Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json)
Hash identifier: Kn4uJTL2wKH5N0+X5Z5e5VBcoQMzsh24AssE8ydUSsI=
Subject key identifier: B7:23:06:01:F5:AD:04:1C:1D:02:2A:B1:59:31:1F:73:25:16:BD:23
Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10
Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610
Certificate serial: 0CC1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
Manifest number: 0CB8
Signing time: Fri 28 Mar 2025 18:18:35 +0000
Manifest this update: Fri 28 Mar 2025 18:18:34 +0000
Manifest next update: Fri 04 Apr 2025 18:18:34 +0000
Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: zXvbvmM8c0FTlXiaqKY+qXYU0ubbdcNYRd1VrNDbklU=)
2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: 8KRCIYlWeIU1RFVFOTA+MnkOIQ/xaefXlo2pRQaFi20=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3265 (0xcc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3430
Validity
Not Before: Mar 28 18:18:34 2025 GMT
Not After : Apr 4 18:18:34 2025 GMT
Subject: CN=67e6e7fa-93c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e9:70:e1:08:3e:ca:95:6e:f9:9f:fc:7c:bb:
b7:7e:bf:c7:99:02:94:64:69:ad:b4:28:60:cf:f6:
52:27:19:cd:34:78:0e:a5:d5:b9:15:60:2c:13:14:
fd:fe:93:59:91:e4:da:77:4d:61:1d:84:af:25:2c:
28:5a:0f:cc:bf:e9:8e:11:74:d6:e5:15:a6:69:f4:
c3:42:af:d8:8b:b4:6f:d0:8b:b4:92:df:2e:92:cf:
99:4b:ca:38:b0:fd:0d:3e:d3:29:62:65:5a:e3:06:
c0:87:e7:1e:c2:e8:f3:eb:ab:a6:f2:d8:b6:d5:f6:
b1:42:97:7b:34:cb:23:db:be:a1:db:88:b7:b4:79:
d6:f6:aa:07:0a:13:c2:dc:5a:09:e2:e8:15:8c:0b:
dc:27:17:8d:9b:fa:b5:ec:51:4f:a4:b3:52:99:67:
66:6d:42:27:2e:f7:c5:a0:f5:52:da:b6:bf:c0:f7:
24:5d:64:05:7b:d8:c8:35:81:3c:ef:78:cb:a5:fb:
3f:3d:fe:29:fb:a0:94:67:2c:92:29:8c:7f:9c:29:
91:fd:37:86:ce:1f:47:89:3b:bc:1f:f7:a1:b7:b2:
10:cf:30:3f:ae:47:b9:80:68:72:73:7e:7e:a0:33:
23:1e:d9:4b:62:c8:73:9d:e7:10:1c:13:f8:43:2e:
30:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:23:06:01:F5:AD:04:1C:1D:02:2A:B1:59:31:1F:73:25:16:BD:23
X509v3 Authority Key Identifier:
keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0f:70:e2:24:3d:1c:12:67:ed:95:2d:aa:39:19:46:19:ef:
83:9a:31:1d:34:fe:81:ec:50:e5:0f:0a:dc:d9:94:8e:f6:2e:
71:5b:5c:ff:f3:f7:ff:63:97:28:c9:d9:7a:26:27:9e:a0:e7:
40:36:1f:b1:7e:be:82:a6:b0:56:2d:8a:5d:e2:78:94:18:86:
72:00:c4:5e:1a:f9:9c:bc:a7:2a:fa:e9:a9:c5:a9:9a:a9:d0:
ce:b9:e3:98:09:2c:43:2e:12:c3:c3:fb:ca:2f:cf:dc:88:1e:
ca:be:db:ce:b7:5b:2f:fb:37:15:0c:dd:3b:33:97:c0:19:82:
95:1d:ea:59:c7:da:e9:8a:bc:f7:c7:3a:a8:57:61:53:9a:d0:
01:a4:3b:1a:1b:5e:c4:76:38:c0:c3:59:a3:7d:17:63:c0:c4:
67:0d:07:58:80:14:d3:71:fd:94:9b:c8:e7:9f:63:78:00:a4:
17:f1:49:40:ab:22:9e:f2:f1:a3:dc:5f:90:91:37:7c:ec:33:
53:51:9c:3c:96:e6:19:f0:43:be:cd:52:d1:ba:95:8b:f0:01:
dd:2c:81:b0:02:87:d5:76:51:05:8a:ea:55:8e:77:53:5a:83:
3f:3a:2e:29:61:8b:3a:dc:ae:76:a8:dd:97:ad:d5:80:c5:69:
4b:d2:48:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:33 2025 by rpki-client