Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
File: T90ck6E8upG0-LfyxlGPSLoXC60.mft (raw, json)
Hash identifier: JD/1W5rsbLfoGXU4zjX64EKd0J5ZC742u+OuHa1xnuI=
Subject key identifier: 59:6B:2D:C2:15:DB:1A:D0:94:89:87:53:78:DC:BE:9E:71:C0:F8:9A
Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD
Certificate issuer: /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD
Certificate serial: 086E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
Manifest number: 0862
Signing time: Fri 28 Mar 2025 20:57:34 +0000
Manifest this update: Fri 28 Mar 2025 20:57:33 +0000
Manifest next update: Fri 04 Apr 2025 20:57:33 +0000
Files and hashes: 1: T90ck6E8upG0-LfyxlGPSLoXC60.crl (hash: sdOB+Se5N8t2YFUpGDfuuhQNBLnpchNSyc7X77QZKGU=)
2: F61502A4C0F511EA854EE45FC4F9AE02.roa (hash: OVL2vodt/AeNcQ/VG7TDRoihubsFrVHE/91iyWU1qa8=)
3: DB175658E9D711EBA3549B09C4F9AE02.roa (hash: j3P/lzXkhbJvg4pbwgOopu5SVTceOFM8ziHzhXEdZVs=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2158 (0x86e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC6DD
Validity
Not Before: Mar 28 20:57:33 2025 GMT
Not After : Apr 4 20:57:33 2025 GMT
Subject: CN=67e70d3e-d962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3d:25:bc:de:79:8f:c5:31:78:63:9d:65:19:
ab:76:09:56:53:8a:e3:18:1d:db:0e:a2:9c:33:2b:
d3:91:57:63:eb:04:6e:54:81:8f:15:c8:f5:63:f4:
fc:8d:30:0c:59:b7:09:6c:72:18:51:97:07:59:0a:
05:91:4c:b7:73:ab:1b:4d:0c:4d:d5:c8:03:8c:e0:
56:6a:13:1a:e8:a5:8a:0b:68:1b:1a:20:1b:9b:c3:
d1:29:c1:71:8d:20:1f:7c:7b:e5:d8:d4:4f:40:18:
0d:29:6a:02:61:c4:7f:f3:11:87:04:96:51:ae:af:
3c:76:55:00:7c:06:93:91:2e:b9:59:6d:ba:a0:d3:
b2:0b:07:b4:f6:b1:53:77:16:8c:5e:85:3b:39:70:
bc:2c:e4:8f:20:c9:35:f5:2b:7b:f9:e4:64:14:7b:
53:0a:41:d5:ed:64:c2:00:0a:be:ea:f2:0a:5a:0c:
9c:13:ff:f5:06:b3:7c:77:d8:e7:df:a5:9f:02:4e:
55:d0:7a:1f:69:cb:2f:7b:33:b6:a3:74:d7:89:a4:
62:f1:a2:3e:95:76:3f:33:21:cb:5f:c6:ea:5c:00:
e5:38:68:d4:fd:34:36:24:95:cd:50:4d:55:9d:99:
0b:b1:18:59:48:52:b4:e5:77:6f:51:f0:46:e6:99:
90:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6B:2D:C2:15:DB:1A:D0:94:89:87:53:78:DC:BE:9E:71:C0:F8:9A
X509v3 Authority Key Identifier:
keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:e7:33:35:4e:9d:39:bc:a7:5c:99:2a:ef:c3:eb:b1:cc:7d:
7b:ca:dd:1b:63:c6:a8:81:32:86:21:39:8c:07:cd:d0:9a:0f:
83:47:7a:bc:8e:7b:42:b0:02:64:c6:b9:14:75:ce:06:73:25:
3f:66:d6:a3:28:c8:80:9d:88:56:25:20:28:25:21:1e:c7:fc:
53:32:5f:2b:27:4a:e1:13:2a:bb:26:63:ac:41:8d:89:4b:65:
7c:c0:e5:d2:68:a2:1d:28:8c:6d:f7:4b:92:47:0f:11:ba:f8:
10:9a:ce:7b:be:fa:3c:2f:ca:43:22:4f:09:4f:e3:e7:66:a2:
ce:ed:21:b4:f6:8f:0a:63:7f:78:2f:82:41:8f:c3:df:d5:7b:
64:45:f9:1c:dd:29:88:31:11:6c:b4:91:0d:1d:37:62:b9:bb:
b4:48:cf:8a:87:63:9e:26:db:b7:d3:18:29:73:c5:0e:5e:ce:
1b:b3:6b:7c:9e:67:a9:bc:50:4c:1e:ba:ab:a1:b0:7c:c4:82:
5a:20:1a:fb:45:2a:4f:2b:cb:7f:4f:3e:09:f5:a5:ea:80:49:
c4:20:db:bd:e5:cc:64:10:c0:d5:fd:ec:97:12:81:34:06:5f:
61:fc:6c:32:3d:ae:63:1e:d0:da:5c:f7:dc:51:06:38:40:42:
8c:68:38:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:53 2025 by rpki-client