Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
File: dHyGw8wUp3lzgFMVQIzcoQohR7I.mft (raw, json)
Hash identifier: aHZYzQc4BBe7NsW3Y8OumFeL+Wy0plhIq7sjTjn4i78=
Subject key identifier: 60:90:91:42:B9:E5:F5:DB:B5:88:83:40:3F:51:E2:F5:A3:6D:E8:FF
Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Certificate serial: 0751
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
Manifest number: 0735
Signing time: Fri 28 Mar 2025 22:00:23 +0000
Manifest this update: Fri 28 Mar 2025 22:00:23 +0000
Manifest next update: Fri 04 Apr 2025 22:00:23 +0000
Files and hashes: 1: dHyGw8wUp3lzgFMVQIzcoQohR7I.crl (hash: nbpt1rq2eEtGSdX6WjUdKuEVwDHDT1eTgE6gy8DGIMg=)
2: 827329BE232B11EBB2348B23C4F9AE02.roa (hash: JZswEN+XecxArpSSM4RVMDRfDgGMw001dDeS9M+57zo=)
3: 8126464A232B11EBB2348B23C4F9AE02.roa (hash: oEPtlYq/nXMulTOfDIA15K7NQ6WPK/Aw89/ToBV4eiI=)
4: 81D72348232B11EBB2348B23C4F9AE02.roa (hash: a7MdMxFeYrNOuayo2yExYYUNllObfBGwl1IXCgsh4ko=)
5: 8320FBE8232B11EBB2348B23C4F9AE02.roa (hash: UcnwxScsysCMY48lVfpQF1IzUJ5+Szuvgh1AHnaByPI=)
6: FAA525207A4411EB804B7430C4F9AE02.roa (hash: qRd5pNy25aeVVisd65wzJ8hT+cyr+S2QBDIpDf9Jz7M=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1873 (0x751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB94D
Validity
Not Before: Mar 28 22:00:23 2025 GMT
Not After : Apr 4 22:00:23 2025 GMT
Subject: CN=67e71bf7-7eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:24:d8:c1:95:81:3b:83:a5:4e:14:d5:cf:76:
91:b1:2c:bc:4c:d8:d3:ce:c6:76:32:2e:d5:65:2a:
de:9e:12:e8:93:77:c9:a6:4f:ed:5e:6b:aa:70:dc:
b6:9b:4a:55:41:72:1f:5d:2f:77:3a:4d:59:81:cb:
23:df:ac:16:ba:80:a7:5c:18:a1:60:e0:f5:58:70:
0d:1e:2a:e0:14:cb:12:04:72:d4:a0:5e:62:86:f4:
02:fa:da:08:4a:9b:17:20:a6:fb:a7:7d:69:47:10:
48:38:05:60:bb:8b:a1:77:18:46:fc:e4:19:4f:ba:
bb:21:7f:86:cd:7e:cb:69:49:94:4c:3b:be:5d:cf:
65:82:b4:f7:5a:b7:60:65:6b:2b:e7:ce:83:cd:6d:
1a:8b:05:07:df:d5:1b:3a:d8:1b:61:b3:2f:c7:48:
b9:1a:3e:ed:b2:fc:69:4f:a5:24:34:a4:58:b4:ab:
81:b9:b2:f3:2d:98:57:ed:3c:1f:5e:1c:fe:e9:17:
5d:f1:84:a9:59:38:e9:08:8c:fe:41:b6:cc:08:51:
04:a5:25:e2:86:62:62:67:3e:3e:12:a0:78:b2:07:
42:68:79:e8:f5:ac:d4:d0:c9:d1:68:93:fa:33:11:
62:cc:d6:2e:c8:c9:29:22:74:24:3a:93:6b:47:ea:
67:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:90:91:42:B9:E5:F5:DB:B5:88:83:40:3F:51:E2:F5:A3:6D:E8:FF
X509v3 Authority Key Identifier:
keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ae:fe:e5:92:a5:68:45:ce:58:fb:cb:4d:48:10:47:1e:3a:
69:8f:94:b7:38:3d:c2:8f:0f:72:45:57:72:5e:cf:8b:47:2a:
b0:cf:d8:5f:d8:d2:d1:75:2e:0e:c3:58:77:b8:b8:96:3d:da:
b4:c4:81:28:56:36:1d:cf:eb:0f:93:7f:fb:30:a8:34:5d:03:
e8:89:e6:e2:69:d9:1f:52:9f:d5:27:01:ea:21:00:1f:48:17:
f1:e0:47:52:2b:e1:5b:bc:f3:f8:42:3d:2e:d6:8f:83:dc:17:
d8:14:d9:a2:70:f1:0f:51:84:6f:1d:07:76:e3:73:7f:32:5a:
8a:ac:89:dc:b3:fa:b1:67:04:cd:25:f9:04:c6:39:c1:f6:a9:
0c:59:6f:a1:86:37:09:e6:e0:d9:b5:29:48:f1:9d:62:37:fb:
48:90:12:96:f8:aa:c5:8a:25:65:9f:66:c3:77:38:77:70:34:
83:9c:45:aa:61:cb:75:b1:19:98:dc:81:fd:9b:97:a0:29:d6:
31:ea:4c:92:94:77:b0:c4:04:b1:ee:42:a6:bd:ee:db:0b:29:
32:14:79:e1:56:9b:d7:44:79:e2:cb:4f:a6:79:2e:4b:33:59:
04:6c:37:ba:b3:7d:22:74:cf:5c:9b:3f:b2:19:f1:c0:cc:19:
b8:1a:a2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:49 2025 by rpki-client