Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
File: a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft (raw, json)
Hash identifier: 7Hc/jSnx1jfqErBHBXdT/KL1DZdMd/KHV1PyretBHYg=
Subject key identifier: 7E:6A:83:EB:ED:40:52:E5:6C:8F:92:D7:50:5A:8F:14:1F:80:40:66
Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02
Certificate issuer: /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02
Certificate serial: 0850
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
Manifest number: 084A
Signing time: Fri 28 Mar 2025 20:59:48 +0000
Manifest this update: Fri 28 Mar 2025 20:59:47 +0000
Manifest next update: Fri 04 Apr 2025 20:59:47 +0000
Files and hashes: 1: a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl (hash: drwcohHX9Q7zskzmNFDh53VyAo8f8uPrcHRedtiya8Y=)
2: D0BC8E28C4B511EA8323912BC4F9AE02.roa (hash: qM1JVSXdUTQJnIVxaVxQsaSGw94EgaLnOqmc/M2SNDY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2128 (0x850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91931EA
Validity
Not Before: Mar 28 20:59:47 2025 GMT
Not After : Apr 4 20:59:47 2025 GMT
Subject: CN=67e70dc4-ca1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:16:74:5e:ec:d8:d2:6f:59:dd:9e:00:7b:
f4:e7:43:4a:33:00:d4:9c:4d:5e:59:50:23:77:b9:
f1:b6:50:1b:31:1b:69:8f:9f:74:33:62:a3:2b:cc:
b8:96:77:df:ac:d0:cc:6a:e1:bb:47:7f:5b:ef:46:
3f:69:53:34:a6:00:f5:0b:80:17:33:1c:e7:11:7c:
fa:e8:6a:ff:2b:ee:06:d8:d6:07:ad:f5:93:90:aa:
f7:e3:eb:97:cb:6e:ee:7b:25:84:9b:cb:52:b2:66:
d8:8e:6f:08:95:29:03:ca:81:13:c8:43:f8:d0:b3:
b0:a2:b8:cc:c4:2a:61:d5:da:f2:1b:cd:c5:49:a1:
e0:bd:72:eb:85:63:82:f9:ff:41:22:75:a2:8d:39:
ec:9d:fe:2b:4d:82:94:32:52:06:5d:77:80:93:54:
83:4c:a6:03:05:26:d3:20:b5:1b:7a:fe:ed:0f:46:
d8:d2:85:e1:c2:18:1b:1b:10:a9:54:2b:7c:99:f9:
ea:4b:c9:44:3d:b6:53:9e:5d:00:67:53:67:55:f4:
3d:98:d5:af:94:b1:cd:6e:aa:2f:e7:0c:78:0b:3c:
04:9a:cc:ad:f6:0f:1a:09:17:b8:61:b7:bf:13:37:
4a:fe:8f:62:b2:76:de:81:15:60:1f:0d:4d:3c:32:
0f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6A:83:EB:ED:40:52:E5:6C:8F:92:D7:50:5A:8F:14:1F:80:40:66
X509v3 Authority Key Identifier:
keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:97:c9:73:ac:1a:83:b3:f6:ba:a8:f4:20:1e:bb:21:b1:5c:
33:fb:00:ef:d1:8b:ee:aa:df:b2:4b:ba:4f:db:da:0f:46:2d:
c5:02:8f:c9:a4:2f:89:e1:3f:cb:45:a7:68:52:3e:30:7a:ac:
6b:de:26:2b:ff:c3:f2:2f:55:89:bd:ce:b8:6b:c7:e9:21:cc:
db:82:54:6f:f0:56:ea:54:b3:88:e9:16:f4:75:bf:5b:19:61:
07:d5:40:69:17:4e:99:be:9a:58:fc:80:5a:39:61:d7:43:09:
77:cb:2c:92:33:ec:5f:ab:a1:e8:c9:27:de:37:54:87:df:50:
7e:f3:c3:d2:1b:ec:09:e0:30:bc:df:8b:a8:45:f9:fa:62:9f:
d1:77:67:66:92:7a:bf:26:0f:f4:2b:c0:12:89:07:48:af:bf:
c8:fa:5f:7b:f5:9f:f7:f8:af:2e:d6:e7:df:13:39:93:6b:9d:
d6:37:c2:86:44:83:bd:d3:17:98:08:65:b3:2d:34:02:69:07:
89:86:ac:81:d2:25:70:f8:ea:d9:17:94:3e:0b:70:99:31:94:
04:03:52:22:ed:a5:d6:db:0a:97:1e:6f:c8:13:f0:e7:cc:ae:
50:dc:0a:75:45:06:72:31:67:e6:63:6a:51:38:08:8f:6d:a4:
b0:fd:3f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:40:04 2025 by rpki-client