Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
File: LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft (raw, json)
Hash identifier: fjvJnwqFOJu/e70KKF0uIUwyMik7Rf2tNC7qZby4b2Y=
Subject key identifier: 68:BA:3B:71:66:54:B2:6D:F1:95:74:14:2E:68:B9:92:B5:35:CB:4C
Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4
Certificate issuer: /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
Certificate serial: 0887
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
Manifest number: 0875
Signing time: Fri 28 Mar 2025 20:55:13 +0000
Manifest this update: Fri 28 Mar 2025 20:55:13 +0000
Manifest next update: Fri 04 Apr 2025 20:55:13 +0000
Files and hashes: 1: LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl (hash: uHLOPIZX7AdtJ8KJU9S14+nVNZfX4G5zV2tfWyLlrTs=)
2: 82FB96E899E411EB8B298058C4F9AE02.roa (hash: KxcRhUccqmxdIWIfiWTKJTnk4y5BMJvuls5mu7Azigs=)
3: B6C75D94084711EEB760A583C4F9AE02.roa (hash: oZyUncr+V1VDeenInWB5+uoD9bagI701mEfkjI7iiLs=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2183 (0x887)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178E49
Validity
Not Before: Mar 28 20:55:13 2025 GMT
Not After : Apr 4 20:55:13 2025 GMT
Subject: CN=67e70cb1-8b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:b1:60:dc:2b:69:36:9e:c6:1f:4b:ea:9f:
90:3e:73:b7:d4:3f:c9:ab:d4:f5:13:a9:42:50:5c:
05:54:88:60:e3:3d:42:ba:9e:5e:32:e8:89:52:00:
a1:43:9c:b6:ad:c6:e0:24:de:bb:d8:5e:4b:a4:d1:
db:0c:bc:5b:ee:ae:75:c3:c1:ed:f2:7a:b6:b6:0a:
47:9b:dc:f8:2f:2b:4d:59:ba:24:5d:7d:76:12:47:
ef:80:05:cb:1f:51:6e:9d:3c:7d:06:6b:b3:5b:a1:
31:d6:e2:2a:0e:5b:06:13:62:97:70:5e:74:54:7a:
1e:7d:9a:7c:cf:e0:fb:22:09:85:11:b7:53:50:21:
85:c1:76:24:e6:92:3e:dd:fc:b9:fd:aa:2a:03:91:
a9:23:57:4f:85:5a:3d:c1:65:dc:6c:4a:3a:91:c1:
78:f4:08:25:13:d9:a9:9b:cd:0e:91:09:5e:1c:53:
64:82:2e:f7:7e:54:50:eb:34:e8:e1:69:d6:d3:c7:
88:2f:42:53:90:88:94:a6:d0:54:09:28:2d:4b:ee:
b9:f2:22:23:b9:4d:71:4a:4b:22:4f:7e:72:7a:f8:
1a:19:f6:fe:95:51:e6:cd:aa:97:e2:83:1a:5d:d1:
d7:d2:6d:90:d7:ac:fd:06:85:bd:56:57:90:5a:c6:
5f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BA:3B:71:66:54:B2:6D:F1:95:74:14:2E:68:B9:92:B5:35:CB:4C
X509v3 Authority Key Identifier:
keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:11:26:4e:cf:7e:cc:8f:a0:16:45:eb:14:89:fe:ce:c0:61:
71:55:6b:fd:4e:6d:84:20:dd:bd:4e:f2:06:60:9c:8e:01:83:
a7:c1:4d:e2:ab:2a:1a:87:d0:d4:20:98:b2:9e:38:cf:e3:d4:
cb:7e:ab:37:f9:02:73:c8:58:77:d1:21:8d:e5:8f:44:c7:a5:
fe:4c:84:da:24:2a:c4:93:bc:a4:b4:53:91:56:3c:67:c5:7f:
16:0b:49:82:6b:2a:f6:1e:14:93:cb:a3:08:4c:62:4a:dc:d1:
db:6d:ee:b1:c3:20:3b:2f:0b:e5:6b:1d:35:bf:66:c5:fa:c9:
86:4a:e4:5a:66:69:01:6c:06:72:7e:1c:d4:35:56:33:04:7e:
1a:38:b3:d6:93:80:44:1d:90:0b:ec:eb:2b:1d:46:8d:8c:66:
79:a0:61:1d:be:f8:a6:f5:20:12:45:b8:d6:ca:95:ce:73:c3:
dc:6d:cd:e4:cc:75:98:99:06:8a:56:89:5d:53:6a:a7:63:a0:
85:c0:0d:38:d0:90:8e:4b:06:2d:fa:3b:7a:a2:63:be:05:26:
6b:d2:27:bc:e6:eb:a1:ac:96:c1:fe:89:ad:b7:b1:4e:b6:9c:
16:17:98:b9:6d:69:b0:69:c1:4a:45:7b:5a:cd:a6:d3:07:cb:
11:52:35:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:48 2025 by rpki-client