Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft
File: cM0ClgpxFOH9f9syrJqj6NKuv0E.mft (raw, json)
Hash identifier: Ta6DJFuFy0EN6Og0sRh6wVvhpVgOV0lE/5WfLdhJjwY=
Subject key identifier: D6:07:72:63:15:0B:89:0C:E8:87:03:93:AB:FB:E8:3D:7B:B8:BC:D5
Authority key identifier: 70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41
Certificate issuer: /CN=A916EF5E/serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41
Certificate serial: 1611
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft
Manifest number: 25A6
Signing time: Fri 28 Mar 2025 16:50:23 +0000
Manifest this update: Fri 28 Mar 2025 16:50:23 +0000
Manifest next update: Fri 04 Apr 2025 16:50:23 +0000
Files and hashes: 1: cM0ClgpxFOH9f9syrJqj6NKuv0E.crl (hash: iYICjCPzq91kSRaogwUUDIeM23mYrEPaCutffzPdDQQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5649 (0x1611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EF5E
Validity
Not Before: Mar 28 16:50:23 2025 GMT
Not After : Apr 4 16:50:23 2025 GMT
Subject: CN=67e6d34f-4d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e3:26:e3:ee:31:8c:ea:82:75:ea:80:8f:40:
38:e4:32:5a:63:d3:ff:73:c2:02:bb:36:0f:e9:2a:
3a:49:55:2c:18:91:0c:38:7f:ab:ae:ae:1d:7c:76:
c3:fd:20:54:c1:c3:70:b6:66:2d:76:46:c1:01:5f:
03:1c:9c:67:1b:40:1e:cf:ba:2a:ca:bf:9a:eb:f9:
68:f9:6f:3a:c5:18:1f:9d:6e:fc:77:1e:32:ab:2e:
48:af:99:30:93:9f:13:e5:8c:d0:50:22:0e:e7:3d:
94:a7:fd:f5:01:c2:24:a9:29:14:22:4b:04:d3:57:
9e:2f:aa:3d:ab:e4:57:14:45:c3:ee:69:84:94:3e:
0f:d4:8a:52:3c:ac:c7:59:ed:92:6e:76:25:d8:37:
a9:93:cf:55:e1:7a:60:6a:ac:21:22:37:d2:1c:3a:
cb:44:9d:3c:b8:f1:69:fe:20:2b:84:b8:cf:fa:b0:
56:3d:82:1f:79:39:3e:b3:a7:ff:1a:43:9a:25:fd:
92:06:27:74:6f:2c:e5:20:27:7b:40:c5:eb:10:41:
90:c6:1e:c1:33:f1:a2:03:02:25:ea:d8:d4:75:cc:
a7:b7:cc:c0:6e:8c:97:b9:4f:c1:48:b6:46:b1:17:
64:e9:d2:b2:70:91:38:b0:42:d8:97:d7:cc:5a:85:
97:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:07:72:63:15:0B:89:0C:E8:87:03:93:AB:FB:E8:3D:7B:B8:BC:D5
X509v3 Authority Key Identifier:
keyid:70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7e:1f:82:40:9e:41:e4:f9:a8:5a:25:16:f2:90:d1:ea:4c:
ef:c2:c9:b1:06:2a:97:1c:a3:ab:28:9a:31:ca:4f:8c:57:01:
62:c4:44:d6:10:a7:77:09:aa:c1:71:40:3b:54:d1:f1:98:81:
b3:75:55:44:17:ff:ec:7b:f7:b9:ae:a9:86:88:ce:5a:93:8b:
9b:bc:52:be:08:cf:28:c9:ac:b2:7e:d2:73:c6:d4:48:ce:32:
8d:c2:13:dc:b2:1b:93:82:d2:db:0c:9d:e7:9a:09:48:40:91:
21:c2:73:71:c9:e9:9c:0d:d0:43:65:22:d5:5c:50:99:f0:24:
05:e5:c7:5c:bb:de:fe:33:f2:44:3f:d4:4e:c7:c4:34:22:97:
1f:ee:fe:f5:28:f2:6d:94:a4:9f:b0:15:50:b1:f2:e0:3e:be:
5c:d2:48:98:07:f5:b0:76:0e:b6:9e:99:da:ca:f2:27:eb:54:
bf:db:95:4b:97:14:96:c2:fb:38:df:0d:98:0e:be:c2:7d:6b:
ed:ac:ac:55:79:df:bc:42:03:4b:19:cd:62:18:be:fd:8a:3e:
5e:5b:ca:5c:d2:b5:47:08:0c:53:99:6a:a2:4b:01:6c:52:51:
cb:45:d0:00:0e:c4:9f:89:9e:bf:22:37:e4:0a:e0:3e:fd:f4:
4e:e7:82:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:17:55 2025 by rpki-client