Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
File: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json)
Hash identifier: Lg8vd5BaxLE0mm2VsAwQuMRj0O6fMQBGbhwb0a8pUNE=
Subject key identifier: EA:26:9A:FA:4A:56:C3:49:B6:A1:08:D8:D6:05:EB:42:FD:45:E4:CD
Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
Certificate issuer: /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Certificate serial: 0A6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
Manifest number: 0A4C
Signing time: Fri 28 Mar 2025 19:57:01 +0000
Manifest this update: Fri 28 Mar 2025 19:57:01 +0000
Manifest next update: Fri 04 Apr 2025 19:57:01 +0000
Files and hashes: 1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: dHLTFiwjLSqtiAxWOKc0YnKmUC5J+Hevm2yKP/qkubo=)
2: BE633CD283A611EE804BB319C4F9AE02.roa (hash: NPIjvL++urku6C6DzlbI7Tjblbx8i4fhbfChdZsNErw=)
3: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: iAsOrn+BfPbmaxKIym2huXek+8KrH7keNTNRSTAMeck=)
4: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: iGUFOWK6oRwPeEo+C87zciurGuoBwNOi2mVgrnihqBQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2666 (0xa6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CBD7
Validity
Not Before: Mar 28 19:57:01 2025 GMT
Not After : Apr 4 19:57:01 2025 GMT
Subject: CN=67e6ff0d-4d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:90:14:22:e8:85:c2:62:ec:22:cc:d2:2a:
20:6e:2d:96:2d:ff:9a:7e:bd:c0:0c:4d:91:f3:1a:
0b:8e:5f:08:9f:c5:eb:67:60:1a:ce:4e:d2:f1:2a:
77:f7:ed:c3:41:a4:f4:9c:97:45:a7:ce:76:e7:3b:
17:cb:85:f2:a8:1b:a2:c4:46:ac:a2:04:6b:a9:35:
77:42:e8:cc:29:7e:0f:1d:36:b0:77:e0:c1:2f:db:
5a:2d:c7:66:b7:82:30:09:85:a2:e4:f3:c5:28:03:
40:74:f9:aa:a8:b8:43:37:16:7e:0b:e3:b2:e6:7f:
4c:26:5f:f6:e3:92:8e:87:22:cf:3e:9b:07:73:60:
87:ab:4a:80:da:27:b2:28:2a:aa:d6:75:28:ce:05:
0f:8c:9a:3f:3c:f4:de:6b:34:7a:43:04:e7:0e:fa:
da:2f:8f:50:5c:33:b6:99:e7:2e:50:5a:ef:4f:46:
5f:df:b4:d8:69:61:22:26:e3:a4:2e:b0:9c:ef:ee:
55:44:90:6c:42:b7:8d:16:f0:98:bb:53:6e:b7:68:
27:ca:03:67:db:48:b9:2b:ac:43:12:16:15:b6:3c:
ae:67:7d:f1:a1:95:7b:01:48:57:01:c9:69:3f:fc:
e3:1d:e3:5b:be:fb:d6:78:b0:dc:38:55:78:ea:49:
59:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:26:9A:FA:4A:56:C3:49:B6:A1:08:D8:D6:05:EB:42:FD:45:E4:CD
X509v3 Authority Key Identifier:
keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:8f:e8:7c:b4:3b:30:a1:49:14:99:7c:24:0e:c4:92:f4:39:
1f:c0:21:c1:d7:a3:9f:4b:59:cd:34:90:c0:58:c3:09:94:83:
16:b0:0c:3d:b9:ff:37:63:47:45:e8:27:67:cd:76:f8:c4:49:
31:56:4d:2b:46:f4:2e:47:c4:64:e3:8b:08:cb:8f:fb:33:eb:
ec:52:96:e3:eb:30:9f:b8:a1:29:13:20:4e:cc:4a:ba:17:7a:
4e:71:50:f7:a9:05:78:ba:93:5b:94:aa:b7:57:7c:68:c1:26:
52:0b:70:90:16:8d:11:2a:4e:54:ad:b8:33:44:d4:96:51:4f:
0c:26:b1:09:b4:ef:d7:10:b2:d6:de:93:53:9e:25:c4:c4:af:
45:01:c3:b0:f6:e0:b3:97:c2:11:c7:c2:06:fc:30:34:60:bd:
ae:e3:96:44:89:0b:09:10:a6:b5:1d:31:9f:0e:2a:70:67:8e:
07:b5:8d:8a:ed:d2:98:e2:20:40:5a:f3:fe:be:52:f5:4d:f2:
ee:67:18:37:0b:65:c0:8f:cc:80:4a:99:f0:94:e7:cf:20:df:
87:af:a5:9c:42:91:74:57:21:ae:5e:69:9d:df:74:78:9f:c6:
2d:6b:a5:8d:8c:1d:fd:ed:e8:ff:2a:05:01:44:93:9e:fc:96:
ca:fd:c7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:40:13 2025 by rpki-client