Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
File: Nu6KQBMF6zjijYal2392KKq34k8.mft (raw, json)
Hash identifier: +8bG5Hgp+miJLshZTjfV47SCdoVu2zFUXqKNOhjw5sM=
Subject key identifier: 02:B6:7E:B5:C4:E4:7D:59:B9:C0:54:FE:4F:AB:AF:C1:A0:0F:A9:B8
Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
Certificate issuer: /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Certificate serial: 10DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
Manifest number: 107C
Signing time: Fri 28 Mar 2025 17:28:29 +0000
Manifest this update: Fri 28 Mar 2025 17:28:29 +0000
Manifest next update: Fri 04 Apr 2025 17:28:29 +0000
Files and hashes: 1: Nu6KQBMF6zjijYal2392KKq34k8.crl (hash: mJqzqspHyLVrVgr/fMLwRCikPw3TfMolPZFtZl+Uhm4=)
2: 264DBA882E9411E9A7232A19C4F9AE02.roa (hash: 6F8MZepb4YKIzRX/VIlir5UqD3bAL/MGaiUqh38H4VM=)
3: 8F5856362E9511E9896EFA1DC4F9AE02.roa (hash: pa1Fyj4rJ9wsQhHKUYwleZnXaMszFSBEcPoalFBKpsk=)
4: 53DFF8EC2E9111E999636910C4F9AE02.roa (hash: pFWyJjF088oOGw4nNl0g4YWTqxbuE3QpkV5M07utSjo=)
5: 8CD1AEC62E9511E9896EFA1DC4F9AE02.roa (hash: nCG2ItoYRYsNw2ltluT/NhcDchTRJwPgu00JBArVHNU=)
6: 52685F222E9111E999636910C4F9AE02.roa (hash: syk5eLA6QE1f9vtOv8vWj023d03Vzooyr78RlQmdrWU=)
7: 8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa (hash: bboRKjRgAmNIyMUD8F0R6YlK8KxKhJJ94gWMf5xkK7c=)
8: 81CBCECA0BFF11EE9AE0F676C4F9AE02.roa (hash: qkUQDs49KFim2MLHAjsJwTxoBoVgmCtXt1u3Zkv+Xtw=)
9: 5870952EC53011EA98D1D651C4F9AE02.roa (hash: qlkxrtDkdB7rHBdwPP73Uk43WLSuezxmGhVTKZPNFac=)
10: 8D76CA462E9511E9896EFA1DC4F9AE02.roa (hash: uqBg3EfYSkP8xrpkIoXRk79rOz8VHiKa+sc7sMHbX+4=)
11: 8EA288F62E9511E9896EFA1DC4F9AE02.roa (hash: 7HqOnLpZm+A/vwRmSQHLC5scxprHPl3diogTB/9e/W0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4318 (0x10de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91709BC
Validity
Not Before: Mar 28 17:28:29 2025 GMT
Not After : Apr 4 17:28:29 2025 GMT
Subject: CN=67e6dc3d-2d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:c0:5f:53:af:7c:70:c0:bb:6a:7b:72:9e:
a5:33:34:ba:c9:f7:d0:6e:c7:86:35:53:32:21:51:
65:45:64:51:e3:7a:51:86:c5:be:8f:da:d2:10:1a:
6a:1d:73:04:a7:52:c4:2f:44:53:7c:4a:92:b9:58:
91:d8:50:fb:2f:85:58:99:26:3f:be:a2:a7:af:eb:
35:54:96:c2:3b:72:52:bb:be:b1:12:68:ef:de:13:
15:63:10:13:63:9c:18:f3:0d:a9:17:9c:9d:2e:c3:
94:b8:31:e7:fc:cc:97:76:9f:c5:df:1f:71:2f:ba:
7e:b5:df:8d:ac:57:15:a9:cb:aa:61:c1:a1:e5:e2:
8a:61:c8:b8:44:69:23:bc:60:49:4d:47:8c:b5:cd:
6a:41:34:d0:68:5b:81:be:ec:fe:97:1a:98:b4:5f:
4e:a3:31:6b:42:69:fd:0e:d3:cf:a9:39:6d:29:ca:
a1:e7:f1:05:80:11:5d:b9:31:51:ab:45:f6:fb:9c:
a2:66:ac:86:73:98:ab:bf:79:53:01:56:12:d3:77:
c6:11:7a:fa:61:a3:d1:12:b4:dc:e7:78:54:7f:9a:
01:49:81:ca:4e:e2:1a:71:9d:70:c3:b3:51:c2:f8:
b5:13:74:01:c6:a5:c1:e0:e2:a7:f6:4a:54:71:7c:
5a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B6:7E:B5:C4:E4:7D:59:B9:C0:54:FE:4F:AB:AF:C1:A0:0F:A9:B8
X509v3 Authority Key Identifier:
keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:0e:46:69:4b:91:d2:7d:f4:81:2e:0c:2c:56:e4:41:ff:33:
f3:80:58:46:dc:89:7a:a5:d9:b5:34:45:f1:df:f0:09:3b:0d:
f1:ca:da:83:24:1c:99:a7:11:c2:64:43:86:27:73:39:d3:4e:
9b:69:15:d1:52:a5:e9:58:d2:d5:72:b6:a6:2c:35:0e:34:fc:
6f:60:de:46:76:b3:f0:6d:3a:d9:79:5d:a9:94:8b:e8:b2:4e:
ce:75:c1:e4:63:2f:a6:3b:61:16:2e:a7:1d:62:1a:cc:1c:20:
4d:4c:9e:d2:ff:0e:04:61:5e:4b:eb:3b:0c:63:43:ea:98:8d:
69:b3:fc:59:7d:ca:ee:67:a2:2c:c9:a0:ec:35:59:29:95:da:
75:05:de:ef:fb:73:ca:72:6f:20:0f:1a:33:29:8d:27:5e:aa:
dc:69:62:fd:69:aa:5c:aa:70:20:40:55:46:2a:d2:bd:97:82:
f2:15:c4:31:bd:26:6c:79:98:0e:95:11:44:52:68:cb:39:39:
39:43:b3:1c:95:3e:ec:33:ef:0b:6f:e4:86:a2:ec:22:97:5e:
2b:55:0e:50:4c:2b:15:d8:1c:c2:bb:60:ac:7c:d5:15:43:fe:
9b:bb:b2:84:74:31:d9:97:aa:6c:68:44:70:fd:3f:ac:a6:5e:
06:a9:bd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:50 2025 by rpki-client