Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
File: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft (raw, json)
Hash identifier: S0fr2jq+OlGyEHm6pw04z2KTFz66tIOa4sudy0ZsZmk=
Subject key identifier: 85:1D:85:27:34:44:88:D2:C6:E6:40:F0:56:9E:12:0F:CF:BE:B2:DC
Authority key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4
Certificate issuer: /CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4
Certificate serial: 1DF8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
Manifest number: 1DE7
Signing time: Fri 28 Mar 2025 16:12:18 +0000
Manifest this update: Fri 28 Mar 2025 16:12:17 +0000
Manifest next update: Fri 04 Apr 2025 16:12:17 +0000
Files and hashes: 1: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl (hash: xHJATeC7j0rwvspRc7N2jNNrpbydH0PaJrZW5OGOkVY=)
2: 4A6679EC14DF11EEAB46A86DC4F9AE02.roa (hash: yY5rZMTsOpnGO6cAR5A6bi22J/lJ789z+ED1oN3orxw=)
3: 4B52A44814DF11EEAB46A86DC4F9AE02.roa (hash: 36rBW03tvoWvEp5FFhkEkP0PegguzR76VTv8hEMsFNk=)
4: 1DBC9D405DB411EEA017251AC4F9AE02.roa (hash: 2w+ZZZiHGzET+UAGMpulJr633xByME/2FAJYerduoZE=)
5: 4CE75372B9DE11EEBC5B0D21C4F9AE02.roa (hash: yps3mcP7HEC1/XDzl5d78p6GLXVPbcsPt7pEv3x1HZA=)
6: 4999305414DF11EEAB46A86DC4F9AE02.roa (hash: Bl17bhrifD1PMrI4c5ur7v5yVCt37LP+FsjpzcQgt1k=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7672 (0x1df8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B1A
Validity
Not Before: Mar 28 16:12:17 2025 GMT
Not After : Apr 4 16:12:17 2025 GMT
Subject: CN=67e6ca62-ab9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:84:76:b2:4e:ce:ea:d5:36:b2:c0:f8:16:
24:b7:f6:29:23:0d:33:04:1a:67:bc:15:5c:ee:e3:
75:36:fc:0e:53:7f:93:0b:1d:2a:8c:a2:d5:04:8a:
51:ec:a9:54:01:e2:29:93:48:e6:36:fe:f6:ac:f3:
48:bb:01:f5:13:93:e3:1b:18:15:3c:0d:b8:24:5a:
ff:ec:f1:53:4a:d5:47:17:44:f8:dc:fe:37:42:0e:
cc:5c:df:c2:ea:54:8a:56:e1:3f:be:60:2c:d4:6e:
40:b8:dc:e7:d6:46:7e:a1:6c:bb:86:92:86:f9:22:
05:1b:a0:8f:44:e4:8d:61:ad:0b:f3:19:d8:67:59:
25:fd:3a:eb:8d:1b:1a:af:59:f9:89:40:16:a9:a6:
ed:a7:73:26:f9:3f:43:e2:7d:77:6f:bb:35:39:cd:
b6:a4:80:88:87:8b:8f:fa:d8:89:03:df:36:73:20:
36:fa:dd:ce:6c:47:e1:43:c9:d2:20:9a:7d:c9:30:
85:63:8a:c5:66:42:3e:83:f7:9d:a6:f0:ac:78:ef:
83:77:ff:17:3e:2e:a6:04:d9:f0:78:f6:57:36:1c:
72:25:3c:5e:b5:fc:e1:17:6a:1d:aa:59:09:29:58:
f5:76:36:08:b5:34:9b:19:7b:ce:d4:38:0b:9a:4c:
b9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1D:85:27:34:44:88:D2:C6:E6:40:F0:56:9E:12:0F:CF:BE:B2:DC
X509v3 Authority Key Identifier:
keyid:CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:b5:54:ca:48:07:82:74:0b:02:c6:e8:cc:44:65:b3:0d:82:
ff:ff:85:23:56:83:14:67:be:6e:fc:4c:90:b8:5c:59:09:b6:
ef:7c:df:8a:83:ce:9e:56:14:a8:fa:e2:15:33:97:ac:30:01:
5d:01:f2:ae:4a:e6:4e:96:87:67:2d:28:f2:e7:59:a3:1b:49:
8d:97:6e:50:98:1f:58:5f:ef:6d:bd:e1:1f:f1:c4:d1:27:f6:
1f:10:8d:4e:5c:ac:ed:20:79:59:97:8c:1b:1a:e6:b9:ae:9d:
59:06:19:c4:28:dc:97:9b:13:64:0d:78:a4:d4:85:9a:9b:48:
07:23:28:27:81:44:7f:ec:fe:d8:9a:ad:d8:25:a0:9d:29:62:
f3:c7:29:bf:1d:00:a7:73:01:be:73:18:d6:cc:87:52:cf:67:
91:13:1d:75:79:cf:78:db:bb:04:71:84:8c:66:ca:1e:2c:e0:
b7:f1:8d:a0:ea:c6:4b:7a:11:0f:42:72:83:fc:6b:dd:02:fb:
64:d7:4d:3e:65:dd:26:79:ba:6c:6b:cd:35:86:b7:92:8d:cb:
04:bf:54:96:9a:d8:9c:8e:3d:b7:25:7b:06:55:79:91:ec:bb:
9b:4c:8a:65:cb:6e:a1:c2:13:72:b1:c0:22:28:d4:22:5b:70:
2b:df:fc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:40:03 2025 by rpki-client