Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft
File: TzFe71rLLtp6NynnnhNZkMAecHQ.mft (raw, json)
Hash identifier: Uf/ynk/7tkbIsYqfyj1jWQF/I1RVGnCvryoE2Qv95cs=
Subject key identifier: F2:96:8E:C1:9B:11:96:2F:10:7E:C6:A8:3B:B0:AF:98:81:50:EF:DB
Authority key identifier: 4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74
Certificate issuer: /CN=A91957C9/serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074
Certificate serial: 0DF4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft
Manifest number: 0DE9
Signing time: Fri 28 Mar 2025 17:58:54 +0000
Manifest this update: Fri 28 Mar 2025 17:58:53 +0000
Manifest next update: Fri 04 Apr 2025 17:58:53 +0000
Files and hashes: 1: TzFe71rLLtp6NynnnhNZkMAecHQ.crl (hash: GQB0E5RpxT25BIPZfcYO0xFI6QMw50xsMJVp3rSZxmg=)
2: B55EC19EAC2B11E996F6E511C4F9AE02.roa (hash: IPMEsK43QEDeAXz8+s8RcYoTW9W3k8flG+M7sbwxamA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3572 (0xdf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91957C9
Validity
Not Before: Mar 28 17:58:53 2025 GMT
Not After : Apr 4 17:58:53 2025 GMT
Subject: CN=67e6e35e-8f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c4:86:4a:b8:40:20:10:c6:9e:a1:c3:68:6e:
38:f8:59:87:d5:9e:68:00:84:a9:fa:0e:de:04:bb:
58:33:e3:9b:88:39:6e:8b:fe:dc:88:3b:fa:65:c9:
24:8b:5d:d7:b8:fd:6f:8b:71:97:a2:13:a5:6f:2d:
8c:b0:4e:33:5e:6e:82:d1:bd:da:82:d2:07:f8:e1:
9d:99:aa:78:c8:48:3d:d2:fd:f3:ed:5e:74:cd:f9:
c6:97:57:bf:f7:51:22:d0:12:67:d2:50:a8:1a:fd:
b4:af:e3:32:42:28:bd:b3:7a:9a:73:52:1d:a6:11:
1a:b0:41:a1:ed:44:97:73:e0:92:5e:88:e7:bc:27:
8a:43:cb:0d:99:3b:53:69:b6:a9:4b:3a:96:55:32:
f2:b6:1a:63:4e:f7:4e:84:b8:b4:3f:39:f6:94:5e:
9e:0a:05:2f:49:0d:f4:48:81:6a:8b:3a:d5:13:4e:
45:cf:9d:f3:a2:58:ee:6e:97:c5:c9:b5:98:74:b0:
4a:1d:1a:68:56:2e:44:f3:70:96:02:79:b0:aa:46:
e0:07:65:ac:6d:5a:a4:98:cb:a8:16:56:ff:5f:0c:
e0:c2:4a:64:9b:1e:a1:d2:10:f1:12:5a:21:27:06:
c2:8a:38:4a:06:b0:1f:a0:a9:a4:ce:61:c0:5d:3e:
cf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:96:8E:C1:9B:11:96:2F:10:7E:C6:A8:3B:B0:AF:98:81:50:EF:DB
X509v3 Authority Key Identifier:
keyid:4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:54:49:7c:16:68:9d:ff:08:5e:0f:5f:c7:83:4f:bd:6f:b6:
25:15:4b:e1:5e:b4:d6:1c:9d:fc:2b:0f:47:f3:92:a1:66:f8:
f3:6f:f8:a0:4c:1a:2f:06:8f:00:7d:dc:22:14:19:b7:3d:94:
00:ec:2d:5c:c4:88:e2:eb:a0:04:a8:c3:7c:51:b7:05:a6:a0:
48:83:73:52:6c:40:63:0c:cc:5d:ab:75:e7:30:b9:83:9f:a6:
2c:ed:8a:a2:a1:9c:88:2c:a7:5b:38:39:cd:2b:1a:24:ca:8c:
4f:31:51:e8:09:8e:28:a0:9e:d1:dc:96:6c:cf:38:d9:8d:8b:
2a:82:35:81:85:ca:f0:40:68:52:b3:3d:5c:d8:f7:33:be:3d:
1e:96:bd:6d:f2:f6:c1:e7:71:41:2e:c8:0b:fe:96:19:a8:bb:
b2:3e:e2:b7:49:0b:78:af:bf:85:2e:cf:1e:2a:10:a6:e6:e3:
2f:da:d1:da:26:6c:27:80:df:ad:c0:80:70:7f:31:89:5f:ca:
a9:71:ca:82:04:43:36:98:cb:1b:76:68:b4:46:85:71:da:24:
4e:42:b4:5b:f5:db:01:36:15:f1:38:de:b5:6d:cd:16:d5:51:
70:15:08:8e:49:2d:ed:84:47:75:04:fe:a8:95:ac:fc:a1:96:
ae:4a:03:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:40 2025 by rpki-client