Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
File: OU6gholcbxfZNlSKMiOLgs95KU0.mft (raw, json)
Hash identifier: 3xftqRvAO+mYJ5C4YmohtsT24OOr3VO4kvajAFcPn5Y=
Subject key identifier: 33:44:ED:21:3D:B4:0F:2B:15:9A:90:94:B0:BA:67:AD:FE:60:08:08
Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Certificate serial: 0F97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
Manifest number: 0F8A
Signing time: Fri 28 Mar 2025 17:39:34 +0000
Manifest this update: Fri 28 Mar 2025 17:39:34 +0000
Manifest next update: Fri 04 Apr 2025 17:39:34 +0000
Files and hashes: 1: OU6gholcbxfZNlSKMiOLgs95KU0.crl (hash: ptb3WWhMcxyjpPl77x+7p6x14uoXvmbF61VqXSSTDFg=)
2: 68DA14E65BB211E9BF474F16C4F9AE02.roa (hash: m7Wy3YFoVjfJbST/TvC6OeEgaS0QkcmFqzNu4bjOVjA=)
3: B2409F28DF9311EEBF6BC36DC4F9AE02.roa (hash: J6dUTU+B3rYnE6IuMVXfZpLt706z/3t+VN2bTVaCwns=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3991 (0xf97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE16
Validity
Not Before: Mar 28 17:39:34 2025 GMT
Not After : Apr 4 17:39:34 2025 GMT
Subject: CN=67e6ded6-43db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2c:ed:a5:96:f3:2d:4f:01:33:cd:7f:21:ce:
89:8b:62:b0:6f:bf:2a:81:fd:10:c4:ba:c7:6f:60:
cb:81:3d:b2:6d:d1:10:0a:e0:d2:ce:09:c4:89:be:
9c:8a:2a:a9:33:88:48:6d:eb:2f:be:81:1d:70:47:
2f:ee:4e:58:10:43:c1:15:b4:41:4c:1b:a3:64:ee:
b1:d7:79:7e:e7:8b:c7:76:08:0e:c2:8d:9a:a6:84:
eb:04:f3:cf:84:9b:d8:ac:6e:e8:42:df:9c:1e:c7:
0b:25:50:7a:ec:0c:4f:29:aa:f0:4d:ce:91:25:d4:
56:ce:2d:f6:65:f0:33:06:62:b6:e3:98:6f:85:ee:
94:62:2c:e8:8f:e7:1c:6d:3d:33:71:45:fd:74:63:
88:3d:34:32:93:c8:8b:df:1d:70:45:e4:f1:c4:81:
ec:99:6e:8b:d9:32:c9:d8:53:6b:7d:c5:cb:fe:67:
3c:95:6d:78:38:1f:5c:68:8c:cc:d3:16:96:b2:57:
b4:b7:88:ee:0d:9d:4d:07:30:ec:74:a1:24:ab:da:
6d:96:19:61:43:ea:f2:4e:0b:70:a9:fc:02:6a:f7:
4d:31:a5:5e:8d:cd:45:c2:02:42:36:c1:3b:1f:87:
db:2d:35:d9:2b:44:e3:f1:08:08:02:7f:6f:70:e6:
65:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:44:ED:21:3D:B4:0F:2B:15:9A:90:94:B0:BA:67:AD:FE:60:08:08
X509v3 Authority Key Identifier:
keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:5d:80:81:e7:c3:a3:13:57:f2:7c:29:b8:15:6a:0d:6a:d6:
c7:fc:24:12:b5:e0:64:83:a3:8c:d9:28:97:4f:10:dc:12:51:
98:67:97:56:93:76:b5:f6:0d:b4:f5:8a:42:19:77:f6:12:01:
04:0f:61:a9:b4:b5:b4:d3:af:84:2e:76:48:1b:51:6e:9c:ee:
32:84:c3:0a:40:ef:78:0e:52:82:9a:17:83:63:c0:b9:5f:b2:
62:0c:36:a0:78:6c:e8:6f:64:76:6c:02:57:d6:98:a8:3c:b7:
44:8b:fd:19:ad:33:5d:59:5a:f0:42:ba:c8:02:18:8c:c9:c3:
a0:f4:6e:de:f5:dc:ac:c6:1b:7e:e4:74:c3:2c:b1:bd:c3:b7:
14:34:90:f5:b2:86:27:58:bc:99:70:0f:06:ac:ba:dd:c3:42:
64:58:7b:00:d0:4b:db:60:43:42:30:4b:88:a5:0b:68:a0:5e:
59:43:83:ab:e0:07:44:23:2c:b2:ba:46:c8:b2:2b:3c:d1:64:
d0:49:e2:e2:63:52:f8:c0:25:c8:b7:e7:9f:3f:a1:4d:c3:c9:
e0:fc:5c:41:d3:e3:29:35:03:bb:af:27:97:c6:a5:6c:88:47:
0d:31:19:78:e5:58:26:5c:b2:5b:14:d8:67:66:c8:57:55:da:
bb:74:fb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:22:12 2025 by rpki-client