Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
File: 7qiugNcT5rItsOxgkVfwxZpS_X8.mft (raw, json)
Hash identifier: 38YzEVGa4K8M5q6VLe2Qxwf8+qAg8+Xqn/ZY57tQbts=
Subject key identifier: 98:9D:0B:1D:4E:62:44:EF:96:25:3D:2E:C8:02:48:1E:77:77:8F:35
Authority key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
Certificate issuer: /CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Certificate serial: 34CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
Manifest number: 3494
Signing time: Fri 28 Mar 2025 14:55:17 +0000
Manifest this update: Fri 28 Mar 2025 14:55:16 +0000
Manifest next update: Fri 04 Apr 2025 14:55:16 +0000
Files and hashes: 1: 7qiugNcT5rItsOxgkVfwxZpS_X8.crl (hash: oZPl0O6vk8mmscLiJYGV2TfLx62T3Evuv4A22Y4ui+8=)
2: F026CE74927411EDB020A481C4F9AE02.roa (hash: D3nZr89FC3B/hYB2ABfVDlFpa9Kx2bcJix0bhxq7u3Y=)
3: 6C0C85D0A43011ECA230771BC4F9AE02.roa (hash: 7ZkKrwIf5dxU1AyQHdEtx/cZNmt12RU0pVuLQbnEwD8=)
4: 2ACF9E0C855C11EB8C076013C4F9AE02.roa (hash: /XOWg1DL5Ca4WTABh7nowkgqWfXA9qIHVM17A2ry+Ak=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13519 (0x34cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6B7
Validity
Not Before: Mar 28 14:55:16 2025 GMT
Not After : Apr 4 14:55:16 2025 GMT
Subject: CN=67e6b854-9bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:6d:7a:9c:53:ad:f6:ba:ba:c3:0b:b8:11:
d8:53:32:0a:1f:7b:54:6c:da:e7:4b:4d:dc:4a:76:
80:e0:e1:13:85:94:47:cc:7b:8a:3d:7e:7e:73:e6:
fd:94:72:42:c3:7b:30:09:e0:1e:91:53:8b:d9:27:
ff:2b:1d:8c:cb:b4:76:47:a4:b2:94:04:a1:40:bd:
0b:7c:79:e6:41:c3:e0:72:a4:db:de:9d:de:f0:3a:
85:91:13:ff:bb:9f:8e:13:ed:d7:cb:b6:81:81:f1:
f7:c7:9d:f4:b9:9a:bd:53:7d:c7:b7:7d:3f:3c:7a:
f1:1d:2a:6c:e6:6e:a8:af:5e:1c:da:07:dd:5c:1e:
2e:31:e1:5d:4d:f1:f9:04:80:54:46:09:42:ab:9a:
7e:7b:da:ec:c1:e1:e7:95:bc:ac:24:7f:09:17:f3:
8c:f2:d6:ac:f1:cb:13:99:0a:3d:af:dd:0c:75:94:
95:52:00:bd:d8:53:f4:e4:2e:89:03:3f:8f:f1:ae:
e5:ed:4f:af:bf:5f:a0:de:43:df:1f:0c:97:f5:d6:
e2:58:73:49:e2:32:02:06:d4:30:b9:40:3c:d2:2d:
b0:97:64:76:e1:08:88:ea:ec:7b:06:2a:6b:a0:bb:
b7:b0:84:5c:4c:9a:ea:ed:1d:f0:e8:4c:eb:fe:51:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9D:0B:1D:4E:62:44:EF:96:25:3D:2E:C8:02:48:1E:77:77:8F:35
X509v3 Authority Key Identifier:
keyid:EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:14:5e:ba:ba:b5:ff:70:65:53:b7:23:4c:7b:dc:2c:0d:1f:
e6:98:aa:47:d1:3a:e4:8c:b1:23:8d:a3:ae:7b:2a:f8:82:9a:
55:2c:8b:fb:d8:07:0a:21:d1:41:bd:d6:9f:ca:5c:6a:e1:19:
6a:48:6e:24:07:a8:86:dc:fa:e0:ba:f0:b0:94:1f:65:2b:1e:
de:0a:5d:56:12:c1:e3:97:9f:a0:c0:da:a5:ef:ea:35:18:74:
c6:c6:50:42:0b:dd:19:30:3a:ad:3e:76:72:c1:3f:6a:83:5f:
ed:e8:f5:27:57:7d:97:e2:0f:14:bd:02:82:ed:fe:70:3d:4a:
2c:31:10:da:b4:f0:b5:41:2f:40:24:ff:24:f3:01:b6:bf:b5:
d2:0f:37:d2:84:4d:b8:ff:ee:9d:51:fa:67:f9:1c:dd:91:ba:
52:90:9d:bd:16:1f:7a:bf:46:f6:66:85:f3:63:fa:b6:ae:d0:
0f:30:69:db:69:fb:62:fa:15:88:aa:98:89:75:d5:3c:d4:aa:
33:35:4c:f5:52:60:19:d9:ad:c8:3e:46:d2:37:d4:6a:c2:73:
cd:bd:f1:14:2c:ac:76:b2:fc:47:e4:94:30:2f:2f:98:53:85:
00:81:d8:0b:d7:7c:a2:90:b1:ce:de:40:ce:ea:85:22:f2:10:
c7:aa:26:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:36 2025 by rpki-client