Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
File: fBoPSOpDIx-jND1ZKCHvKejSsxs.mft (raw, json)
Hash identifier: AyGI84Fn9T3khs3J3dDvCiO2ECUbbspiq8rYZzJGSqk=
Subject key identifier: C6:CE:CD:50:6C:81:43:F2:E3:D6:FF:24:CB:21:64:C1:1C:37:81:48
Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B
Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B
Certificate serial: 1C3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
Manifest number: 1BED
Signing time: Fri 28 Mar 2025 16:22:35 +0000
Manifest this update: Fri 28 Mar 2025 16:22:35 +0000
Manifest next update: Fri 04 Apr 2025 16:22:35 +0000
Files and hashes: 1: fBoPSOpDIx-jND1ZKCHvKejSsxs.crl (hash: NWz1JrQ112r8rTGR/x6FWU/dvtpa9B/pWA2N9PSclz0=)
2: AD3B2582EF9A11EDA4E50366C4F9AE02.roa (hash: VAwS5Uo7Cqi7lzXCRRZhfVVXN11Han/DThkDiW77C6s=)
3: 98E30C12DCE411EDB446D65DC4F9AE02.roa (hash: 5LMPCnmgpvXAYsKyuhBhkB3oiO6C+fnzS1hbGMCTiQQ=)
4: 398B3186FE5111E6BCEC6E72C4F9AE02.roa (hash: Lee0UxrUp18WPeigcCSZbHFswfN4jnUwW80ZCAROV3g=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7230 (0x1c3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91798AD
Validity
Not Before: Mar 28 16:22:35 2025 GMT
Not After : Apr 4 16:22:35 2025 GMT
Subject: CN=67e6cccb-e3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:ce:e4:b6:67:23:0b:6a:a1:ce:13:d4:37:
d2:9f:8f:8a:9f:39:c9:bf:df:9b:ab:2d:eb:c9:a8:
e0:4c:89:40:93:17:d7:de:e9:0c:b2:6c:8b:f3:58:
fc:17:83:35:fd:c8:16:f9:99:b0:2a:b3:66:80:be:
f6:b6:ba:2e:83:99:0e:97:c7:4c:e5:c6:34:a3:ac:
cf:4f:f5:a4:c3:9c:9d:f2:fd:31:3e:08:b6:55:6c:
f3:19:e0:d8:07:98:e7:45:53:8b:a4:79:f1:c0:68:
7e:cc:48:81:2e:4b:35:78:85:17:4b:02:1a:6b:4d:
56:10:41:ac:78:be:d1:c9:c3:ba:94:9e:ba:04:f3:
1f:49:a1:99:42:63:bb:15:3c:88:be:b2:d8:d1:18:
8c:d9:c6:c3:6c:0b:68:20:b5:5f:bf:d0:00:40:50:
ac:23:cd:f9:69:86:84:ef:5c:ee:0b:55:ac:64:3b:
73:5c:0c:97:89:51:26:03:d3:b7:64:d5:c6:05:eb:
ba:a3:c2:1d:31:ae:86:0e:14:ef:68:f7:8d:ce:49:
de:f1:d8:ad:dd:b7:72:60:0a:d1:15:d9:99:63:3c:
a7:5f:75:a6:eb:30:7a:ce:38:99:5c:08:ee:e2:00:
df:81:9c:22:c7:a2:89:ba:76:8a:9b:2e:82:19:28:
90:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CE:CD:50:6C:81:43:F2:E3:D6:FF:24:CB:21:64:C1:1C:37:81:48
X509v3 Authority Key Identifier:
keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:81:ae:cc:87:cd:ed:31:b9:9d:ed:61:65:02:9d:4b:76:c0:
e1:40:ae:07:13:e7:e4:ed:5f:04:cf:33:1a:44:e1:06:4c:c3:
99:35:ce:1c:3c:46:39:2b:fc:3b:b3:f9:04:6a:4a:bd:85:00:
a9:b9:2e:79:88:f7:63:cb:a7:02:98:35:a6:f1:c8:7a:51:a8:
97:6f:b0:b3:30:ba:27:35:c0:7e:b5:fd:b4:a5:ef:14:14:f4:
4a:9b:fa:74:df:ac:3d:79:9e:20:5d:14:bf:91:f3:0a:17:29:
88:27:1b:3a:63:eb:3a:97:ba:31:3d:c5:64:22:b4:6f:7d:e3:
9f:54:92:62:ca:56:2d:d8:20:9b:68:6c:29:7c:1f:36:fb:be:
d9:35:c6:df:e9:ed:e1:f8:0c:68:e1:17:96:08:2c:06:47:fb:
ee:1f:09:99:20:20:bf:31:00:4f:1e:6d:a5:8b:35:0b:88:01:
10:f4:aa:1b:97:69:51:54:b6:8e:27:6e:b1:66:b0:65:01:49:
a1:ba:e6:73:17:23:8a:a7:7b:ef:47:31:fc:8d:8a:da:2f:c6:
49:77:63:52:58:93:d4:32:74:d0:a2:24:b5:3e:04:54:ae:f0:
9a:bc:10:07:71:c9:b3:7f:ec:03:98:73:1e:6a:f6:b9:b4:fc:
46:58:27:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:36 2025 by rpki-client