Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
File: lNWHtudb8QivW0JJIsSouqs-6UY.mft (raw, json)
Hash identifier: qWeLdOMCKAaaeZDZn6/uCeG/6VGGuSFm9dg0LI5RN3w=
Subject key identifier: 15:46:5F:25:1A:D2:5F:27:96:1E:B9:67:01:CC:C3:6E:D7:A6:EF:3E
Authority key identifier: 94:D5:87:B6:E7:5B:F1:08:AF:5B:42:49:22:C4:A8:BA:AB:3E:E9:46
Certificate issuer: /CN=A919F0DA/serialNumber=94D587B6E75BF108AF5B424922C4A8BAAB3EE946
Certificate serial: 07C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
Manifest number: 5FD1
Signing time: Fri 28 Mar 2025 14:15:31 +0000
Manifest this update: Fri 28 Mar 2025 14:15:30 +0000
Manifest next update: Fri 04 Apr 2025 14:15:30 +0000
Files and hashes: 1: lNWHtudb8QivW0JJIsSouqs-6UY.crl (hash: RkMHeYFGggskvo7R71BU/W5+Rky6Q9WDQILemnz7PKU=)
2: 58273588C2BD11EBA13EC07AC4F9AE02.roa (hash: 3mG/DAHD47ieP+pHQ6Ko9KqnRvDpTJqoMQIZjKg03d8=)
3: 22EA7FCC21F111EC85C6186EC4F9AE02.roa (hash: B5KSH4tVyudgx/M89rAS977NHCczXltU5o9B12V7IsU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1988 (0x7c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0DA
Validity
Not Before: Mar 28 14:15:30 2025 GMT
Not After : Apr 4 14:15:30 2025 GMT
Subject: CN=67e6af03-bcd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cf:e3:9f:26:34:30:30:d8:f7:36:1e:04:51:
6a:4d:74:5d:2b:c9:bc:9f:9a:04:59:72:31:ce:ae:
10:10:c1:04:11:fb:25:99:b3:b6:1e:7f:55:42:78:
e4:96:23:34:a8:c3:9c:a2:2d:5d:1b:fd:10:95:33:
56:f7:2a:dd:db:d9:8f:9c:6e:a0:d1:52:d1:c5:d1:
e8:de:8d:07:9c:4f:f6:16:2c:87:e6:44:71:10:82:
39:1b:60:e1:f8:81:fb:91:60:9f:ed:b2:9a:ad:5f:
9a:ee:c8:fd:5b:f7:84:01:f7:2d:49:01:97:96:2d:
1b:fd:bc:7d:4f:32:6f:53:2b:a1:f4:62:c8:2f:41:
a0:ee:c4:b6:1e:02:24:db:55:47:8b:c9:c9:a8:1c:
ec:b0:70:8f:c0:15:35:21:b6:30:e0:78:09:71:3f:
f5:16:c5:63:e3:ec:44:61:0d:a4:0e:ba:ab:08:3b:
a5:7b:53:e2:c2:e4:c0:08:5a:a7:10:2d:ea:48:3d:
08:27:82:5b:90:53:83:ae:e8:eb:da:3f:fb:2e:3d:
c5:76:04:e4:87:ae:ca:6c:d4:ff:53:8d:76:8c:48:
9a:a3:b0:5c:e2:64:8e:22:ae:99:71:02:23:ea:e8:
39:bc:4e:47:4e:46:0d:9d:ca:b8:30:a8:1c:bf:70:
21:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:46:5F:25:1A:D2:5F:27:96:1E:B9:67:01:CC:C3:6E:D7:A6:EF:3E
X509v3 Authority Key Identifier:
keyid:94:D5:87:B6:E7:5B:F1:08:AF:5B:42:49:22:C4:A8:BA:AB:3E:E9:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e4:50:2b:74:fe:35:ae:fb:13:ac:fa:d3:fc:8b:ca:5f:1a:
ea:c5:3b:d3:56:44:27:76:de:d0:87:41:94:6f:93:ae:3b:ac:
72:c5:58:be:b1:34:f1:70:c6:d4:a5:ce:05:b5:39:57:a4:43:
57:d2:a5:5e:a9:4c:aa:1b:2b:a8:3a:23:ae:46:88:c0:03:45:
58:d1:79:60:d0:9c:97:5b:c6:6d:d5:58:eb:ed:c2:f1:57:b5:
04:bb:2e:a1:c4:62:8f:95:c0:63:46:c9:d8:99:65:44:22:db:
f5:c3:4f:d6:ff:87:98:65:71:c9:01:de:58:c1:89:ab:d3:6c:
5a:f4:d0:ff:d7:6a:03:19:04:cd:71:c9:53:c5:de:13:bf:bc:
58:df:6f:4a:3f:36:df:bc:db:ef:8c:99:dd:4a:06:79:2f:0a:
3d:da:e5:e6:61:95:ec:63:71:32:b5:c7:82:6d:2c:fd:c7:64:
34:37:9f:cc:6d:0f:14:11:f5:3a:94:67:df:38:96:22:1b:11:
1e:08:ac:47:8c:34:ad:c1:e4:c1:fc:45:85:40:da:5e:db:f7:
9e:79:1e:5d:ca:6b:76:ca:49:81:85:c0:71:36:ca:c1:2a:43:
64:b7:17:15:fc:23:31:4f:ae:93:0c:19:a7:00:23:08:2c:01:
12:d2:08:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:52:00 2025 by rpki-client