Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft
File: UCfzGS691UlQo5w9EwlKcfHTMmY.mft (raw, json)
Hash identifier: 7vCUo86rjKMjtyiYbQtoy7A6JK2e09FF1WevTL/n1SA=
Subject key identifier: 44:E1:C2:33:FA:D9:2D:69:6D:9C:CB:4A:4D:AB:4D:8D:68:C8:F1:92
Authority key identifier: 50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66
Certificate issuer: /CN=A91A3078/serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266
Certificate serial: 0AE8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft
Manifest number: 0AC9
Signing time: Fri 28 Mar 2025 19:41:48 +0000
Manifest this update: Fri 28 Mar 2025 19:41:48 +0000
Manifest next update: Fri 04 Apr 2025 19:41:48 +0000
Files and hashes: 1: UCfzGS691UlQo5w9EwlKcfHTMmY.crl (hash: cNgRPdEUhs5X5XzuEpQ4BPwpEYKLX/SmRUflQOsTl+E=)
2: F3F7D2B0CE9711ECA2477C19C4F9AE02.roa (hash: YSanlXPMFGlUc59onSU43QiRooXV0uHeNRhQl6sQvzs=)
3: CDD62642854E11EBA2CFDC87C4F9AE02.roa (hash: EMIkCzah8q7OcQkgGcb8CJSovHyJ1MV1+D6g6V84DdU=)
4: CEFEEFEA854E11EBA2CFDC87C4F9AE02.roa (hash: neskcJ2ryIraX5yGhHnDKoHimVr5nfZfeUgF/8p7xpw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2792 (0xae8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3078
Validity
Not Before: Mar 28 19:41:48 2025 GMT
Not After : Apr 4 19:41:48 2025 GMT
Subject: CN=67e6fb7c-9597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7f:ca:a9:36:8f:c1:ed:04:9b:4c:4b:e9:f6:
d3:4e:27:39:60:8b:b7:97:51:be:eb:d6:88:13:6f:
04:09:04:15:4d:09:89:15:57:ca:42:f9:ce:fb:f9:
4b:17:48:5c:b7:70:4e:c3:0d:08:94:a0:5d:07:bb:
a8:6e:45:f6:db:b7:04:d0:85:6f:5d:0c:23:10:4b:
50:9b:82:65:9b:e1:ca:3a:b3:4f:9c:2a:db:8c:9a:
e8:82:bd:8e:3b:38:ff:a7:e7:c3:48:23:83:49:26:
53:55:05:5b:13:91:06:d1:2f:63:4b:2d:42:af:99:
43:64:16:59:a8:91:31:ff:c2:b3:59:71:58:70:10:
64:b1:b6:f2:6b:3e:f3:40:3d:b2:07:ee:e7:1e:7c:
25:1e:27:6b:67:95:52:f1:b9:67:9e:d3:1c:d1:70:
f9:6a:21:51:63:fb:ae:9f:8f:a3:2b:9e:2d:18:2e:
3b:ad:e5:79:8e:37:db:7a:8d:6f:98:7a:c1:c5:aa:
44:ad:f8:0a:9b:be:a0:76:6a:07:12:9d:ad:20:42:
80:36:90:20:ae:41:05:d9:52:bd:ef:6f:11:d1:b0:
d7:09:4e:0e:9e:30:67:5b:b6:9a:c1:f7:d1:d4:2c:
3e:48:ba:88:91:ea:06:cb:9a:87:48:b3:4b:ac:e4:
35:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E1:C2:33:FA:D9:2D:69:6D:9C:CB:4A:4D:AB:4D:8D:68:C8:F1:92
X509v3 Authority Key Identifier:
keyid:50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:ae:e8:8d:8e:1c:85:a0:3e:c2:fb:29:3e:da:c1:f8:78:d4:
93:24:82:77:0b:6b:bb:02:78:13:a2:53:d8:14:00:ce:f9:40:
f3:88:e0:7f:5b:38:3a:13:bd:61:8d:92:31:86:0b:d1:88:96:
76:14:fc:5a:2c:d3:98:00:20:cd:e2:02:7a:e5:b9:10:9c:bd:
21:ab:98:c8:43:67:91:29:5e:e7:26:57:f5:38:c7:68:9f:af:
d6:b1:ad:af:45:66:af:a6:73:6c:ee:24:09:87:0c:cd:b7:b3:
4a:a3:c4:a9:4a:37:8b:96:29:df:0f:9b:dc:c2:8a:d5:4c:4e:
d9:06:22:58:79:5f:d4:5c:92:3f:58:84:a6:85:a2:7d:a1:33:
9d:03:89:27:fb:d7:c6:b2:ce:81:6d:69:11:02:6a:2d:d1:51:
ae:40:34:c9:5b:1c:46:90:fe:61:bd:3b:77:ca:55:fc:c6:dd:
cb:1d:62:f2:05:b5:5c:1a:e2:45:89:36:d7:be:20:a8:79:66:
23:ba:fd:e3:8e:45:dd:08:c5:fb:77:95:3f:0d:09:a7:46:97:
f9:11:e9:fb:63:01:88:6a:6f:d2:8a:d9:e1:08:49:90:d4:14:
96:36:d7:e9:73:6e:f0:29:05:1d:73:64:94:63:2d:25:03:85:
92:46:b8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:26 2025 by rpki-client