Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
File: vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft (raw, json)
Hash identifier: R+wyNpRq8XDdjP+TauFWGx/gj/DHLM1tB8YZPZoxM7w=
Subject key identifier: F9:D4:AD:9B:8B:84:CB:0D:6C:DC:80:5C:64:FC:89:60:B0:4E:49:A9
Authority key identifier: BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8
Certificate issuer: /CN=A91B36DC/serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8
Certificate serial: 076C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
Manifest number: 0757
Signing time: Fri 28 Mar 2025 21:55:27 +0000
Manifest this update: Fri 28 Mar 2025 21:55:26 +0000
Manifest next update: Fri 04 Apr 2025 21:55:26 +0000
Files and hashes: 1: vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl (hash: QtVd26/78RyHk6kAyYLKfqPwoEOooykC3TP4mfgYD9c=)
2: 1714A7D489BD11EC9550C184C4F9AE02.roa (hash: 17PUaNinV45JUoeDuEzM2gIqTYacZZ8Nc7vPAw8wlsY=)
3: FEA1EB7219FA11EBA0F82851C4F9AE02.roa (hash: Wckb8TWjJLJRdDl4+GoL8AkidPynBfPxz8z2YoV99xc=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1900 (0x76c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B36DC
Validity
Not Before: Mar 28 21:55:26 2025 GMT
Not After : Apr 4 21:55:26 2025 GMT
Subject: CN=67e71ace-eea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:83:7e:9d:f3:39:69:4f:6e:80:06:75:33:
c2:e4:8e:c1:79:7a:ae:5c:b3:25:e6:45:76:33:fa:
70:d6:83:81:be:6b:49:81:1a:52:0d:af:d6:ac:a7:
68:4a:c7:19:8e:20:e7:18:6a:4a:d0:29:62:1d:5d:
33:a9:2a:88:85:e4:f5:28:74:bf:a0:84:1a:19:0c:
21:84:0e:d6:e8:70:f3:83:9d:b2:86:20:d8:fd:f2:
eb:84:d7:1a:a1:fe:5a:01:71:e9:1a:84:41:64:09:
7e:c0:2c:ad:1a:fc:a9:cc:55:ec:2e:47:73:94:b6:
42:01:b1:69:33:a4:db:91:6c:73:fa:9a:1c:c4:8d:
32:62:96:ee:c2:e8:67:ef:0c:34:01:cf:c0:07:c8:
76:70:18:8b:b9:ac:6d:8c:10:1f:a9:61:b3:70:d8:
a0:65:2d:c8:a4:e3:5b:c0:98:15:54:7c:a6:3d:97:
ea:a0:16:e9:59:ca:84:88:8a:d1:46:80:30:5a:d8:
c4:1e:c2:be:1f:7d:36:bf:ec:09:88:fe:74:69:07:
60:69:34:ef:30:c3:8b:9b:26:1e:6e:5f:c4:68:1b:
7a:eb:fd:23:79:33:31:57:f0:af:d9:82:7c:89:74:
dd:65:8f:c0:c3:84:12:dd:d0:bf:bc:19:3b:70:27:
94:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D4:AD:9B:8B:84:CB:0D:6C:DC:80:5C:64:FC:89:60:B0:4E:49:A9
X509v3 Authority Key Identifier:
keyid:BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:6c:08:b9:71:ed:e1:36:31:02:10:5b:87:5c:17:3b:ac:27:
71:16:20:f6:bc:fe:d7:42:24:9f:21:24:3d:24:2f:e3:8d:3b:
5e:aa:e7:b4:0d:b3:97:98:5b:d0:02:47:e3:11:52:58:bf:29:
f5:72:13:8b:cc:ab:ae:7c:e1:62:ff:19:3e:e9:ab:e6:a7:62:
83:11:75:d3:c5:1e:71:59:99:54:5b:c6:8a:2c:8f:9b:c0:cd:
ce:75:11:f2:fd:dc:44:f5:00:cf:e3:85:6f:e5:8b:ba:db:84:
07:4d:1c:d1:91:fa:e4:4b:1c:86:bf:9b:93:b5:fd:c0:df:0b:
d3:b2:f7:52:7a:dd:f9:05:f2:07:4d:bc:2e:97:6d:1e:7f:43:
a6:25:be:b0:01:a7:43:5b:73:8c:68:6e:2a:02:4a:1b:78:93:
b1:e4:43:6b:02:e7:46:d4:b6:8a:f5:fc:e0:58:47:0e:80:da:
e4:3f:d0:79:45:7e:b8:09:84:1a:39:c0:7e:c4:b8:9e:d9:26:
60:ae:f5:25:7c:99:1b:19:5e:69:d2:bf:32:de:ca:21:44:f4:
c1:6d:8c:d3:82:33:4b:40:30:0b:69:3f:7a:f8:8a:b1:a5:c2:
ba:c6:8c:66:02:42:dd:51:5f:ff:24:d0:c9:4b:b2:3d:55:03:
be:77:39:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:40:11 2025 by rpki-client