Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
File: fSGgNfHk9MpCeHMKwuUHXbIxG08.mft (raw, json)
Hash identifier: muOYV/iGg/vkQvc9RKgxBEp80AUk5nyFdWS6vWfkM7A=
Subject key identifier: A8:24:D1:B9:A0:30:D0:7E:00:05:28:04:7E:BB:09:4A:69:8F:24:A4
Authority key identifier: 7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F
Certificate issuer: /CN=A916B826/serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F
Certificate serial: 09F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
Manifest number: 09EA
Signing time: Fri 28 Mar 2025 20:08:25 +0000
Manifest this update: Fri 28 Mar 2025 20:08:25 +0000
Manifest next update: Fri 04 Apr 2025 20:08:25 +0000
Files and hashes: 1: fSGgNfHk9MpCeHMKwuUHXbIxG08.crl (hash: QsF82Ynqgk7Mqr+pFC9w/OYUByeOcibDeJhHI4NbD44=)
2: 705B0F54743911EAA55F0482C4F9AE02.roa (hash: aRBdx3NNv6wvTHtMr+7NKDgZsiQyoOhH9t5SUgsymYg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2546 (0x9f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B826
Validity
Not Before: Mar 28 20:08:25 2025 GMT
Not After : Apr 4 20:08:25 2025 GMT
Subject: CN=67e701b9-0453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e7:38:d2:8a:df:99:0d:e5:b7:4c:57:76:42:
99:3c:4c:bf:36:1c:36:76:b6:59:a7:ff:ee:eb:4e:
c4:80:f3:ce:0b:80:06:21:34:3f:25:ea:b4:ed:57:
f5:09:89:0d:e6:72:de:cb:26:a5:fe:c3:96:2a:2e:
20:74:69:b9:7e:d3:bc:58:20:4e:5f:72:62:59:83:
05:ae:88:ba:52:1c:13:5f:a6:8b:a5:e0:34:4f:6b:
7d:4a:23:54:eb:12:73:52:13:e3:09:66:05:6d:69:
0f:e3:3c:17:78:e2:46:75:af:4d:16:7f:3a:2c:4d:
75:ed:6a:ed:38:2d:52:38:61:35:87:84:73:b2:2a:
a0:99:d2:e5:76:58:b9:62:25:37:d7:c6:78:eb:fd:
ad:9d:a4:fe:fe:8a:3c:e5:f7:b9:c1:5a:ba:38:46:
10:f8:09:12:b5:2a:45:12:53:0f:51:b7:79:f4:98:
9f:06:65:74:3f:82:fa:89:f3:36:3f:70:16:33:6e:
58:b4:e8:35:ad:00:47:6a:ae:7d:69:60:e7:60:ae:
eb:e1:95:b6:3f:c6:b6:a8:f4:ab:fe:51:73:bd:a6:
95:51:9c:c0:44:e4:63:a5:4a:bc:d3:7f:2b:7b:6c:
77:e5:6c:8e:89:d1:61:6b:0b:88:2e:c3:55:09:bb:
6e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:24:D1:B9:A0:30:D0:7E:00:05:28:04:7E:BB:09:4A:69:8F:24:A4
X509v3 Authority Key Identifier:
keyid:7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:b6:35:a7:aa:e4:3d:38:3d:4b:ac:7d:fb:4e:5d:2a:12:59:
29:2e:84:1c:e1:f4:0e:48:ac:7c:26:1d:17:fd:5b:63:28:18:
c1:7e:51:80:64:cb:ed:7b:53:9e:4c:b8:8f:c1:de:21:1e:7d:
f4:45:a4:92:02:26:a0:d1:fe:d9:f9:01:c4:b8:67:d8:b3:f6:
c2:b1:28:3a:f4:fe:01:d3:86:e1:17:44:a7:ae:38:75:a5:f2:
20:69:5f:d3:12:89:12:21:94:eb:80:da:9b:a4:a8:97:08:9e:
4c:ea:75:41:b4:5d:58:25:8c:c1:35:a3:6b:ff:24:1e:0d:c3:
19:0e:27:18:2e:f6:14:e0:ce:0d:95:49:04:91:2e:7e:c4:67:
7b:18:c6:37:30:b0:19:6c:c2:e9:0f:7a:d5:30:29:5e:af:2d:
9f:a3:32:85:2f:52:ff:e0:bf:d6:38:fb:b5:00:bd:c2:f2:d1:
09:64:7e:dd:7f:24:02:82:23:0e:72:63:59:43:e2:9f:b8:57:
52:4c:18:1f:da:0e:98:f6:9d:e4:f0:7c:4b:27:37:42:a3:45:
b4:ee:a7:7d:b2:d4:2e:3e:a9:5d:e6:a0:e9:78:32:a3:1c:71:
7c:bd:f4:d9:b6:f4:ba:dc:cf:97:ac:26:d2:a5:ac:b2:f1:9f:
5e:21:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:30:07 2025 by rpki-client