Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
File: ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json)
Hash identifier: /vlRHVBssGI8f1rU8Ch66RIyM6VTKmYFMK9bBaV/IFw=
Subject key identifier: 78:71:49:B7:69:50:AA:90:8B:79:55:60:2E:1D:A5:FA:BB:13:B3:0E
Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12
Certificate issuer: /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212
Certificate serial: 0F90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
Manifest number: 0F7F
Signing time: Fri 28 Mar 2025 17:40:41 +0000
Manifest this update: Fri 28 Mar 2025 17:40:41 +0000
Manifest next update: Fri 04 Apr 2025 17:40:41 +0000
Files and hashes: 1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: eJaSfJJFxgVysCCr3y4N3oefzXiGVSTxjKJQOxovbx4=)
2: 4DF4371066B111E98B2CD954C4F9AE02.roa (hash: wnwOcdr/H0vin2k8D2HczrFn5eNuey06OLgo+xwiEHw=)
3: 166760A85CF511E9A1F5EE2BC4F9AE02.roa (hash: F0bzFVB9DpzLQNhx6YUaeBah+c9CsHyAXG1cVMQs+ZU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3984 (0xf90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199E3F
Validity
Not Before: Mar 28 17:40:41 2025 GMT
Not After : Apr 4 17:40:41 2025 GMT
Subject: CN=67e6df19-f39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d7:d2:90:b8:1b:5c:07:9d:da:10:ae:4d:df:
3d:0c:28:3a:2f:0e:71:11:57:bc:b2:a2:49:e8:54:
7b:53:ab:0d:85:99:f7:d7:be:02:9c:4d:09:cb:8a:
55:e1:70:25:de:14:71:9b:79:e2:e9:15:96:4e:89:
80:e0:f5:89:ca:cb:75:14:db:65:8f:05:f2:9b:8d:
9a:bf:01:d1:27:2e:3e:9f:ed:2c:63:a6:5b:e8:1b:
e4:42:bf:ec:38:48:db:eb:ab:44:0e:9a:7d:60:9d:
d6:bd:5a:b7:be:8c:50:73:a4:c3:f4:85:13:4b:07:
6c:67:e6:26:e7:4e:85:1f:22:4b:9d:34:43:6c:07:
53:b8:9c:a6:d5:bd:ba:0a:ae:26:05:b0:dd:53:d3:
a3:c3:34:6b:ee:29:50:b0:7b:74:b5:e8:7c:22:79:
41:c5:db:49:57:fc:cd:a6:7c:0c:e0:72:40:28:d0:
91:53:8c:2b:22:70:7f:f9:a8:a8:05:4d:61:0c:93:
3f:24:1e:fb:98:0a:cf:86:32:ec:96:79:b0:11:8e:
c5:31:bf:5f:29:fe:8c:d5:c7:66:6d:b1:22:3e:45:
5c:75:a7:2d:86:a4:90:30:e2:88:d2:04:2c:02:dd:
bb:d1:2e:10:bd:e6:54:d0:8c:cf:a5:f8:37:31:52:
b1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:71:49:B7:69:50:AA:90:8B:79:55:60:2E:1D:A5:FA:BB:13:B3:0E
X509v3 Authority Key Identifier:
keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:16:cc:de:81:23:86:a7:4b:ec:a5:ca:0e:0d:00:21:ca:f6:
56:8a:cf:3e:d2:dd:d7:41:1a:e1:f7:cf:cd:03:dd:46:69:15:
62:8f:04:88:2e:de:ea:dd:4e:b6:2e:5b:a7:6a:9c:10:e4:bc:
5b:30:22:e0:79:b0:d3:6d:7f:66:2c:18:a1:7a:1c:74:07:f8:
34:ce:b6:ce:da:21:7c:51:05:31:a6:83:80:56:21:68:29:a4:
20:d7:ec:c6:12:45:32:7e:f8:8d:3f:f8:f4:5a:a6:21:aa:3e:
3c:d4:eb:a6:e2:96:ff:1a:d9:a9:ed:cf:7c:c4:c7:6c:65:71:
7a:95:41:98:9f:d8:fe:17:18:07:82:da:5e:0b:60:11:d2:96:
54:d7:c0:c1:00:59:e0:6f:01:cd:ab:f2:c0:8b:ed:e3:7b:bd:
95:89:44:d1:81:84:52:c3:0d:b7:12:35:77:be:2e:46:88:c3:
54:fb:8a:d0:53:f3:6b:75:a5:46:44:45:d6:fe:c8:b5:e4:9b:
db:de:41:2c:10:ff:6b:39:0d:9f:b0:c0:e9:55:4d:a2:86:69:
0d:cd:5d:45:3f:73:c9:b1:52:bd:46:c2:11:55:35:0b:b7:25:
40:fd:41:c2:48:b1:8e:18:15:9f:14:ba:ce:a5:99:e0:f3:fb:
0f:f7:05:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:30 2025 by rpki-client