:dd:52:c1:47:65:
55:e2:82:de:8b:7d:88:cb:b4:ad:c8:6e:d5:bf:64:
c0:74:b0:e9:ab:b9:ec:69:e7:2c:5e:e8:5d:02:94:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D6:FA:59:2D:30:F0:3C:7F:CC:B2:19:FE:F3:89:41:0A:58:A7:DA
X509v3 Authority Key Identifier:
keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:61:53:57:25:fb:35:44:94:ff:e5:c2:e4:87:0c:c6:06:e3:
5b:69:90:c9:34:be:a8:fa:b7:83:a8:d5:88:e7:6d:48:20:ba:
04:97:6e:20:83:51:f6:ee:91:cc:18:3c:30:0f:78:4b:45:5d:
2b:b8:95:61:45:a4:34:5a:95:e4:68:56:48:14:b9:08:eb:8d:
5f:cb:ae:d1:11:12:42:05:6b:47:5b:5a:9d:c4:e7:7e:b4:ce:
9a:71:a1:4d:fb:7c:58:be:6d:1e:73:52:cc:62:98:58:9f:ef:
33:ad:ee:82:7d:88:96:d9:d8:e5:c6:e2:9a:4d:e8:28:20:65:
9f:e6:73:28:3f:f5:16:34:16:70:5d:d9:80:64:1a:20:10:ff:
ef:74:a8:a5:d8:3b:98:e5:89:81:a1:73:40:9f:b6:c0:dc:30:
05:3a:46:ba:e7:57:5c:89:cd:e4:82:fc:cc:38:ee:5b:1d:fb:
3b:98:42:79:3d:b8:db:99:6b:69:b2:da:a7:f5:28:59:70:9b:
ee:e5:6c:31:1b:1f:43:c5:7f:bd:53:65:d4:67:9c:33:88:74:
7c:0b:17:35:a0:b2:c1:b4:71:0f:04:95:b6:f7:f2:35:45:56:
1c:d2:d5:ff:b5:fe:8e:58:ba:73:54:f8:94:8b:25:f8:76:a2:
34:f6:98:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:50 2025 by rpki-client