Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft
File: racwBjpGGMJtFVQ1gZU7AYX9nIU.mft (raw, json)
Hash identifier: I4YnjLdtCQIZnPasJs38uPbfcC5KmBGHdq/YOAxZ2j0=
Subject key identifier: 35:48:A1:45:62:19:82:86:DA:13:95:57:EA:40:C7:CE:25:30:14:22
Authority key identifier: AD:A7:30:06:3A:46:18:C2:6D:15:54:35:81:95:3B:01:85:FD:9C:85
Certificate issuer: /CN=A9199231/serialNumber=ADA730063A4618C26D15543581953B0185FD9C85
Certificate serial: 071C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft
Manifest number: 1216
Signing time: Fri 28 Mar 2025 19:26:53 +0000
Manifest this update: Fri 28 Mar 2025 19:26:52 +0000
Manifest next update: Fri 04 Apr 2025 19:26:52 +0000
Files and hashes: 1: racwBjpGGMJtFVQ1gZU7AYX9nIU.crl (hash: MH/zv0Q6s8LdV+Q69gbW81D5IAtfXOe641/fbqfxLro=)
2: 84DF7DDE361211EBACEF8647C4F9AE02.roa (hash: 5XwqomZ9BLQ4EjKkc4C/QpwLGFRZM50AcN0fv78p3Pc=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1820 (0x71c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199231
Validity
Not Before: Mar 28 19:26:52 2025 GMT
Not After : Apr 4 19:26:52 2025 GMT
Subject: CN=67e6f7fc-90f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:db:07:58:53:52:84:3e:58:9f:1f:cc:a3:
08:e0:a8:da:77:28:89:2b:e4:58:b8:93:d2:a7:70:
94:62:ee:a1:35:a2:12:31:04:68:bc:dc:92:38:3b:
ba:b7:e1:62:2c:11:14:fe:56:0b:53:3f:84:b8:e9:
5e:c3:13:24:ff:57:39:e4:a7:02:e6:ec:9f:5e:43:
0f:d0:5d:b9:93:ab:23:a3:8e:e7:41:e7:72:65:93:
21:0d:d1:f7:01:0c:4e:1c:f8:06:7d:0d:df:ce:bb:
8e:63:74:c4:26:ef:63:86:7f:d8:26:cd:97:09:b8:
4f:30:bf:98:43:38:3e:6f:7b:9f:8a:c5:ec:8d:27:
49:09:91:40:0d:28:e4:33:c1:57:c8:95:cf:c0:16:
62:c4:c6:49:97:39:ac:94:dc:84:a5:6c:77:69:b3:
7b:8d:9c:8f:05:a4:88:5d:0e:1b:58:22:21:8a:07:
dc:a5:34:67:4f:bc:0e:03:75:37:69:58:b7:2c:0f:
d3:92:81:a5:78:f6:89:70:c1:2f:ae:7d:d1:d7:78:
32:7d:75:1f:0a:85:b7:17:2e:8c:0a:a3:b7:a3:11:
01:d2:59:48:43:33:db:f4:b2:be:09:25:e4:42:2e:
7b:97:05:1b:3a:29:83:5f:d3:0a:d5:bd:14:93:3f:
6f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:48:A1:45:62:19:82:86:DA:13:95:57:EA:40:C7:CE:25:30:14:22
X509v3 Authority Key Identifier:
keyid:AD:A7:30:06:3A:46:18:C2:6D:15:54:35:81:95:3B:01:85:FD:9C:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d7:55:f8:30:87:16:94:8a:b5:b2:bb:90:ef:ae:06:8b:da:
2e:e8:66:6f:31:d6:2d:7a:48:99:5e:db:ea:3c:4a:70:e9:53:
65:d4:01:2c:66:90:29:ff:ef:63:09:f3:4f:eb:51:f9:f2:6e:
ae:e3:1f:ea:e8:ab:ba:a7:8c:b1:33:0e:28:2c:8a:15:9c:cc:
4b:b4:eb:5c:10:d0:89:1b:a0:51:3b:88:04:4c:84:04:b7:ec:
cf:e6:dc:3f:f7:7d:d2:b3:57:75:32:8a:98:51:54:5b:9c:03:
78:dc:78:0f:5d:74:50:8c:6b:30:37:01:8f:da:ae:91:27:29:
9a:74:3b:48:7e:57:d7:9a:f4:19:97:d3:f2:85:c4:80:f8:eb:
e4:68:43:55:6f:45:a5:33:bc:61:d1:66:f7:ca:49:e0:5a:5e:
61:d3:88:0e:ea:1a:5a:88:60:60:74:17:86:79:27:15:a8:b0:
18:45:83:b7:86:c6:89:9f:c7:bd:d6:28:dc:ea:93:b4:9d:bb:
69:cc:0a:bd:05:af:e2:5b:ea:82:cc:50:5d:af:af:92:ff:05:
e8:ed:83:a5:3c:d4:16:d1:7a:ea:59:78:bd:8c:31:0f:48:1a:
de:53:db:b5:17:dc:e8:26:8c:e6:a9:8e:54:10:a5:82:99:5c:
b1:89:76:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:56 2025 by rpki-client