Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft
File: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft (raw, json)
Hash identifier: cerY6trwOltHnJCB3BjCXXuvst5g2uCOaapMVNJayYc=
Subject key identifier: 2E:C8:92:0A:1A:E7:A6:60:F1:05:72:3C:D2:F2:6A:8F:A6:EF:B4:16
Authority key identifier: F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89
Certificate issuer: /CN=A916FA51/serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989
Certificate serial: 0B38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft
Manifest number: 0B2D
Signing time: Fri 28 Mar 2025 19:22:47 +0000
Manifest this update: Fri 28 Mar 2025 19:22:47 +0000
Manifest next update: Fri 04 Apr 2025 19:22:47 +0000
Files and hashes: 1: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl (hash: WsS4JD3FB8K5hANE12eLr4CiLNJzOQLdc/gTMLUcIYg=)
2: A79D17F2361111EA95391375C4F9AE02.roa (hash: tDsZ4GzDIlAFVIQZZ0Fw0ct73AL//Nys5aPjeishX2s=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2872 (0xb38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FA51
Validity
Not Before: Mar 28 19:22:47 2025 GMT
Not After : Apr 4 19:22:47 2025 GMT
Subject: CN=67e6f707-4fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:e1:98:cb:7a:57:6a:27:1e:8b:d6:7e:01:
2e:07:f1:e5:d7:e3:04:b8:ef:72:91:53:9c:25:1f:
4a:81:b9:e2:bc:85:3b:7e:9e:36:b0:11:e2:3a:cf:
ea:73:45:92:8a:5d:bb:ce:de:30:5e:cf:d2:00:0d:
11:06:98:d0:98:88:e6:8f:9f:d4:b3:30:88:e0:f8:
0f:4d:b9:3e:37:1b:4e:b2:a8:64:89:70:12:36:1b:
e2:eb:5c:b1:b3:4a:97:76:a5:a7:e4:57:e2:64:04:
f1:c5:26:3d:9f:fa:a5:8b:79:f9:5d:e8:0b:c0:b0:
3f:31:c2:f1:10:79:8c:cf:c7:d5:47:e6:52:8c:2d:
11:f2:ad:3a:e6:05:65:b1:2e:68:03:98:29:5a:3c:
33:b5:8a:f4:6e:7d:de:83:3d:ea:e3:94:3f:1d:9f:
47:2e:3d:2a:ac:fc:f5:fd:7f:bb:bf:7e:04:a9:97:
f4:83:9e:61:91:35:60:e3:1f:2b:31:9d:48:97:fb:
da:af:8a:1f:40:a3:e2:7b:68:b7:f1:c7:f1:32:e9:
11:9d:ab:2e:21:f5:c0:cd:40:3e:5a:0d:60:ee:e1:
73:4d:34:60:5a:14:b5:46:fa:7b:a3:30:e5:fc:2b:
30:ff:cc:6b:86:1d:3c:c9:66:ca:b9:eb:18:6f:cd:
44:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C8:92:0A:1A:E7:A6:60:F1:05:72:3C:D2:F2:6A:8F:A6:EF:B4:16
X509v3 Authority Key Identifier:
keyid:F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9a:f0:03:57:fa:d0:39:ef:16:56:35:73:0b:14:87:f2:7b:
bf:07:5f:f5:ed:7b:36:e4:10:22:64:7b:14:9e:1c:21:c1:83:
d1:21:37:6c:5c:ff:8b:c3:54:a2:46:e4:fe:e9:f6:39:d5:ab:
5b:6f:88:2e:80:79:02:fe:ba:2a:68:f2:b7:0b:01:c0:61:6a:
b8:a0:07:67:6a:6f:ce:a5:85:96:da:fb:4d:6b:d8:5d:9b:a1:
c9:20:ee:5b:96:45:38:cb:a3:fd:59:51:9e:33:57:15:cd:d1:
07:70:d3:14:5a:f2:c7:76:06:43:24:95:2e:9f:d2:28:8c:4d:
aa:ec:50:e4:99:df:a6:6f:6c:5d:f5:43:39:88:97:98:57:46:
55:06:4e:d9:51:e7:95:2e:97:1c:61:e3:38:02:e0:a1:e6:85:
eb:3a:f8:99:df:fb:8b:af:d2:00:99:51:61:2a:96:5d:3b:fa:
c9:1f:02:8e:bf:56:67:09:a6:ed:78:6f:1b:45:7c:0a:73:ad:
4c:a5:ff:98:1a:f5:d6:f9:a8:1e:25:c5:5f:b0:13:74:83:3f:
2d:b5:cc:2c:5d:60:c9:38:9f:df:6d:b5:b0:31:db:df:3e:86:
99:79:7c:5d:16:91:2f:e9:98:c2:4c:03:78:14:85:6c:3f:2d:
ca:dd:7a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:40:11 2025 by rpki-client