Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
File: qAw2f5IilG-YuDa86PbQA2SIHHw.mft (raw, json)
Hash identifier: mw4YGZt9qGCeElMhWgXabumOGmwoAN7qL4ph1RcRPxE=
Subject key identifier: 22:22:96:1D:42:53:5B:F1:B7:58:F1:16:7B:20:94:93:34:44:F2:33
Authority key identifier: A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C
Certificate issuer: /CN=A919D1D9/serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C
Certificate serial: 0DB2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
Manifest number: 0D91
Signing time: Fri 28 Mar 2025 18:06:56 +0000
Manifest this update: Fri 28 Mar 2025 18:06:55 +0000
Manifest next update: Fri 04 Apr 2025 18:06:55 +0000
Files and hashes: 1: qAw2f5IilG-YuDa86PbQA2SIHHw.crl (hash: sfefJNUFzkNnlWHJRrmQzhg3EFq/kGGU3Sxd4o1eG+M=)
2: C2ED1EEE617111EBBC678459C4F9AE02.roa (hash: fGrUYT1O2dItK4fIwYgIfLvCsJmlCIF/jYJCGwsc26A=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3506 (0xdb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D1D9
Validity
Not Before: Mar 28 18:06:55 2025 GMT
Not After : Apr 4 18:06:55 2025 GMT
Subject: CN=67e6e540-f015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:aa:09:fe:20:ab:0a:e7:45:1e:dc:4b:b2:
1b:77:67:f3:c8:da:96:7c:69:5e:89:2b:65:d1:73:
bb:c8:5b:d0:a7:2b:b9:08:fb:5d:36:03:24:66:af:
38:31:17:e4:09:55:26:be:1c:9d:e6:52:dd:e0:ce:
f1:d2:1b:1c:7b:e4:d0:9b:39:5b:eb:c2:8d:6b:f2:
35:c7:59:79:7c:13:c0:4d:dd:62:ce:23:34:2b:0c:
bd:1c:65:56:71:9c:a5:69:bc:a3:bd:bc:5b:11:61:
d5:1d:8b:5f:b7:87:83:36:04:a0:95:dd:08:22:fc:
cc:fa:26:fb:46:29:f8:c1:8d:b4:43:09:4a:1f:04:
a0:59:6d:a8:6e:3b:eb:1e:39:1c:55:cf:2c:ed:b2:
f7:87:f5:e6:d3:e5:82:fe:c9:8f:6d:f3:b9:0b:c4:
c0:99:01:58:29:61:60:6c:61:63:1e:d8:5e:74:fd:
b1:7f:eb:1f:02:0c:97:81:4a:dd:41:f8:cd:54:fe:
bd:9e:9d:2d:02:e7:d0:53:51:d0:8e:66:f0:b1:a3:
91:35:f5:76:94:b4:9f:4b:43:8b:e5:b7:fb:13:49:
9e:bd:92:51:56:a6:de:4d:54:71:f7:45:b3:6d:7b:
a1:a2:f9:fc:15:5d:76:7f:49:3f:26:db:51:cb:ec:
48:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:22:96:1D:42:53:5B:F1:B7:58:F1:16:7B:20:94:93:34:44:F2:33
X509v3 Authority Key Identifier:
keyid:A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:e4:e2:4c:aa:11:cb:10:e3:22:23:16:e2:e4:61:17:91:d5:
51:2d:68:8a:f1:ee:60:e1:39:bb:14:2c:94:19:85:3e:3b:11:
6d:44:21:b5:f2:74:99:4f:0f:da:ac:07:5e:1e:87:f8:30:34:
88:aa:6f:9e:af:27:80:f4:45:fe:43:4d:1d:ee:61:3a:9e:c6:
25:72:ce:b1:8d:4d:9a:d3:74:01:f2:05:3e:29:23:b4:fd:2e:
b1:33:05:28:a8:51:7a:00:95:e8:60:d4:03:c5:36:0d:ce:4b:
9b:3c:a1:0e:76:f5:34:74:58:6c:1c:c1:36:ee:8c:c0:0c:64:
a2:11:d7:40:b2:ad:33:e0:ba:81:84:7a:98:b4:6c:c4:8c:b9:
f5:b8:48:5b:9f:8a:01:c4:fa:db:2a:f8:63:9c:7b:c7:e0:79:
36:96:4b:87:7d:65:e6:31:a1:05:3c:98:cd:8d:17:19:45:5e:
b7:8a:6b:32:7f:43:01:e2:9c:86:91:74:8f:a8:4f:d6:7f:fd:
a8:58:8a:f5:43:c3:ab:19:17:61:a3:e2:0f:c3:c2:23:74:bd:
89:07:2c:c3:1c:15:3a:13:c2:e2:50:aa:10:af:37:e7:7e:73:
08:07:3c:09:22:b6:2d:27:4a:51:e1:93:f7:6d:c9:69:54:07:
b8:ec:24:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:52:10 2025 by rpki-client