Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft
File: 8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft (raw, json)
Hash identifier: MLTj0wM5BiWciPmqfGLiARdlcmA4MumshG6Md82IJ+0=
Subject key identifier: D4:DC:DA:29:1E:05:42:5C:55:92:D7:11:78:F3:1D:47:D5:3B:9B:F1
Authority key identifier: F3:FC:3E:8F:E3:FC:D8:6C:AF:0F:71:AF:6F:B4:23:1E:C5:71:BA:F6
Certificate issuer: /CN=A916E554/serialNumber=F3FC3E8FE3FCD86CAF0F71AF6FB4231EC571BAF6
Certificate serial: 0E5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_w-j-P82GyvD3Gvb7QjHsVxuvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft
Manifest number: 0E50
Signing time: Fri 28 Mar 2025 17:51:41 +0000
Manifest this update: Fri 28 Mar 2025 17:51:40 +0000
Manifest next update: Fri 04 Apr 2025 17:51:40 +0000
Files and hashes: 1: 8_w-j-P82GyvD3Gvb7QjHsVxuvY.crl (hash: eVUpP3Omzn8cIDmPsfWfraR4d7tCTDWBhhQTY25Dv5k=)
2: E8F7CA24E38211EB8BAE655EC4F9AE02.roa (hash: 7/M7b1S/qFJmA9ijaIHjOSpLsrFFzRPV61WLZ9RxN6Y=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3677 (0xe5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E554
Validity
Not Before: Mar 28 17:51:40 2025 GMT
Not After : Apr 4 17:51:40 2025 GMT
Subject: CN=67e6e1ad-5a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:af:c5:8c:a8:77:d3:10:b5:df:a9:97:f0:
95:0d:85:4f:a5:84:85:0a:31:08:22:8c:52:8b:10:
7b:8e:7a:95:46:00:c2:4a:a1:c9:7c:e9:cd:bf:a7:
e6:02:e0:09:c9:d9:47:b4:5c:5b:47:97:10:1c:7b:
a6:84:1d:f8:28:a3:16:34:b4:c5:95:84:46:31:95:
7b:e8:38:e6:af:cb:22:0a:e8:e3:37:6a:10:5b:81:
a7:32:90:67:ee:4c:49:30:85:5c:cc:b5:b9:7c:fd:
03:6f:43:0b:96:03:1c:aa:e9:83:48:f5:5b:98:21:
a7:4f:6f:d9:fa:7d:95:74:fb:36:f6:a8:9b:4f:b6:
ce:5e:b4:59:57:53:75:67:47:0a:a5:66:cc:3e:03:
bc:3d:7f:96:26:52:6a:52:39:fe:88:5e:89:55:f6:
a6:73:50:1f:0e:7d:5e:2f:20:9e:27:3f:2f:1f:0f:
5b:a1:20:38:ce:e8:a9:33:9c:cf:37:6c:2f:6a:18:
e7:c3:26:1a:24:48:98:e9:65:db:88:cf:a3:5f:33:
46:7b:73:94:48:14:93:fe:b9:15:15:d6:9a:62:ba:
55:af:d8:20:eb:76:23:06:86:2c:29:d1:14:ff:2a:
f5:d0:36:1f:25:38:b9:99:5d:fa:a5:a0:39:5a:6e:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DC:DA:29:1E:05:42:5C:55:92:D7:11:78:F3:1D:47:D5:3B:9B:F1
X509v3 Authority Key Identifier:
keyid:F3:FC:3E:8F:E3:FC:D8:6C:AF:0F:71:AF:6F:B4:23:1E:C5:71:BA:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_w-j-P82GyvD3Gvb7QjHsVxuvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:9b:86:90:92:34:de:6b:57:b1:70:44:6c:27:ae:35:8f:2c:
91:17:1d:3f:19:29:6b:74:72:27:6d:2f:59:09:15:f2:d2:20:
1e:f5:1b:5b:c5:3e:3b:af:74:c6:b4:e1:b5:07:59:c8:98:c7:
f1:dd:a1:b8:51:83:26:aa:6b:48:47:dc:7d:80:13:f2:36:3e:
f3:c6:32:2e:6a:ad:01:d0:4c:fb:80:c0:cd:69:3d:9c:2a:0a:
be:a5:9e:cf:65:47:06:b7:4d:1c:1a:ab:32:51:8a:6a:80:6a:
d1:03:50:11:43:15:f2:d4:82:a0:3a:60:b2:40:ca:52:93:ad:
b6:18:e4:91:76:83:cf:07:c7:43:13:50:72:90:2c:be:9f:74:
32:71:ba:72:a4:47:ef:87:1f:9c:10:77:85:b8:87:54:03:bf:
88:be:d7:a7:3f:45:68:f8:7d:6e:fe:c4:07:ab:f3:45:b2:08:
8c:55:5d:69:b3:38:fb:66:8e:6b:9d:46:88:81:d8:fd:86:69:
66:f7:66:a1:d8:2c:d4:ee:98:ec:e0:ec:b0:c3:c0:a6:36:3e:
6b:9a:ba:99:c2:e6:2f:33:be:cc:24:c5:44:fe:db:12:fc:f6:
0b:38:28:f4:d9:18:2f:0f:1e:67:53:7f:ba:29:9d:28:85:fd:
7e:df:e3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:15:13 2025 by rpki-client