Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft
File: CBzlpnA274VGmQv1lMzWMoB0BR0.mft (raw, json)
Hash identifier: xymvwMKmz0ja2MUPTJdeBYb7u1WnBiR/PPPvResFcsQ=
Subject key identifier: 30:26:C9:80:E0:1D:E6:5A:3A:56:B4:7C:25:33:AD:E3:DE:42:8A:FB
Authority key identifier: 08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D
Certificate issuer: /CN=A91AB1F6/serialNumber=081CE5A67036EF8546990BF594CCD6328074051D
Certificate serial: 094F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft
Manifest number: 0945
Signing time: Fri 28 Mar 2025 20:31:11 +0000
Manifest this update: Fri 28 Mar 2025 20:31:10 +0000
Manifest next update: Fri 04 Apr 2025 20:31:10 +0000
Files and hashes: 1: CBzlpnA274VGmQv1lMzWMoB0BR0.crl (hash: iy0cN+hP1+rEjE4V+53CPsLS71XHJrslXU9YJtwR2Tw=)
2: 59675AB20A4011F0AC302962C4F9AE02.roa (hash: tX8/5QgMtsCLrwoaol70And5FJnb3NLo6JwFspF8Ii4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2383 (0x94f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB1F6
Validity
Not Before: Mar 28 20:31:10 2025 GMT
Not After : Apr 4 20:31:10 2025 GMT
Subject: CN=67e7070e-0972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:94:02:16:cc:5f:42:6a:ba:34:66:cd:7d:a0:
d6:ee:98:b0:7c:86:f3:f0:25:b4:ea:35:8a:bf:73:
b6:b3:9a:28:bb:1a:aa:43:c4:96:57:b2:88:68:03:
ce:66:37:98:2b:86:f1:8c:b8:71:20:14:b5:15:a7:
ef:1f:8c:83:c9:4b:5b:9a:da:1b:3c:68:21:02:3a:
17:7f:3d:88:b6:3c:9d:ff:fa:5a:43:58:d6:b9:ff:
8e:3a:3d:ac:30:e5:4a:43:4c:1f:b7:83:54:30:d2:
b3:c8:03:16:f9:3b:91:7e:1b:cb:fa:32:d9:2d:2d:
80:4a:3d:16:8e:38:75:4f:bf:52:ba:6e:0e:e0:ca:
63:2e:a4:1c:90:59:23:34:2d:cf:41:48:9b:d4:08:
4e:a8:36:d8:c0:cf:b0:81:4f:6f:28:69:ae:ec:ac:
4e:6c:76:68:ad:16:14:5a:8f:b3:31:94:15:e5:6d:
50:25:0d:0d:94:53:28:bb:4d:a6:7f:51:a9:a0:fa:
c8:0a:dc:28:36:15:05:63:d5:b2:c6:51:d2:5a:9a:
d7:1c:fe:9a:9f:31:dc:33:e0:01:be:50:89:60:2f:
f4:33:0c:6e:7e:ea:78:69:d2:b2:9e:f5:3b:54:6b:
71:70:ef:56:bf:fd:77:18:95:58:26:41:d1:e1:24:
f8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:26:C9:80:E0:1D:E6:5A:3A:56:B4:7C:25:33:AD:E3:DE:42:8A:FB
X509v3 Authority Key Identifier:
keyid:08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:b6:d3:e4:47:0b:77:5c:60:35:39:ef:5d:63:08:e2:df:dd:
92:04:3e:b0:5d:0b:b3:6f:72:ec:53:54:ee:7c:ad:a5:59:be:
b9:ea:6b:57:9e:44:fa:22:8c:7f:df:22:c2:b3:e6:ac:45:27:
7a:b1:96:2b:a3:f7:6a:9f:af:5c:a7:98:28:dc:16:b9:02:2c:
fc:f3:89:1d:8a:f6:c5:f9:d4:bb:92:81:3b:ee:63:67:73:a4:
5a:89:30:95:33:f4:e9:74:21:2f:84:65:cd:84:67:40:ed:5c:
7d:06:8e:6e:a1:e8:4b:a9:71:ee:8d:d6:a8:02:99:8e:02:1b:
f3:c9:55:c6:96:82:b4:33:32:f9:43:4d:73:d3:18:ff:df:9d:
86:96:e7:99:fd:4c:8d:6b:56:ba:c0:cd:cf:8c:59:2a:64:95:
b4:ec:75:cc:43:3e:a2:3d:38:c1:74:36:2f:7f:71:6a:fa:f8:
fe:ed:c6:d8:96:62:7f:97:22:72:59:ca:87:84:04:2d:3c:58:
0f:bc:bf:75:9d:96:89:17:0c:c0:7f:15:65:d2:e9:c1:07:d3:
40:e4:bc:0d:cd:0d:40:eb:1e:36:bb:b3:ba:86:4d:29:37:42:
57:e2:39:be:0d:ff:9a:51:45:a1:98:93:0d:19:09:8d:c7:f0:
93:2e:f5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:30 2025 by rpki-client