Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
File: E5zB22udJLk7FJKKdRjQTrOyajo.mft (raw, json)
Hash identifier: m5PSSXCpFRUbTdF+3jmXfiJG94PEj5EKgGrFJjCD/so=
Subject key identifier: 4F:C6:15:13:0E:09:0D:14:4E:F0:70:63:0E:36:AF:BA:F7:4C:D3:29
Authority key identifier: 13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A
Certificate issuer: /CN=A919DAF2/serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A
Certificate serial: 21E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
Manifest number: 21AC
Signing time: Fri 28 Mar 2025 15:59:09 +0000
Manifest this update: Fri 28 Mar 2025 15:59:09 +0000
Manifest next update: Fri 04 Apr 2025 15:59:09 +0000
Files and hashes: 1: E5zB22udJLk7FJKKdRjQTrOyajo.crl (hash: NHBq13UaC8GPRMkKBEpsV0zaX5YFM/i5gRdNIiePWRQ=)
2: FF59EC70144911EFA2053B27C4F9AE02.roa (hash: HdfcGvizJlJ1Ca90ZbbKhXb8B7UfkJUNPm9rX4KTDek=)
3: A20F01CCE1E511EEA0477018C4F9AE02.roa (hash: C724NRcuY6+5rOKZp6BehVoO/AlUI8Z8vFBOmZryKwE=)
4: 5AE16D9A386F11EFABF4E132C4F9AE02.roa (hash: D9t3FqLZRsFD1SHZO5b0WbvDd4cnv0IdfQ5yKvIlcN0=)
5: C4F05AA6144911EF85E2DC26C4F9AE02.roa (hash: mqhxizEIYr8qmqCoAWD4ByVuj0CV9gKDyE2EqO59XEo=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8676 (0x21e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DAF2
Validity
Not Before: Mar 28 15:59:09 2025 GMT
Not After : Apr 4 15:59:09 2025 GMT
Subject: CN=67e6c74d-89a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:be:49:5b:e4:95:ee:2e:f2:90:fb:e5:fb:fe:
38:04:d4:dd:60:7d:57:50:e2:fa:ed:ba:13:c9:bd:
1b:80:bf:50:d2:56:dd:43:a2:e1:93:88:0c:80:f2:
b2:2e:2a:26:82:df:a6:cf:fd:60:46:bd:e4:f7:a4:
e3:2b:5d:27:44:0d:d9:7b:2e:9a:13:d3:86:41:f2:
3b:3c:7c:1d:1b:a9:6c:c2:e1:82:54:82:53:f0:76:
bc:e8:58:ad:72:4d:18:40:1e:b7:e8:e1:ed:f8:3a:
96:53:0c:63:26:a1:01:e8:28:80:dd:83:73:6d:73:
79:a8:15:6a:3d:4d:7c:8d:28:bb:81:04:de:24:00:
08:21:1c:79:ac:de:70:c7:48:34:0c:a7:05:8d:c5:
ff:df:71:51:9a:05:61:2a:57:80:f8:51:e0:e4:6f:
ec:86:ba:1d:5c:5f:a1:19:9d:9f:11:79:32:19:e8:
a2:c3:7f:2c:47:0d:b4:2f:6d:2d:2b:50:90:27:44:
b9:5f:1c:c6:ed:bf:02:be:10:27:d0:bc:da:33:c3:
89:25:50:5b:f8:b5:63:e8:9b:40:85:5b:ea:9a:0e:
8e:2b:fa:f3:87:6d:7a:40:b7:ae:1d:ec:bd:99:c7:
e5:5a:23:b5:59:c2:76:2e:05:17:73:bb:49:7c:f0:
09:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C6:15:13:0E:09:0D:14:4E:F0:70:63:0E:36:AF:BA:F7:4C:D3:29
X509v3 Authority Key Identifier:
keyid:13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:c2:e9:ec:72:fc:51:e3:54:e9:bc:2f:0b:8b:3d:05:26:a2:
74:18:3b:e4:56:5e:11:dd:84:0d:10:d8:8d:8d:12:0e:49:5c:
21:49:7a:4a:23:4f:e0:10:ca:bc:75:df:90:94:c5:be:57:07:
ea:70:9c:1a:03:9a:fa:60:c7:d5:66:ea:d8:c7:3b:98:d2:fe:
07:a5:06:c7:b9:26:2e:39:27:52:50:14:5d:b8:6c:94:2b:d7:
37:fa:29:ec:8b:91:36:e8:cc:b1:4d:77:3e:f5:cf:3b:96:e8:
14:36:14:f8:e9:1e:a4:9c:e1:84:af:24:56:ea:e2:e2:d0:d4:
4c:52:8e:fe:6d:0d:f1:f3:d9:c8:39:59:d3:07:c9:52:f4:5d:
9d:c8:61:81:cb:d9:56:0d:ff:15:de:4e:da:d1:53:a1:f9:28:
21:b1:03:70:69:2a:fa:09:d4:be:f6:0f:b0:45:47:92:80:c9:
c1:44:1d:b0:5c:e6:2a:33:ff:c4:76:57:33:3d:34:67:91:04:
5e:c8:e7:72:8d:98:91:a3:1a:6d:05:6a:b9:49:05:98:c7:ee:
05:7a:90:b4:f0:73:a0:0e:86:27:e6:0a:48:d1:34:85:7d:ce:
75:c2:bb:5d:a9:c1:0a:b5:e7:17:f9:a5:3f:34:8e:63:d4:c1:
74:d0:33:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:35 2025 by rpki-client