Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
File: n7qfr8GmfUUaL1m57iMkLqndRXI.mft (raw, json)
Hash identifier: PALjXOyNq6aEJe+L/uGgdCQV2vxDl28KJ8gpyqpEKoU=
Subject key identifier: 8C:05:FC:73:C8:DE:1A:E2:1F:77:0E:72:60:A9:3C:4E:97:1F:EB:D6
Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72
Certificate issuer: /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572
Certificate serial: 102D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
Manifest number: 1025
Signing time: Fri 28 Mar 2025 17:32:19 +0000
Manifest this update: Fri 28 Mar 2025 17:32:19 +0000
Manifest next update: Fri 04 Apr 2025 17:32:19 +0000
Files and hashes: 1: n7qfr8GmfUUaL1m57iMkLqndRXI.crl (hash: SC5DkDUaijdJFcZPDlQQ5QIZ5lgGkQshKfehpqNFqb4=)
2: 566988C8717411E9AF629E4BC4F9AE02.roa (hash: XI/7jfg+GeSHUA3qICjMcaW/9XUB7SlPIfPTYeMPDXE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4141 (0x102d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91895D8
Validity
Not Before: Mar 28 17:32:19 2025 GMT
Not After : Apr 4 17:32:19 2025 GMT
Subject: CN=67e6dd23-2fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8b:f0:4b:3c:43:73:69:1e:21:a5:39:07:ae:
b2:db:b7:92:5c:15:02:2c:3a:40:b7:fe:af:f5:66:
21:a7:f1:80:1c:e3:a5:af:15:c8:58:fb:84:07:84:
de:35:56:35:e2:4d:ea:0b:ac:9a:79:a1:fc:1d:0c:
2d:57:36:01:83:5c:7a:b2:d5:14:e7:34:fd:ad:c9:
1a:e9:fd:8f:d4:9a:07:02:3c:85:29:21:47:6e:24:
5b:67:a4:7f:43:3d:23:85:a5:32:17:ef:03:70:df:
de:99:72:0d:2b:dd:27:6f:37:bc:c4:99:89:75:64:
cd:8e:92:c0:8a:ba:25:be:c7:cd:ae:59:bb:cc:58:
f8:77:79:a5:d8:21:2f:62:c9:79:45:77:bc:64:1c:
35:e7:3a:ac:e2:1e:ac:68:30:b0:a3:e7:c8:56:06:
f2:91:49:fa:51:e7:c0:8b:3d:c1:ff:af:77:6c:fb:
70:21:4f:a3:bd:f4:9f:01:4d:4c:ec:16:6f:21:1e:
d9:44:64:d4:82:05:82:23:5c:4c:4e:0a:a5:ac:07:
e1:89:17:15:06:95:e0:fe:70:09:b3:6f:89:5b:5c:
f1:fb:db:d8:7f:47:2d:a9:e7:70:fc:0e:b7:04:ea:
9d:1c:47:17:fc:0c:b1:21:00:74:55:cf:ec:02:28:
69:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:05:FC:73:C8:DE:1A:E2:1F:77:0E:72:60:A9:3C:4E:97:1F:EB:D6
X509v3 Authority Key Identifier:
keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:bc:c9:4c:7b:24:53:f5:90:80:de:74:b5:8d:95:4b:28:9e:
c9:bc:13:3a:e5:20:69:51:a7:ff:e6:a2:1c:2b:f2:7c:11:57:
e6:55:d0:e2:d0:ad:47:a2:66:0a:05:00:ba:de:af:20:ed:8e:
77:c7:c9:ad:c2:2f:41:10:05:da:4f:41:4c:df:bf:7c:a6:68:
4e:58:d5:ac:2f:2e:d8:48:24:47:3c:fd:99:f3:fd:7e:e9:17:
16:2b:65:3e:f7:73:e3:b7:80:ed:66:5f:80:74:fc:0f:0f:a1:
47:6b:05:4d:a4:4f:ee:07:85:f4:00:f4:3d:32:ed:af:4d:12:
dd:3d:02:47:73:12:e8:dd:68:be:d6:c8:64:82:16:95:48:07:
42:dc:2b:30:8a:ca:1c:60:4f:a5:7e:5b:3a:b2:d5:54:26:b7:
0d:69:1f:02:06:17:76:9c:c0:88:75:82:5f:45:25:ae:2c:6a:
2a:bb:a3:bd:73:f4:a7:4b:74:18:65:84:1e:07:2c:13:38:85:
7e:89:49:fd:90:34:20:4a:2c:c3:68:78:57:a8:b3:c9:70:2a:
15:ba:14:86:03:be:8a:24:53:c1:76:95:22:20:c7:03:0b:0b:
f2:0c:52:ff:78:e6:38:26:ae:2a:6e:5f:71:c0:61:2c:99:cf:
ca:db:6d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:42 2025 by rpki-client