Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
File: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json)
Hash identifier: +DxK9//t2ckJ+uunuoDS5kSPH2brzdTgkamRrsMep4s=
Subject key identifier: 1D:D4:A1:7A:B5:C0:D5:90:1E:72:B5:9C:60:93:D7:76:7E:84:B7:16
Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92
Certificate issuer: /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192
Certificate serial: 0C21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
Manifest number: 0C11
Signing time: Fri 28 Mar 2025 18:48:19 +0000
Manifest this update: Fri 28 Mar 2025 18:48:18 +0000
Manifest next update: Fri 04 Apr 2025 18:48:18 +0000
Files and hashes: 1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: Au7RYAFjHnrxA/HSzWe1blmyuO2IIyvFxuLfEiQSEmo=)
2: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: gBEi2R13VWPv9ID88Yp79OfFGvAVYE/s6Ssf5W2fwwk=)
3: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: LEAp/LEvn2wmVSYlgep7H8tvqMhftOe6qW5nlWlQ4tA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3105 (0xc21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DC92
Validity
Not Before: Mar 28 18:48:18 2025 GMT
Not After : Apr 4 18:48:18 2025 GMT
Subject: CN=67e6eef3-fb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:19:ac:b6:1b:2d:2f:96:cd:ae:9c:08:28:
98:95:3c:96:17:23:9b:06:1a:e9:61:4e:6e:8c:0d:
2f:5e:a5:4d:b2:07:59:74:0f:23:f1:2f:79:43:59:
13:7c:5a:2a:d8:54:e8:64:c5:a5:25:ad:8d:79:aa:
38:8f:60:b2:d4:e1:e9:d5:f5:1d:b3:3c:b3:d4:9a:
04:35:5b:a0:5a:20:14:47:d9:54:f3:68:94:d0:da:
e5:ed:a2:89:87:eb:f9:44:0d:5e:e9:61:72:91:03:
3a:d7:71:6e:73:6e:1a:dc:31:14:bc:e4:0a:b3:d1:
5b:99:f2:2c:3d:a0:03:82:87:b9:06:85:32:fd:02:
cf:97:4b:db:4b:1b:df:08:d8:0c:4b:5b:16:7f:bb:
a5:32:e0:26:70:d5:5e:76:25:14:58:af:14:22:3f:
47:29:35:e1:9d:95:18:78:9a:77:e4:fe:1a:0f:8a:
b0:e8:58:98:07:dc:3c:e6:f4:3b:e9:7d:7f:4b:e2:
ab:de:fe:ac:98:36:c2:91:db:39:5f:d7:cf:59:9a:
28:fa:df:5c:28:f4:8b:e5:e0:3a:44:1d:d7:77:2b:
84:17:8b:1d:62:f0:7d:89:61:70:ab:64:ae:6c:60:
87:ea:8b:da:84:06:b3:49:48:83:72:a8:04:6c:99:
af:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D4:A1:7A:B5:C0:D5:90:1E:72:B5:9C:60:93:D7:76:7E:84:B7:16
X509v3 Authority Key Identifier:
keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:eb:98:46:7a:be:88:22:f9:66:a6:c2:8a:36:5b:e5:22:a0:
dc:d9:19:80:09:0c:8e:00:96:76:f6:ba:2d:87:8e:4f:b9:c4:
7a:be:6b:c6:84:02:9f:28:b7:79:0b:d9:64:8e:c3:90:3f:2b:
97:d4:d0:f8:bf:87:15:6e:e8:4d:d3:ff:30:6b:0e:4d:c5:5b:
85:0e:2c:db:6b:4b:be:0a:e0:5e:b9:9e:7c:c0:f9:83:bf:14:
73:60:8e:e2:db:ce:83:8c:38:87:07:cd:d4:6e:9e:ea:5d:69:
75:61:a9:75:09:90:42:e5:8b:df:b0:a6:75:7f:d6:63:75:27:
a1:6b:67:40:e9:d0:82:05:bc:1c:82:ef:03:06:89:53:b0:7f:
d3:a7:eb:02:06:a0:f2:3a:ad:89:83:b0:9c:68:5c:bd:70:2a:
7b:9d:12:f0:0d:41:39:a4:5d:6d:34:8c:c3:35:75:a3:54:be:
a4:67:d3:88:16:c2:9c:43:a8:f9:30:0e:02:a6:16:6a:9d:75:
51:61:01:36:37:1a:9d:7c:a5:f7:d9:c3:8c:74:ad:46:b9:82:
e9:81:bd:28:50:ba:99:64:6b:dd:d8:19:51:58:5d:3d:d8:ce:
cb:2d:9b:ab:94:a4:14:29:09:8e:fd:27:4b:9c:08:41:3e:52:
cb:a6:7c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:26 2025 by rpki-client