Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
File: 99dMf7iwuu_DY1zU41BIr4jjnu8.mft (raw, json)
Hash identifier: tkyn7ARVc5vZACfKZTpt+3etfhmCgqd0yu1Pq21SmZY=
Subject key identifier: 3B:CD:E0:8B:DA:C2:92:1C:BC:5A:23:4E:8D:23:6D:9E:A8:0A:C6:19
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Certificate issuer: /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial: 1A7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
Manifest number: 1A35
Signing time: Fri 28 Mar 2025 16:28:47 +0000
Manifest this update: Fri 28 Mar 2025 16:28:47 +0000
Manifest next update: Fri 04 Apr 2025 16:28:47 +0000
Files and hashes: 1: 99dMf7iwuu_DY1zU41BIr4jjnu8.crl (hash: cyjBH3utcaWp/0v2OLgvdhjqKtCTU56gAs2GD4ffqNo=)
2: 2578CBCCFD4611EDA9A46F52C4F9AE02.roa (hash: jydEv4NneB7Sx0FI1skcD0suh5/17vxrfrRhEQ0JaqY=)
3: 16A3B47EED7A11EAB00FA463C4F9AE02.roa (hash: uAi5hk9bT6OpTbwWwY5GVK1G5kvFxxOzsk2pWZ48nYI=)
4: 1E17F340724911E88CAE8E84C4F9AE02.roa (hash: +QlUC0glkpkPjA7w7I6khloOS3EPNSs60LtlxtxV3uU=)
5: F5257E60FD4111ED947CD631C4F9AE02.roa (hash: UAirDrULY6myyNx1vMq3KsBU3lZ7343RMeFE+Epfgj4=)
6: AC39D9F8615211E7BAD4DA61C4F9AE02.roa (hash: +kw+0Dd+hCJOF0NUg0Cg9CE8CUioX2H2bzk5xcJylVg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6779 (0x1a7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F6A8
Validity
Not Before: Mar 28 16:28:47 2025 GMT
Not After : Apr 4 16:28:47 2025 GMT
Subject: CN=67e6ce3f-4576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2a:76:7a:19:27:b7:9b:10:34:76:ff:a2:aa:
c4:2a:2a:4e:65:3b:8c:16:cb:b5:dd:cf:c4:97:65:
03:42:df:cc:d8:a5:d2:e9:28:85:b0:da:d2:6a:c7:
8b:aa:4c:cd:79:4a:ba:a6:96:5a:5d:b1:9a:be:94:
c1:3c:a7:16:2d:ba:af:07:3a:ac:19:31:ee:3e:c0:
3a:37:74:5e:a8:b9:4a:99:ec:af:32:2f:57:2f:a8:
df:33:6c:fa:47:c1:77:a5:48:22:37:70:17:dc:39:
16:4e:84:84:77:43:6d:18:9e:e1:ac:6e:49:ea:a3:
eb:ae:6d:72:4c:fa:d9:32:d7:2f:c9:8d:63:16:5e:
ea:77:c6:d0:47:3c:35:a2:ca:04:c0:3b:e3:aa:21:
af:92:6e:97:e5:15:0c:92:f6:bc:f7:cb:54:23:d9:
89:1b:36:6c:09:52:ea:ff:0e:65:90:ea:61:f0:25:
57:f0:8d:1e:d2:57:95:29:b5:38:aa:f1:d6:fe:76:
51:8b:0a:a9:2b:ce:47:db:e6:37:22:74:d3:5c:6a:
93:59:ba:a8:3e:0c:cd:9e:b4:5f:25:8d:46:ff:5b:
a1:37:f1:30:2a:15:15:0c:d4:47:23:b6:12:dc:76:
6e:ab:b9:a0:24:a0:9a:b1:0b:ee:94:6a:78:d7:18:
68:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CD:E0:8B:DA:C2:92:1C:BC:5A:23:4E:8D:23:6D:9E:A8:0A:C6:19
X509v3 Authority Key Identifier:
keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:6f:dd:cc:d8:1f:0c:e1:a8:62:d1:b1:98:13:30:c2:f6:48:
55:0c:63:6b:e5:f7:1b:92:61:85:16:6b:d0:74:9d:06:47:aa:
ae:5a:e7:2e:3b:23:25:71:04:43:5e:4f:35:85:9d:7e:4f:7c:
43:00:31:8d:f3:89:2c:f0:6c:34:89:a7:c1:69:08:be:86:71:
02:57:bf:8d:a7:5b:0a:5f:d7:58:c9:61:9f:12:e6:47:dd:69:
2d:f4:92:ce:cd:cd:db:59:d7:ed:ca:7a:da:e2:c8:9a:0a:c6:
a9:ab:37:d7:10:24:fa:6e:f7:cf:15:7b:fb:68:8b:58:b3:01:
a8:17:34:7e:84:a9:c4:04:f6:26:2d:e6:0a:63:51:0c:2b:6b:
46:a9:b8:e7:58:a8:1a:6e:20:06:bf:e7:7e:2d:9a:e4:09:b4:
67:61:ea:46:4d:e8:5b:24:78:6a:a8:64:fe:f9:2d:87:73:85:
89:67:e1:44:78:1c:50:b4:11:16:e3:41:fb:36:6f:5c:d9:0a:
2a:28:f5:5a:59:f0:80:30:59:71:e4:c6:0b:90:a9:39:23:c2:
a7:7f:61:31:98:05:aa:da:6e:65:e2:bb:06:fa:cc:89:e9:35:
68:1c:5e:34:39:14:d6:e1:e6:b1:2f:4e:77:d3:0d:cc:02:b4:
a6:37:67:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:27:11 2025 by rpki-client