Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft
File: 2en59z7k9bHN8XYsLfODKVCja30.mft (raw, json)
Hash identifier: LDzAg84tMub1CZRM1squXUM8llSFIZ59yytZz4byXEI=
Subject key identifier: 96:09:D7:1F:A3:79:72:68:A0:4A:73:27:42:20:BA:C9:FD:75:F9:42
Authority key identifier: D9:E9:F9:F7:3E:E4:F5:B1:CD:F1:76:2C:2D:F3:83:29:50:A3:6B:7D
Certificate issuer: /CN=A91AACB2/serialNumber=D9E9F9F73EE4F5B1CDF1762C2DF3832950A36B7D
Certificate serial: 3471
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft
Manifest number: 346B
Signing time: Fri 28 Mar 2025 15:02:56 +0000
Manifest this update: Fri 28 Mar 2025 15:02:55 +0000
Manifest next update: Fri 04 Apr 2025 15:02:55 +0000
Files and hashes: 1: 2en59z7k9bHN8XYsLfODKVCja30.crl (hash: bwPHEafn2Z8MXXxeKb0e7CT0kvKUGZHaFRWd/2RFZ5o=)
2: 76B5C744B45E11EAB71DF94AC4F9AE02.roa (hash: RzsyMG8grNRl/TU/HKZlXJ7ZiLnl0fu14E8Z0lJpa0Q=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13425 (0x3471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AACB2
Validity
Not Before: Mar 28 15:02:55 2025 GMT
Not After : Apr 4 15:02:55 2025 GMT
Subject: CN=67e6ba1f-8a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5c:fe:1d:a9:3f:2d:cc:71:06:f7:f5:f2:36:
17:0f:35:30:78:62:3c:9c:d0:e6:93:0a:8c:0c:c9:
1c:50:1e:54:86:9a:49:c6:73:f6:a3:94:8d:5c:f1:
18:30:5e:98:71:cd:3e:66:ad:8a:85:a0:26:05:27:
43:66:76:7c:49:c1:00:ad:0e:39:da:b6:31:6a:89:
77:ae:c5:0c:0b:42:ae:60:ff:c0:75:47:f2:0e:ff:
4d:56:be:1c:f7:74:5d:ac:89:5e:76:04:27:eb:92:
ea:25:95:b6:34:be:7d:af:17:86:8e:ca:0a:15:d2:
3a:d1:b6:70:c8:79:97:43:6d:39:1e:7c:69:96:fc:
fa:aa:58:d9:b5:ab:fa:fc:59:dd:3c:63:99:bf:69:
39:25:07:ca:08:07:2f:1f:f5:23:d8:0e:8b:e5:18:
46:49:4d:55:3b:f0:76:96:bd:f6:e4:b4:0d:50:c3:
96:fd:0a:ed:8d:36:ff:6b:74:ac:a2:b4:2e:7d:1e:
61:88:de:bb:9d:3e:cb:ae:7a:12:27:e2:78:a0:87:
69:dc:d3:40:9a:93:25:b0:c4:42:96:ea:b0:b0:63:
5c:2c:a6:55:f6:36:39:a1:7f:46:ee:64:a7:e9:81:
d0:7b:b3:d0:31:2a:ac:f5:4d:66:0b:b8:06:bf:47:
86:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:09:D7:1F:A3:79:72:68:A0:4A:73:27:42:20:BA:C9:FD:75:F9:42
X509v3 Authority Key Identifier:
keyid:D9:E9:F9:F7:3E:E4:F5:B1:CD:F1:76:2C:2D:F3:83:29:50:A3:6B:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f2:b5:9e:35:09:7e:75:b2:d4:ae:94:89:8d:93:2a:c1:9a:
ef:19:d7:9b:5c:59:01:ad:58:1a:a1:aa:bf:81:4a:82:a5:95:
04:f9:5e:b4:bb:d4:1a:53:87:02:1b:92:25:0c:e7:81:b3:5d:
6e:af:a7:80:24:f8:6b:ee:44:ba:66:f2:83:92:78:15:05:0f:
f5:c9:0b:37:cc:ee:d2:db:d3:72:d6:26:ea:b9:1d:69:57:40:
16:45:47:cc:df:21:43:78:59:9b:09:86:5a:e9:ff:90:0f:d5:
bd:ab:97:5c:28:33:ed:0a:06:79:c2:65:f1:05:13:ff:36:c7:
48:78:6d:25:cb:72:0a:d8:3a:04:b8:02:78:0a:0f:e7:ba:4e:
1d:c5:10:5a:dd:97:05:e0:fe:d3:4c:1b:d8:95:72:9d:a7:da:
b5:90:b6:dd:e8:dc:fa:0d:f6:3f:f6:0f:61:e9:be:a3:0c:17:
a7:93:4c:45:69:6b:06:e6:81:83:82:fa:5c:28:d1:11:12:80:
fa:07:d0:93:2c:d9:80:6a:6a:e8:d8:91:9e:ab:25:63:6a:20:
c6:de:b9:2d:5d:7c:3d:10:f6:76:2f:9c:23:d1:99:aa:5f:b1:
62:c4:65:cb:ef:91:a4:7b:40:d5:28:a3:d7:e5:81:c7:1e:b3:
03:44:6d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:22:18 2025 by rpki-client