Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft
File: DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft (raw, json)
Hash identifier: +jkqnmklBy+Kqy/gu2t5YGX5VpL7X7SGdxYCHfq7gRA=
Subject key identifier: B2:23:8A:C0:5D:5F:E6:D3:68:1E:57:1F:BE:AB:46:2B:F5:56:51:B1
Authority key identifier: 0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87
Certificate issuer: /CN=A9199990/serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87
Certificate serial: 3472
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft
Manifest number: 346B
Signing time: Fri 28 Mar 2025 14:50:59 +0000
Manifest this update: Fri 28 Mar 2025 14:50:59 +0000
Manifest next update: Fri 04 Apr 2025 14:50:59 +0000
Files and hashes: 1: DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl (hash: GfC2XWH9+x90CPY/DBQCZejv3mjINmaPghtb1HczY6Y=)
2: 06CCBE4AED9A11EA9D06C66BC4F9AE02.roa (hash: r3JWgar+Qi2GIwJz7gdsqO3bZMMx2m4iwFJF3cbd3+Q=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13426 (0x3472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199990
Validity
Not Before: Mar 28 14:50:59 2025 GMT
Not After : Apr 4 14:50:59 2025 GMT
Subject: CN=67e6b753-a6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:b7:64:19:f7:96:c4:48:e4:77:55:ee:f8:
e7:b9:d7:ef:9b:be:61:58:1d:42:ce:72:7b:97:74:
c7:f2:85:4c:b9:c7:a9:aa:bb:2a:c7:06:05:01:1d:
3c:25:28:aa:76:d3:69:82:f4:db:af:34:a6:f7:c4:
66:70:d6:13:5e:f1:97:0b:38:90:23:ee:01:1c:7f:
43:20:d5:93:31:46:d4:e2:3b:c9:f1:c6:31:3d:3d:
c6:bc:4a:55:12:78:a4:c5:81:9d:8d:9f:7a:35:a0:
36:44:e0:e7:8f:00:1a:27:b5:33:e7:fa:24:8b:db:
b5:bc:da:ab:c2:37:9d:16:8d:d6:a4:79:99:5a:b9:
0b:a9:8b:f7:40:de:bc:2d:58:86:f8:42:76:87:29:
10:04:8e:60:c9:30:98:02:dc:2b:01:2c:4f:67:ad:
96:42:42:71:da:1d:0c:9d:ff:66:1e:5b:5b:21:17:
dd:f2:ad:c3:1a:f7:cd:7c:43:46:28:d1:a6:11:8b:
10:75:b4:23:0c:2d:f0:85:c1:ae:64:51:1b:48:a0:
57:74:95:d2:e4:23:9a:1a:e7:44:04:67:03:97:1f:
2f:1b:f0:ab:4a:30:d6:b0:02:57:d4:03:80:d0:09:
76:29:17:c5:c7:ca:79:96:23:d3:6c:57:6a:f3:e4:
5e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:23:8A:C0:5D:5F:E6:D3:68:1E:57:1F:BE:AB:46:2B:F5:56:51:B1
X509v3 Authority Key Identifier:
keyid:0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:43:94:35:68:d9:05:3d:07:23:15:07:78:db:ab:ef:5d:56:
4c:55:59:f7:28:86:d4:d5:49:09:5c:0b:c6:ca:3a:37:da:d4:
db:0d:cf:22:b9:79:e4:77:19:30:68:f9:e8:68:99:e7:09:78:
94:02:9e:ea:f8:b2:0c:dd:1f:cd:b0:8e:06:0e:2c:34:9b:42:
ae:ba:0d:83:99:f3:62:a1:7c:84:e4:4f:88:f9:36:1a:8d:3d:
5a:d3:4f:26:7e:d2:fa:cb:fa:ff:3a:c8:79:aa:8c:a5:f0:af:
0e:93:47:ca:73:d0:af:3e:92:de:24:fa:02:6b:bc:8f:b0:e7:
03:3f:8d:46:32:99:c4:23:4d:40:1b:95:5b:e8:7f:b8:f2:b8:
85:99:f1:b5:2c:fc:1c:1b:65:bc:1b:b4:23:1a:f2:fd:b6:19:
71:0f:a9:d7:e9:58:a1:4f:a7:f9:19:d2:0d:57:a8:f4:3d:c7:
68:85:28:aa:6e:9f:5f:8a:aa:1e:eb:44:d8:24:36:19:e3:bc:
12:45:83:6c:02:c1:50:ad:28:21:53:5d:23:c4:fd:b6:9b:bd:
54:be:f3:33:e2:04:60:5c:0d:67:e6:7b:d8:a1:cc:24:a7:b2:
e1:3d:74:ed:62:78:16:64:52:65:88:c5:1c:bb:e0:10:11:9a:
5f:24:ff:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:33 2025 by rpki-client