Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
File: 6N-NXkyE2ofXKac8HE6GETgassE.mft (raw, json)
Hash identifier: TP7g+o6dHgvVajp5TEEh2TMlrthkPVvP1E5D57DZSRk=
Subject key identifier: 63:BD:C3:00:B7:96:DF:BA:4D:97:F2:F0:6F:63:A8:BC:74:27:C6:F9
Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
Certificate issuer: /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Certificate serial: 2A0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
Manifest number: 29EE
Signing time: Fri 28 Mar 2025 15:41:18 +0000
Manifest this update: Fri 28 Mar 2025 15:41:17 +0000
Manifest next update: Fri 04 Apr 2025 15:41:17 +0000
Files and hashes: 1: 6N-NXkyE2ofXKac8HE6GETgassE.crl (hash: UApEgkS1sveKPziDz80zcyZgiMg50NCJ7IM9lB0ggKo=)
2: 3785190EF0FE11EEA034D07EC4F9AE02.roa (hash: 7QHA7SnGm3Slg6UtKljXqvO3oOcVcBIhggVBhihsz2U=)
3: 445DB498796011EFA7E9391DC4F9AE02.roa (hash: NM7FShW06/HQ6VqGb5G2xSzxEZkPVe4ddn8MqSf2TiQ=)
4: E86E188A795F11EFBF3B491CC4F9AE02.roa (hash: 7r3+bfJMmECiAzmN3nCQ3UiLeoGkCPSVCRUYmPSHhFI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10766 (0x2a0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B01C7
Validity
Not Before: Mar 28 15:41:17 2025 GMT
Not After : Apr 4 15:41:17 2025 GMT
Subject: CN=67e6c31e-3830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:05:21:00:31:ed:08:cf:f5:fd:06:40:ce:f2:
fa:c2:a5:86:ab:81:34:46:85:3c:cb:bc:22:34:e2:
2d:78:74:b0:14:d1:ae:cb:8d:e4:5f:49:1e:49:7c:
8d:da:65:85:15:16:4c:8a:95:28:6f:aa:3d:46:79:
fa:e4:2a:d0:c0:16:76:3e:35:bd:13:54:cf:4f:83:
30:12:4d:cc:67:0c:22:0a:09:04:4a:7f:d1:da:7f:
5e:c8:90:db:3e:42:22:42:5c:c1:f6:54:8b:3a:02:
4f:be:c2:f0:c0:63:72:5d:13:a2:8a:c2:d2:40:0e:
3f:b6:cf:a6:49:dd:fe:78:00:82:46:d1:02:b1:cf:
a0:63:3d:a7:3d:40:98:8a:c9:41:06:89:81:01:c2:
a6:4d:55:e4:9d:9c:a7:cd:ce:87:1d:c2:d1:5c:43:
a1:53:5e:4b:9e:db:12:bb:68:1b:25:bd:a5:a3:e3:
0d:14:53:7f:20:1e:d1:33:96:ef:20:c6:38:62:94:
a2:96:2f:74:71:a6:4f:38:eb:d9:ea:bf:96:e5:9e:
5a:af:12:37:0e:39:03:b0:d4:16:ba:58:aa:6b:60:
1d:96:dc:d0:09:35:4d:6e:d3:52:7d:c2:bb:b6:64:
41:ff:bc:f3:6c:d4:ae:ed:1f:2a:a0:17:6d:4b:ea:
e1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BD:C3:00:B7:96:DF:BA:4D:97:F2:F0:6F:63:A8:BC:74:27:C6:F9
X509v3 Authority Key Identifier:
keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ee:a4:c5:bf:64:d4:5a:a8:7c:7e:11:c9:84:b1:1c:7a:f0:
a8:0e:ee:a9:2e:95:51:d2:2b:c6:bd:72:28:35:0e:49:69:26:
fd:a8:9c:5d:34:21:62:b0:c9:99:f4:13:46:5b:26:21:e5:09:
e0:15:55:36:a9:5e:42:75:ff:d4:6d:26:bf:2b:82:23:e2:a5:
29:4a:5a:e3:9f:e9:0e:44:5d:e6:67:5a:d0:3b:24:e1:bd:10:
71:5e:55:82:e0:36:a9:1e:0a:13:23:7c:f3:8b:de:9c:a6:90:
b8:fe:4d:19:8d:23:16:e6:18:c3:53:f9:67:8a:41:b3:18:b7:
98:3d:07:70:b0:0c:75:8e:5c:21:fb:af:10:16:26:94:b6:cb:
2a:d1:c0:5d:fb:7d:53:a3:64:56:40:43:7a:e4:dd:53:6c:f7:
48:09:c0:2a:98:83:93:fb:ea:99:49:e5:5f:af:05:0e:df:fc:
7d:91:1d:f6:5e:d5:72:53:03:7a:41:93:68:8e:a4:d7:c0:06:
4f:54:cf:42:e1:8e:88:ed:1e:a2:f2:59:ed:33:9b:bd:81:b2:
98:9d:89:2d:e4:db:25:aa:f3:b7:d4:00:7f:b5:2c:1c:ae:7c:
d9:85:b3:14:99:00:16:71:6b:bf:c6:18:f7:01:c9:e3:73:3d:
74:2c:78:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:17:26 2025 by rpki-client