Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft
File: 8u2bFw-uMIgyQDmZULa8lTgOdBw.mft (raw, json)
Hash identifier: kwgAcP2C09CwZlj/oYhEh5DmrTbd6KvvzKMcKlS0Gh0=
Subject key identifier: 29:D4:2C:33:B4:AE:A2:3B:D0:29:CE:83:17:13:E7:6B:EF:A6:0F:23
Authority key identifier: F2:ED:9B:17:0F:AE:30:88:32:40:39:99:50:B6:BC:95:38:0E:74:1C
Certificate issuer: /CN=A91A4749/serialNumber=F2ED9B170FAE30883240399950B6BC95380E741C
Certificate serial: 09D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft
Manifest number: 09CE
Signing time: Fri 28 Mar 2025 20:11:23 +0000
Manifest this update: Fri 28 Mar 2025 20:11:23 +0000
Manifest next update: Fri 04 Apr 2025 20:11:23 +0000
Files and hashes: 1: 8u2bFw-uMIgyQDmZULa8lTgOdBw.crl (hash: VKqnxITmOxgV7kqIOORrchIe5YsmtGV4Cov2cH2cu2o=)
2: B42EBFF6796511EAB0595B6EC4F9AE02.roa (hash: lcdT2WKJng7KJMylMuLFFejoBYxRVE9D70A9AQhOkoA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2516 (0x9d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4749
Validity
Not Before: Mar 28 20:11:23 2025 GMT
Not After : Apr 4 20:11:23 2025 GMT
Subject: CN=67e7026b-8e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:43:22:27:87:0b:7f:69:9f:c3:fd:8a:85:
bd:22:19:f6:6f:ee:0d:15:2d:84:aa:a2:c6:7a:9c:
c8:5f:b7:5e:85:4a:52:c4:a9:51:02:12:7a:0d:db:
3d:4f:7a:9e:a1:58:38:9b:62:1f:03:f7:bb:b1:90:
1d:9e:cc:36:a2:76:25:fe:e9:d0:46:40:3f:21:b4:
a0:0d:43:18:7c:c0:99:0f:59:17:c7:55:1f:67:22:
12:d2:64:d6:42:d1:6e:d9:8c:1d:28:0a:75:a4:0b:
02:2f:67:36:54:9e:f4:d8:2b:ac:ac:35:eb:b8:81:
01:5d:80:86:3b:35:38:78:d4:2e:ac:f0:03:7e:eb:
76:95:00:1a:9f:2b:1a:2e:e6:6e:f8:d5:47:71:b9:
7e:46:c1:e0:b8:44:14:8c:d8:7c:16:8e:5e:ac:7a:
10:e1:da:cf:0f:9b:08:48:42:1b:5c:19:7e:26:c8:
11:e0:20:ea:e3:10:59:55:82:c4:21:57:43:eb:b7:
16:a5:a9:c1:48:b9:6b:1e:43:f8:63:ae:e6:65:ac:
f9:6c:01:f9:d5:0a:49:84:00:1c:7c:3d:2e:79:04:
9f:44:f0:c6:71:fd:9f:5b:4e:1d:6b:dc:d5:fa:dd:
59:cb:8f:0c:34:5e:4d:0d:ff:fa:40:f5:b6:fe:66:
ac:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D4:2C:33:B4:AE:A2:3B:D0:29:CE:83:17:13:E7:6B:EF:A6:0F:23
X509v3 Authority Key Identifier:
keyid:F2:ED:9B:17:0F:AE:30:88:32:40:39:99:50:B6:BC:95:38:0E:74:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:dc:ec:33:6e:41:3e:ca:cc:00:1d:9b:d2:be:da:e6:f7:89:
e0:ae:15:44:17:79:a5:93:34:ca:c3:4f:28:c4:79:7c:7b:7b:
14:ce:14:ca:d3:6b:a5:d9:2f:c1:39:2f:c1:3e:1f:c8:cf:d1:
fe:a1:67:9a:1c:0b:9a:21:e3:14:1e:56:10:41:81:08:aa:61:
52:b7:bf:0d:b5:67:d6:c4:a8:fc:47:bd:6d:6d:47:24:99:e8:
41:dd:ad:1e:4d:98:77:6a:1f:42:27:7a:75:ea:0f:f8:c1:5d:
38:93:52:c5:3d:d7:af:a8:1a:af:3e:95:ab:04:d2:7c:70:e1:
77:1a:f2:10:71:bc:84:8c:b6:55:a5:f5:2e:67:8d:c3:c5:b0:
05:b5:4e:89:7b:1b:0e:67:6c:5d:2b:25:ee:45:2a:15:54:f9:
20:d1:b4:e7:46:20:b4:6c:89:40:95:be:01:b5:f3:6b:f7:bb:
09:23:bd:4c:ac:b5:25:61:ea:f3:b8:fe:80:b4:1a:50:60:f1:
75:4b:b4:cc:c4:68:38:fb:96:75:5b:e7:82:79:6c:20:29:a7:
43:1f:8e:d7:14:7b:c2:9c:b9:ea:7c:99:20:61:dc:1e:48:80:
5d:a4:31:8b:b5:6e:1a:03:93:5e:c4:f1:43:ca:e9:31:7c:11:
b1:38:0a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:55 2025 by rpki-client