Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
File: d-lG0L0pqiF78bHFrwsxU2wUenE.mft (raw, json)
Hash identifier: RclxBUx2ACdcQ9pkbFLjbgC2NKIT4pHUHqocrL5AQQ4=
Subject key identifier: 0A:05:0E:C7:06:7E:C6:DF:99:3F:CC:90:2F:5C:45:65:11:5C:43:DD
Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71
Certificate issuer: /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
Certificate serial: 3469
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
Manifest number: 3466
Signing time: Fri 28 Mar 2025 15:23:26 +0000
Manifest this update: Fri 28 Mar 2025 15:23:25 +0000
Manifest next update: Fri 04 Apr 2025 15:23:25 +0000
Files and hashes: 1: d-lG0L0pqiF78bHFrwsxU2wUenE.crl (hash: hF7poXvvI9eEmVp6EVAh0rBjWFrDimVr3CDBFKDiUiA=)
2: 92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa (hash: zYMb1XnG0WFocOb8g6o9H1kl0CBRuaJqUP3nm71UW5w=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13417 (0x3469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B352F
Validity
Not Before: Mar 28 15:23:25 2025 GMT
Not After : Apr 4 15:23:25 2025 GMT
Subject: CN=67e6beee-e9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:c6:7e:0e:da:a7:19:2c:e6:90:71:95:68:
07:aa:44:37:42:be:8e:77:e4:2e:0f:40:61:de:17:
79:b6:85:2d:59:d9:a0:b6:32:cd:26:1d:e3:e5:df:
b3:fe:a0:92:7c:bd:fe:16:09:6c:83:bc:d7:f5:d1:
02:cb:42:ac:af:53:42:9e:88:2e:0d:56:1e:78:cb:
44:9c:c2:c1:23:0b:30:69:07:01:d2:2d:b3:96:d7:
7f:ce:db:0b:bd:82:e5:f5:83:d6:94:f6:b1:87:d7:
ff:7e:97:05:30:68:22:7a:be:c7:0b:12:a0:39:df:
73:67:f6:0a:79:a6:c7:c2:ac:29:40:17:10:e4:d6:
ea:ef:0e:b5:b0:9a:e9:fb:c9:6e:33:9d:67:ac:f8:
27:0c:15:6c:ef:0d:8e:15:6a:04:ed:61:ea:25:27:
98:da:02:85:8b:ea:50:2b:23:8d:d6:25:a5:1e:d0:
9b:01:12:0b:bf:58:5c:7d:b4:7b:84:54:e9:42:b7:
db:0a:b2:1c:38:91:cd:73:b4:bc:ce:c6:0b:cd:1b:
67:00:cd:b0:db:b7:f6:0d:c0:33:b8:95:89:9d:41:
98:9d:6a:0f:75:b4:ba:24:be:02:4e:d9:dd:15:17:
9c:51:2d:9c:db:1b:6d:1f:ad:7b:6d:40:f2:84:31:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:05:0E:C7:06:7E:C6:DF:99:3F:CC:90:2F:5C:45:65:11:5C:43:DD
X509v3 Authority Key Identifier:
keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6a:c6:3a:e2:83:4c:fa:cd:be:39:12:2d:a8:6d:d0:80:d2:
ed:cb:9f:b0:1f:74:bd:37:57:12:b0:0d:af:21:5e:55:dd:7b:
d9:27:cb:fd:74:34:06:ea:9f:30:c2:c3:08:88:93:f4:3b:27:
5b:2d:f5:f9:2f:ca:ed:fa:0a:7b:b9:bc:e9:1c:8b:83:6d:48:
96:ce:21:b4:a8:d3:1b:72:6e:4a:a9:51:fc:ba:2a:96:14:67:
51:e6:fc:b9:1d:2b:bc:0a:f7:fb:75:45:5f:5f:b2:0b:c0:a4:
3c:7b:03:0e:79:97:3f:eb:75:e8:c7:24:3e:1f:13:8d:1a:74:
9c:25:e4:ad:40:85:f5:1e:fa:23:0c:f5:72:9b:29:dd:b3:08:
a6:cd:79:83:f3:05:fd:b9:88:c1:a9:2b:22:aa:30:43:60:1e:
fa:df:33:6e:03:bb:78:e7:c2:b8:0f:a4:d2:5a:d3:72:e4:67:
94:8e:8c:18:9a:ea:08:e3:f2:8c:5b:d5:f5:e8:5a:d4:9a:9c:
3c:2a:3b:c8:17:34:0c:54:cc:ea:22:29:5f:e1:e1:fc:99:af:
ec:93:42:05:00:e9:02:f5:69:b6:a9:33:8a:2c:1a:31:25:d9:
01:4a:95:4b:f7:a2:5a:de:f1:ae:7c:47:c0:1b:67:ea:a1:f1:
e3:29:e0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:29:53 2025 by rpki-client