Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft
File: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft (raw, json)
Hash identifier: V235sW0J4y9l9KuXBmQaufa4i/dgn3/mY8xEkcOoJXY=
Subject key identifier: 36:5D:86:7B:9D:D7:7D:E2:7C:CD:E2:92:30:D8:10:E9:CD:0A:31:4B
Authority key identifier: A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE
Certificate issuer: /CN=A918FF9D/serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE
Certificate serial: 090A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft
Manifest number: 0905
Signing time: Fri 28 Mar 2025 20:36:25 +0000
Manifest this update: Fri 28 Mar 2025 20:36:24 +0000
Manifest next update: Fri 04 Apr 2025 20:36:24 +0000
Files and hashes: 1: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl (hash: POvVToKb2/fJCSHYjubSEP4uQoS9SHoPudMdZp/B534=)
2: 2A1AD3BA9FE711EAAFA97B81C4F9AE02.roa (hash: tZFXSCyWL68XjydECjdTEwQZ8Np1J2KGOQbzVt6+//o=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2314 (0x90a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FF9D
Validity
Not Before: Mar 28 20:36:24 2025 GMT
Not After : Apr 4 20:36:24 2025 GMT
Subject: CN=67e70849-9447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:82:57:c7:ef:2f:72:7a:39:87:54:82:9f:eb:
08:51:40:c3:2c:ed:19:15:b1:42:60:a6:4d:5f:93:
8c:d5:87:b5:0f:3c:17:6f:45:0a:61:63:f9:95:e5:
1b:31:aa:49:45:28:c2:5d:8c:69:d6:3f:89:d5:90:
dd:b3:fa:61:99:e1:bc:ca:27:11:dd:c9:13:70:a9:
48:f9:e1:ea:74:f5:98:07:4c:bd:f1:4e:95:5a:6d:
9c:b7:7d:87:ab:3d:b3:bf:c7:b3:54:1e:97:91:bd:
17:43:31:de:a4:11:ef:fa:77:52:62:b0:b0:67:dd:
96:18:60:01:66:5c:41:8d:ef:30:f8:7d:e3:b0:2e:
c2:ce:59:4c:a4:56:57:30:e9:8e:56:b3:99:11:79:
7d:50:80:c8:bd:93:4e:eb:8f:9d:5a:9f:51:4b:c0:
26:b6:60:6d:21:e3:08:f6:4f:a6:2e:cd:4c:1a:1d:
f4:32:76:fa:39:de:bf:1e:bf:f2:7e:ad:c3:32:31:
0c:51:62:5c:0b:93:42:39:19:0a:32:96:1d:fc:70:
21:77:46:67:39:ec:5c:76:5a:30:b8:00:e3:e1:5a:
3d:60:75:cb:81:80:98:c4:e4:ef:65:fa:98:d6:3f:
b5:f8:e5:44:5d:0a:9c:55:fa:c5:25:65:14:94:a1:
01:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5D:86:7B:9D:D7:7D:E2:7C:CD:E2:92:30:D8:10:E9:CD:0A:31:4B
X509v3 Authority Key Identifier:
keyid:A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0e:72:c1:46:ec:ef:51:98:c5:9c:c5:62:a1:0a:67:1f:a5:
95:2a:1b:c2:eb:bf:0e:5a:e6:e6:85:7d:29:98:0e:6d:85:e0:
08:65:2f:43:00:dd:e7:a2:83:64:05:0f:ec:33:c5:43:af:3e:
ca:cf:53:af:df:5f:4e:58:17:c8:5b:c1:1e:85:57:12:f4:66:
c2:68:2f:95:5c:2b:b8:b4:4a:95:ee:99:60:b0:2b:c0:4e:90:
8a:e4:45:13:2b:35:15:ff:20:57:25:d5:2d:43:81:d7:5c:a8:
28:58:44:2a:71:45:09:ca:41:0f:65:4f:0e:24:e0:5c:16:11:
67:5b:c9:0f:1a:4b:69:dc:42:4b:87:a6:ee:48:21:1c:23:fe:
51:4a:f4:99:18:0f:e7:47:0c:a0:76:49:09:39:0f:ad:a7:e7:
49:e6:20:29:88:2e:b0:b9:11:10:e0:91:2f:3b:6a:24:29:45:
e4:6e:50:56:d7:09:d0:b2:ad:76:e3:8f:d1:f9:f8:af:bd:03:
5a:0f:38:1d:25:ba:cf:32:ee:83:de:55:4c:46:97:0c:9f:eb:
6b:8a:ce:a6:64:9a:03:f2:ea:91:c0:d7:df:56:c4:5c:41:82:
75:16:44:3a:12:28:d3:ba:90:86:8f:9b:d2:7d:f4:5d:a4:e3:
e2:18:da:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:40 2025 by rpki-client