Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft
File: sKQkzjnHjGXb8v_AKtuONUA2ycA.mft (raw, json)
Hash identifier: dSIdiSlRW48VYU5I81pOwEFAHWVNOoXyWXQGOwqwv8Q=
Subject key identifier: 6B:22:97:48:B2:5F:9B:89:0F:53:38:3C:A9:01:86:59:1F:E4:15:79
Authority key identifier: B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0
Certificate issuer: /CN=A91B7165/serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0
Certificate serial: 0A93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft
Manifest number: 0A88
Signing time: Fri 28 Mar 2025 19:47:51 +0000
Manifest this update: Fri 28 Mar 2025 19:47:50 +0000
Manifest next update: Fri 04 Apr 2025 19:47:50 +0000
Files and hashes: 1: sKQkzjnHjGXb8v_AKtuONUA2ycA.crl (hash: q78ckcBC7d3Li2aIr39+IVoOncTCiEGN3D7qWYRIlRs=)
2: 57422FE8E0D111EAA04F6C2DC4F9AE02.roa (hash: olTMqDnXnSyT/potSEnQ3EOjK4nPI/YajCwrfhHEjJc=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2707 (0xa93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7165
Validity
Not Before: Mar 28 19:47:50 2025 GMT
Not After : Apr 4 19:47:50 2025 GMT
Subject: CN=67e6fce7-f794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:66:55:23:d6:84:17:bc:9a:1a:71:2e:16:28:
a3:ff:cf:70:d3:17:d4:f2:41:fe:56:38:53:e2:c8:
68:cf:27:a2:72:43:2c:35:4c:91:3b:cc:7a:37:8b:
67:71:8d:a0:b9:60:e9:b3:2e:4d:8b:69:d2:59:15:
33:97:e8:b8:2d:2f:f6:fc:ce:28:16:6c:3d:a5:4b:
c1:9c:f2:ec:62:42:8c:fc:aa:17:04:e0:31:47:94:
d4:ff:c1:09:5d:28:96:9b:41:ac:d2:86:49:4e:e6:
86:85:4e:25:ec:53:00:98:e0:fa:bb:55:d2:23:d3:
b1:61:6d:fe:65:29:c3:a4:eb:e9:ad:0d:e4:d1:70:
81:76:c9:1c:41:33:c3:df:f6:03:7f:c9:96:8c:fc:
31:b9:26:3c:86:26:0a:3c:87:14:e0:46:3a:92:53:
45:db:d2:28:73:c9:24:34:ce:e2:62:d6:12:50:53:
36:73:1b:64:71:4b:5c:19:8d:3e:7b:70:b5:72:68:
c0:34:90:bb:d6:d0:dc:41:a1:cd:03:a8:12:a1:7f:
a9:69:df:93:81:72:59:03:69:92:fc:72:39:00:12:
a2:92:22:00:db:bf:a5:83:7f:ab:84:1d:ce:2f:b0:
21:55:a2:c6:c7:7f:a9:30:10:70:b5:d4:a7:3d:a9:
66:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:22:97:48:B2:5F:9B:89:0F:53:38:3C:A9:01:86:59:1F:E4:15:79
X509v3 Authority Key Identifier:
keyid:B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:27:f6:b8:2c:b1:d4:67:c8:ea:98:d8:66:cc:cd:0b:ab:ea:
52:b0:cd:8a:c2:52:bd:f1:1c:4b:b4:6b:e7:12:96:92:91:d9:
e0:26:01:33:57:75:6d:57:ff:ee:56:1e:8c:00:5d:59:24:0d:
1a:da:04:13:7a:2d:2b:21:5f:09:60:78:32:49:02:85:13:17:
54:b7:f9:d1:a9:b4:4b:e0:fe:71:66:f8:a0:69:53:14:9f:ee:
0f:30:88:4c:98:28:c3:5c:5f:14:fe:8f:81:6d:7a:81:9d:94:
64:19:8d:d4:4d:37:77:75:43:d2:17:86:4a:be:db:70:66:4e:
e8:db:0f:9c:a1:ea:c0:a5:27:d5:1b:cb:9a:9e:30:e6:04:0b:
1e:69:89:52:1a:84:2a:aa:9e:3c:2e:4e:a9:15:de:66:eb:77:
bf:29:10:6c:56:25:51:f7:b8:c2:3f:af:d2:d7:0e:af:88:c4:
ae:da:d3:00:d7:30:48:8a:39:e9:e0:f2:44:c4:14:8d:fa:a0:
e5:cb:b4:20:da:70:81:9d:34:18:65:d3:73:e3:55:71:7e:51:
63:69:7f:ae:5b:6b:f0:56:a8:46:d5:5f:c7:7a:8f:8c:10:25:
96:0e:5c:51:f7:9c:c2:e5:81:bd:19:63:63:4e:3c:93:eb:84:
27:37:ae:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:18 2025 by rpki-client