Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
File: TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft (raw, json)
Hash identifier: FTNe9KEpPz20EjJToCMIgFxTrzvnlDWa8PNvo5363ag=
Subject key identifier: D4:1F:49:C9:D5:1B:3B:BF:49:31:8E:41:6B:17:F9:DC:C9:DF:B5:AF
Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23
Certificate issuer: /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
Certificate serial: 18B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
Manifest number: 187D
Signing time: Fri 28 Mar 2025 16:37:36 +0000
Manifest this update: Fri 28 Mar 2025 16:37:35 +0000
Manifest next update: Fri 04 Apr 2025 16:37:35 +0000
Files and hashes: 1: TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl (hash: t3XJLUcmmSdD00HZNNAgDmZP3VrUBTFW2iPayEE+kKs=)
2: 974F9BA0A87011EFB3944C13C4F9AE02.roa (hash: UBVGTVi8DQjYIi/j+YuZMsK+pLOACWwJVo+1Y6lmEKk=)
3: 9680FCD2A87011EFB3944C13C4F9AE02.roa (hash: YlKt2kWUben+k2Bjb1MLu5JXetR40hUY8rn1r7Iw5U0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6320 (0x18b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6BF
Validity
Not Before: Mar 28 16:37:35 2025 GMT
Not After : Apr 4 16:37:35 2025 GMT
Subject: CN=67e6d050-852d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ff:18:73:f9:0c:b7:05:fc:74:7a:08:cf:5a:
8c:77:8c:d7:e3:e1:c0:09:29:d3:53:70:35:4f:c4:
f0:ce:e0:d9:38:92:90:d3:5b:ff:1f:16:e6:d2:21:
70:b2:20:fb:fe:03:00:ba:ec:b3:36:b7:80:b8:1d:
c3:3f:96:0b:c8:43:6e:2e:95:2c:15:89:b0:01:59:
46:69:59:d6:fb:02:a8:39:fa:22:fb:cd:f1:78:0e:
fb:c7:4c:07:94:eb:da:8c:15:68:f3:fc:ef:26:cd:
81:1b:dc:a2:a2:58:ae:26:5f:50:b1:47:04:02:f6:
49:3b:70:fb:33:7f:6b:f7:ca:93:c8:8c:77:ab:b0:
54:a9:38:c0:eb:34:c3:61:93:a6:3b:94:8d:22:a6:
fb:01:b9:30:41:cb:13:e6:20:9e:a2:04:18:8c:ef:
a3:39:4a:87:35:42:1f:b9:ca:64:f7:de:fe:b2:0c:
ca:d5:b2:63:aa:08:33:19:91:64:10:8c:62:43:ec:
9c:80:de:19:c4:52:02:d9:61:84:cf:1f:90:9c:af:
1a:ad:1d:d3:75:73:3c:30:85:8d:9c:f0:09:79:39:
d9:e2:27:ff:74:de:36:49:80:9b:72:3a:74:14:3b:
c6:f3:15:81:1d:74:d6:67:0d:83:21:6d:90:1f:ed:
8d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1F:49:C9:D5:1B:3B:BF:49:31:8E:41:6B:17:F9:DC:C9:DF:B5:AF
X509v3 Authority Key Identifier:
keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:0b:e3:54:a1:97:8c:79:8f:87:1d:31:78:24:80:15:e6:30:
52:75:d4:62:76:c8:af:c6:52:89:90:d0:70:2f:12:60:66:f0:
e9:62:a3:9c:cb:0e:7a:c7:91:b1:53:b0:5d:a3:09:f1:5a:75:
11:58:1f:9c:0b:53:c7:d9:fd:c8:b3:25:9c:fb:1e:83:94:34:
f1:54:4b:d2:5b:7d:55:27:8b:70:31:0d:16:f8:10:a8:0d:3f:
65:88:9c:d2:e3:29:1f:7b:99:b3:b9:b6:07:be:aa:1b:56:f2:
02:c3:48:4d:c7:9e:ed:69:3e:3f:6e:b0:2d:f9:e9:99:9f:0c:
66:7f:09:aa:79:eb:31:05:6c:9e:5d:68:56:95:d0:6e:76:33:
c7:97:4c:07:98:f0:4f:7c:23:7d:3d:e1:6e:66:9a:b9:3f:8d:
68:93:1c:1a:0e:e6:a9:3c:32:a2:20:fa:84:28:7e:fd:e8:33:
b1:9a:58:22:c2:14:45:02:f9:68:3a:06:92:13:c3:95:99:41:
ab:33:37:a9:81:77:aa:b5:4b:84:c0:6d:24:8b:0f:2e:fa:e6:
b8:6a:04:ff:07:c3:4e:de:77:1b:d2:25:ec:9f:7a:50:ee:de:
07:2e:07:42:8d:17:e3:5c:4c:4f:9c:ec:9a:5c:8d:04:f7:af:
cb:4e:c2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:35:49 2025 by rpki-client