Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft
File: PgyjPXanW6ZPDdawakQr5pWGRBo.mft (raw, json)
Hash identifier: 08RV0zdgMj3NnV1YrOfI96whMLPbU4wbIwlILizlCKM=
Subject key identifier: 58:62:99:55:07:BE:18:7B:C6:72:A4:12:0D:39:15:1D:CB:3B:FC:D2
Authority key identifier: 3E:0C:A3:3D:76:A7:5B:A6:4F:0D:D6:B0:6A:44:2B:E6:95:86:44:1A
Certificate issuer: /CN=A917C422/serialNumber=3E0CA33D76A75BA64F0DD6B06A442BE69586441A
Certificate serial: 347E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft
Manifest number: 346F
Signing time: Fri 28 Mar 2025 14:25:52 +0000
Manifest this update: Fri 28 Mar 2025 14:25:52 +0000
Manifest next update: Fri 04 Apr 2025 14:25:52 +0000
Files and hashes: 1: PgyjPXanW6ZPDdawakQr5pWGRBo.crl (hash: IGxYzarGYT7UBf9nfzET/HcbOd1k3g7INTSrVQVrbHM=)
2: D69F6688CD8511EBB5252063C4F9AE02.roa (hash: 1ODdrQTl4q6/w7rtOls+USY+PM8yOp3Wfi9ftx6zA0o=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13438 (0x347e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C422
Validity
Not Before: Mar 28 14:25:52 2025 GMT
Not After : Apr 4 14:25:52 2025 GMT
Subject: CN=67e6b170-5546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8d:85:78:35:30:e6:8c:47:e5:90:05:de:25:
ec:10:b4:96:8f:56:61:9a:d3:0f:0c:ff:09:1d:9a:
6f:37:bf:82:89:9c:e0:cb:bb:2e:b3:0a:2b:a7:73:
a1:b7:13:55:d0:e9:b3:fd:15:68:a1:d9:06:4f:c8:
b6:c2:38:42:0c:b0:82:c6:07:e8:e1:25:ec:db:df:
84:b4:7e:59:4b:d5:4a:5f:7e:48:77:11:82:71:c0:
a4:d7:af:22:3b:ad:d6:ce:2d:8f:0c:e3:d8:99:24:
74:c0:eb:0d:4b:6f:29:25:67:4b:6b:49:3b:f4:ae:
a2:00:78:10:a6:13:f3:7c:6d:a4:b2:16:42:89:78:
d4:c5:f7:18:64:c7:1b:6f:1e:ab:f6:fc:95:7b:d6:
0f:50:c4:01:f6:35:d6:eb:f8:23:f9:2e:82:54:11:
a4:6a:30:2e:70:a7:16:b1:1c:d5:33:13:7b:e6:06:
e6:29:f3:84:bd:80:02:b3:2d:da:b2:8c:f9:0e:f2:
74:d8:0c:8e:04:88:97:8b:85:db:ff:40:92:b3:69:
75:c2:78:a4:28:a6:5c:68:97:29:81:5e:fa:ad:fd:
0d:92:d4:b6:ab:0b:9f:1e:4e:52:5c:93:a9:60:96:
36:20:44:bd:89:85:4c:18:36:08:b3:8e:19:e3:63:
68:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:62:99:55:07:BE:18:7B:C6:72:A4:12:0D:39:15:1D:CB:3B:FC:D2
X509v3 Authority Key Identifier:
keyid:3E:0C:A3:3D:76:A7:5B:A6:4F:0D:D6:B0:6A:44:2B:E6:95:86:44:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:30:c3:2b:b8:fa:69:db:f4:08:d7:d0:70:8e:e4:05:d9:fa:
cf:d8:b2:5c:77:d2:8b:54:39:51:75:0f:a4:12:58:78:f7:42:
8b:fa:5d:45:7a:a5:29:a4:a3:51:32:07:31:1c:80:42:3e:56:
79:d0:d3:a6:84:a4:73:98:18:7a:c1:2f:6b:21:31:cc:fd:de:
3b:db:45:e4:66:7b:30:43:2e:5b:72:88:de:51:84:e1:ee:d9:
12:95:d5:d0:ad:d3:7e:d1:b1:33:36:32:ff:19:73:09:a1:8e:
c2:ec:53:83:f5:18:55:66:dc:d6:7c:ec:8e:61:64:0b:6e:5b:
91:67:4d:76:71:96:ad:ae:97:77:fe:60:90:15:ae:34:7b:f6:
ff:1c:42:74:85:cf:48:c5:b5:67:ad:66:31:68:f4:98:8c:85:
ca:fd:8a:51:4f:a2:a5:01:14:14:c7:65:b7:e2:1a:a6:7f:5f:
8d:6a:e9:9e:fd:81:65:80:c9:54:bd:92:7b:6f:80:af:06:c1:
3e:ba:2c:dc:6f:56:80:8a:69:aa:15:59:0c:57:04:c4:89:d4:
6a:5f:b7:ca:b8:25:e9:ea:9b:0a:cf:1f:6d:de:e7:89:68:90:
da:d1:bc:78:ff:33:3d:47:58:da:b3:98:07:33:04:24:b0:31:
e0:3e:cc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:51 2025 by rpki-client