Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft
File: fLBjBy0uSJJZhhStW6tT4d6v9wE.mft (raw, json)
Hash identifier: u8fmhMokZYW/ou1sHYuWkcfTj6ih07anPCduzPBY5O8=
Subject key identifier: 15:11:7E:D8:27:C6:63:36:4C:6A:3E:DA:87:D4:A2:5D:98:BD:D8:0A
Authority key identifier: 7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01
Certificate issuer: /CN=A91B994F/serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701
Certificate serial: 07DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft
Manifest number: 07D6
Signing time: Fri 28 Mar 2025 21:16:34 +0000
Manifest this update: Fri 28 Mar 2025 21:16:34 +0000
Manifest next update: Fri 04 Apr 2025 21:16:34 +0000
Files and hashes: 1: fLBjBy0uSJJZhhStW6tT4d6v9wE.crl (hash: 2w72H/0CJwzNzWuy7b1fbERqGMjErV8+RNyH0lqx4HM=)
2: 2B24D5DC854511EB9B57240FC4F9AE02.roa (hash: pddSesMHzjwu6JCf3PlAW1/YPkIYpAu0oAR4eat3olg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2015 (0x7df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B994F
Validity
Not Before: Mar 28 21:16:34 2025 GMT
Not After : Apr 4 21:16:34 2025 GMT
Subject: CN=67e711b2-a398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:3a:49:d5:1c:d5:c8:c5:47:5d:3f:fa:d1:
9d:3a:46:d5:5d:0e:59:6e:c9:be:fc:b1:26:66:e5:
a0:ad:ce:64:aa:a3:a3:b9:8c:e3:0a:97:4b:8b:30:
df:c4:82:6a:92:12:69:0e:46:08:91:2c:9f:39:36:
13:20:50:9b:69:89:e3:6e:be:99:af:41:6b:ff:7d:
1e:43:aa:5b:8a:49:62:70:07:23:02:21:24:ca:59:
88:6d:fd:58:50:9d:e9:71:04:b4:25:d1:ce:59:c8:
78:89:06:c1:42:f5:c7:cc:10:1b:5c:1a:18:ca:20:
ad:c2:68:2f:e4:a0:7d:eb:2a:c1:fd:b8:f0:6a:d1:
4b:29:3c:e6:42:8e:4d:70:79:b4:a1:58:07:94:43:
cd:62:fc:f9:ed:a4:d2:29:35:06:ef:a7:a4:78:68:
0b:87:20:2c:6b:d2:d1:af:15:5f:a3:00:a9:68:21:
a4:c4:8a:99:63:eb:b4:4f:d6:08:3f:57:70:97:e9:
01:eb:c5:3d:ce:f7:c3:71:a3:df:97:4e:74:91:0b:
b4:3b:32:f0:7d:31:6b:d9:bd:6c:60:71:1b:9a:1f:
bb:60:13:18:07:bd:c3:19:ac:cd:c7:f3:d8:f1:ec:
69:31:ba:ba:75:3d:67:64:0e:9c:77:6b:2b:67:a3:
a8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:11:7E:D8:27:C6:63:36:4C:6A:3E:DA:87:D4:A2:5D:98:BD:D8:0A
X509v3 Authority Key Identifier:
keyid:7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e8:01:52:c3:9d:23:61:d3:7a:0e:24:a3:d1:57:5d:b3:ea:
62:4d:72:5d:89:3d:a5:f3:e5:1f:5f:5d:67:d3:11:1e:fe:67:
47:39:03:84:71:85:b9:99:97:3b:2e:58:30:41:f6:4d:a1:23:
75:23:73:aa:fb:91:fe:ba:e7:b2:6f:94:4c:cd:f3:fc:08:c3:
08:1b:ae:e7:47:92:1f:a6:4f:cb:96:76:e8:44:ca:8c:de:78:
be:bd:d7:6b:d5:3f:aa:80:e5:77:8a:f8:ee:f9:c6:aa:d7:2a:
33:bb:ea:5c:12:01:fe:f5:da:b1:22:6d:20:aa:e5:2a:27:65:
3e:e2:4b:cd:f0:8d:08:e8:7a:6e:74:99:8d:5d:c8:e0:70:bb:
fb:e2:25:04:bf:c1:2f:26:bb:1d:c9:3c:c9:8f:62:e4:0b:07:
a1:b1:a6:74:0f:72:8d:48:1f:f7:b7:84:c7:ab:cb:ee:c8:02:
d1:96:ed:9a:4d:ce:2a:fa:e4:a7:1e:95:9c:9a:92:98:a9:d8:
90:14:2f:b5:af:21:7e:56:fd:14:65:75:bc:f9:a3:74:72:b0:
3f:8a:91:9a:69:71:e3:c5:c7:a4:df:73:0b:c4:a9:94:d9:fe:
a1:93:21:22:34:b3:1d:6e:f3:cc:33:23:ee:37:f2:f6:b2:9d:
2f:9f:6e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:20 2025 by rpki-client