Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
File: qmMtxAKnAveanDaT6cxGxZge6Ow.mft (raw, json)
Hash identifier: YD92arqcTPkL8MDFi3PXMd55yurp585+8F00CZzcY48=
Subject key identifier: 88:EE:4C:BA:C2:DF:E1:72:E9:69:71:51:91:0B:4D:94:AA:9F:77:48
Authority key identifier: AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC
Certificate issuer: /CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC
Certificate serial: 19D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
Manifest number: 19CC
Signing time: Fri 28 Mar 2025 16:30:16 +0000
Manifest this update: Fri 28 Mar 2025 16:30:16 +0000
Manifest next update: Fri 04 Apr 2025 16:30:16 +0000
Files and hashes: 1: qmMtxAKnAveanDaT6cxGxZge6Ow.crl (hash: nAul00RjAAGGT7X6wOxDGK8Exh01/d7fgPXl2vVVeb4=)
2: 6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa (hash: JD/t6QBbxRTutJyXKFJnddzibwxtjVqq1blAC5X3uC4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6611 (0x19d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADBA2
Validity
Not Before: Mar 28 16:30:16 2025 GMT
Not After : Apr 4 16:30:16 2025 GMT
Subject: CN=67e6ce98-5b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f7:63:bc:0d:c1:de:15:88:24:97:67:ac:21:
59:32:4e:1d:83:5a:0c:0c:fb:69:de:24:94:a6:02:
1f:24:e9:b4:a0:20:bb:23:7b:c3:f1:d9:96:c0:b3:
31:37:c6:36:fb:e8:d8:97:c9:49:e6:1b:55:47:b8:
2b:f7:75:59:9a:68:76:77:7c:bb:a6:22:44:50:d7:
2d:28:2c:ea:72:59:c8:22:84:5b:64:30:78:00:5b:
ca:d7:ea:33:8a:9d:e0:a2:a5:1c:f3:50:52:72:97:
56:1f:0d:0d:40:e0:66:1c:78:f6:f7:59:d1:54:12:
21:d5:e8:9e:9e:c2:80:a1:e2:ff:f8:7c:88:b1:07:
f2:90:e5:18:ed:82:77:f4:ba:a5:c7:64:87:01:89:
0c:a2:fb:b5:e0:eb:07:1d:61:aa:42:64:76:36:7a:
79:1c:0e:92:cc:00:52:1e:79:d6:75:80:34:1d:a5:
37:11:76:bd:dd:d3:cc:fb:f9:90:96:ac:ef:12:58:
e4:ab:96:0f:47:05:4e:db:37:ad:ab:d6:5c:35:b2:
91:23:98:0e:07:cc:e3:e8:fa:cd:50:29:43:c1:7e:
c1:cb:ef:f2:df:ab:e2:b1:08:17:86:51:7f:1d:9e:
a8:b5:1c:d3:9d:ab:0b:b1:c5:a6:4c:39:d6:46:2e:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EE:4C:BA:C2:DF:E1:72:E9:69:71:51:91:0B:4D:94:AA:9F:77:48
X509v3 Authority Key Identifier:
keyid:AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:17:a2:25:b7:0f:48:bb:38:94:86:ee:2f:7c:f0:46:7e:24:
f3:7f:bf:e3:dc:b8:9b:f5:a5:98:b8:4a:9f:da:86:2d:95:5d:
6d:7a:e9:8d:9c:fe:da:27:d2:00:cc:15:d3:fe:f8:73:0f:84:
cf:36:e1:7a:96:18:ec:cf:76:93:96:44:9d:09:ac:3f:8c:87:
77:01:39:9b:bc:c7:a0:dc:5c:da:94:c6:94:26:4a:d4:f6:88:
82:e5:3e:d7:e5:4e:f1:62:11:f0:37:ad:90:c6:7d:98:9c:f4:
3b:57:32:64:2b:c7:59:84:db:9b:ca:a9:a1:54:3d:1c:37:13:
3c:1c:0a:b0:d4:d0:07:c1:3f:8f:85:6e:a9:44:27:a5:89:e0:
0f:4c:27:9e:3f:d3:41:ab:4c:f4:38:f9:34:ff:c9:a5:4b:c4:
5c:28:8b:ac:8e:86:04:75:fb:e2:d5:7e:30:8c:29:9c:07:e5:
03:c8:32:16:df:a1:47:e4:56:9a:f0:49:15:fa:6f:3c:82:69:
58:cb:60:c7:49:d4:c7:6e:b7:6b:21:0e:ec:fe:d5:79:02:44:
4c:6e:7f:84:81:7c:5c:62:cf:45:13:62:b1:85:b4:82:41:01:
1a:cf:c2:eb:77:d1:94:a4:b0:3e:22:6c:10:db:ea:46:67:de:
46:50:cd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:37 2025 by rpki-client