Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
File: QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft (raw, json)
Hash identifier: RF50tore3RPx93N71qsop9WH2UXjM0NnL1icPFXqC04=
Subject key identifier: 17:72:69:E2:C1:4B:69:31:D3:90:E9:55:04:D3:FF:99:CA:6B:1E:A3
Authority key identifier: 42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF
Certificate issuer: /CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF
Certificate serial: 081E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
Manifest number: 080A
Signing time: Fri 28 Mar 2025 21:12:11 +0000
Manifest this update: Fri 28 Mar 2025 21:12:10 +0000
Manifest next update: Fri 04 Apr 2025 21:12:10 +0000
Files and hashes: 1: QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl (hash: G9GJfkuF8OeB2TdkJ8q+KLlESzApabAIVZhstzofiRI=)
2: 4F6913406BBF11EFA2832A74C4F9AE02.roa (hash: +e8I8Bn+e9DYeBtqHQQ6KWWC7iXcvB3bn0K/EgTSp6U=)
3: 4EA76BD26BBF11EFA2832A74C4F9AE02.roa (hash: SoizhIfWfVMFzbaPsRoPSJl0+AjhRi2T5wIECRdN0sY=)
4: F5E65C96FD6C11ECB2384E64C4F9AE02.roa (hash: jruCV8o7M+K9hoZkMPNs3l4bUYZ+XPug7o900UdOtso=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2078 (0x81e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91758DF
Validity
Not Before: Mar 28 21:12:10 2025 GMT
Not After : Apr 4 21:12:10 2025 GMT
Subject: CN=67e710aa-037e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6b:84:14:f1:a4:e2:0d:78:21:e4:27:07:f3:
74:31:4b:ba:73:42:6f:34:7c:82:32:47:68:fe:d3:
1f:fe:27:10:28:c4:25:b6:5b:8e:21:6c:b6:95:18:
87:28:55:93:69:8a:d9:fa:af:3a:66:e7:29:35:eb:
9b:d5:bf:da:2b:60:91:05:20:54:18:b5:07:63:07:
e3:3d:e0:e6:7e:55:a4:56:b9:d8:c0:0a:5a:a8:37:
75:cc:f2:84:f7:62:9b:68:15:84:ca:0a:97:02:91:
5b:e0:0e:4d:c1:12:5e:e7:10:39:d3:6b:8a:3c:ce:
ad:e2:46:69:b3:02:1e:3e:49:43:47:18:0d:9b:43:
f9:51:8b:04:3f:63:a0:5d:e5:e4:65:7a:e3:cd:1e:
46:6b:60:eb:79:a5:8b:3a:c7:bd:d7:9b:05:06:2c:
96:18:69:f5:c7:0c:6a:4c:c0:4c:48:f2:08:e6:f4:
3b:fa:55:b6:b5:6c:3a:6c:04:90:7f:7a:87:76:00:
f7:e5:23:96:7f:67:a4:6a:f2:2d:8c:42:97:c2:31:
7f:e8:69:2d:97:38:c1:e9:e2:46:7f:e3:d9:cb:75:
b1:5f:ea:91:ec:34:9b:ce:0f:be:7c:6a:4f:07:62:
69:53:16:d5:40:10:2f:1c:fb:67:d3:1c:82:2d:84:
27:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:72:69:E2:C1:4B:69:31:D3:90:E9:55:04:D3:FF:99:CA:6B:1E:A3
X509v3 Authority Key Identifier:
keyid:42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:33:c2:d9:db:bf:29:38:a6:d2:68:b8:04:21:ce:f1:66:04:
1a:76:f3:44:98:c9:27:8f:30:80:ef:3a:c7:71:1f:28:ab:27:
08:d7:c7:79:97:e3:68:fb:84:ce:02:3a:ff:dd:98:0a:c5:54:
35:b1:9d:35:9f:f1:2f:b5:9c:ac:65:6b:cd:23:47:a3:84:7a:
04:ae:66:1a:4f:10:81:e9:18:51:f0:95:33:25:b8:0f:b0:2a:
75:a9:2a:f1:01:28:38:ba:90:f9:12:fe:af:31:f4:6d:67:39:
5f:98:d9:8a:56:94:c9:47:73:33:4d:0e:32:04:2b:78:67:8b:
76:94:5b:7a:76:9e:f4:ae:11:32:b4:f2:ed:cf:80:7b:60:63:
b4:d6:ea:4a:35:2d:4c:15:63:3e:02:5c:0d:cb:a3:ec:d2:7c:
62:ad:14:f5:68:ac:85:8f:d0:3c:58:8d:84:c8:b1:7a:8d:21:
36:1d:78:10:2b:e5:4c:b4:dd:5b:a0:e4:9c:7f:26:06:aa:8e:
77:a8:9d:ed:b3:94:fa:c5:2e:8c:c9:bd:c4:1e:64:ba:3e:38:
b3:ab:0b:78:cf:a1:17:03:03:89:84:c0:62:5b:d7:27:11:26:
79:5e:b5:bc:bf:e6:65:ba:55:e9:f6:05:13:89:f1:a0:66:51:
a7:1e:3c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:40:16 2025 by rpki-client