Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json)
Hash identifier: RCsTTL1sstHoUQ9QWJTofz5GY+0eBruTYXkZ8FifoV4=
Subject key identifier: 5D:8A:4C:E7:9F:D3:4A:CB:DC:FC:11:05:66:F1:89:B6:61:CB:3C:1F
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial: 13CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
Manifest number: 1376
Signing time: Fri 28 Mar 2025 17:06:33 +0000
Manifest this update: Fri 28 Mar 2025 17:06:32 +0000
Manifest next update: Fri 04 Apr 2025 17:06:32 +0000
Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: wHWVxiSctL/vjOdDE32aVV+AX1NXZJqXgXH6LB4UdoQ=)
2: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: bxKpA/oFCU6TUM9crxLIgO78TFK6gY7b8jSCF6lkl2Q=)
3: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: Ie+fFLUk+hkh8iPsi0JIDwR97rjtnpIzqO2/djh9dOA=)
4: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: HMDXcvVMEGAxoOC++6wcObudAAOApyw/6bDY30a1r+o=)
5: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: bwsT9LHkujI+JrOu04/8rGiF6KuhSDYaJy2PKrf04nk=)
6: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: vIOfq2VGA/o5BqEJqyV+v1G5m5lQGi2kmLP/YtnJAmE=)
7: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: l4uHSTMAHvz3K39iQ1N6BJocMGP4W2EFJHrCsRCiw/k=)
8: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: 0Wf6MrY856EXSgNTseMSxFkk6LBzj+vW0CkBQhFM5Vo=)
9: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: wsYRvalqXpbWZCIqLrO6x3uxF4QcGxGmLPv4fG6+ndk=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5067 (0x13cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC847
Validity
Not Before: Mar 28 17:06:32 2025 GMT
Not After : Apr 4 17:06:32 2025 GMT
Subject: CN=67e6d719-d5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:11:36:c5:22:6d:6c:3e:bc:fc:50:e6:78:d2:
5a:13:dd:4c:f4:d0:10:a7:73:a8:17:b4:6c:28:88:
b9:d3:a3:d6:a0:ab:06:1f:d9:a6:fd:89:72:c4:58:
70:87:28:9c:10:4b:ec:de:0d:0b:28:e2:01:5c:4a:
ef:65:e5:0d:91:fe:f5:1a:35:ab:e7:f5:2d:2b:5d:
d8:59:5a:c9:c3:6f:ff:ac:f8:0a:a3:ec:bc:8d:aa:
a6:cc:e1:0d:06:d4:6e:28:9b:3f:a4:b5:be:15:7b:
4b:14:ec:e5:9b:75:44:00:33:e9:59:69:d4:bd:80:
d8:04:64:a7:c9:a0:69:43:16:94:24:9a:0d:04:e8:
1c:1d:20:9a:40:36:96:c1:1c:45:df:64:7e:ff:50:
ff:c5:ad:ee:32:58:b1:81:15:19:c6:21:37:9a:c9:
0b:88:bf:ac:e7:fe:86:34:68:41:b3:46:fb:24:12:
0d:06:e9:13:2f:b2:18:a7:ad:8a:ab:d5:b1:05:b1:
44:85:0a:bc:8f:02:26:c6:1b:4e:d2:11:21:ec:27:
36:de:7e:bc:81:e1:53:f8:c6:2b:01:d3:57:e2:93:
31:db:26:34:4b:cc:d4:c8:a7:75:63:0d:be:ed:58:
a8:32:58:6d:9b:77:9b:f5:49:71:27:bd:42:e4:42:
94:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8A:4C:E7:9F:D3:4A:CB:DC:FC:11:05:66:F1:89:B6:61:CB:3C:1F
X509v3 Authority Key Identifier:
keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:79:af:dc:af:b2:de:01:bf:3b:33:f1:a2:2d:9a:92:67:8a:
44:b0:ef:16:21:d4:5a:51:10:b3:52:29:0a:a4:70:f6:26:68:
e4:98:0d:1b:d5:74:7d:52:24:96:b1:94:1b:1e:f5:31:f1:4e:
e3:ff:32:85:3c:c3:e7:f5:75:85:f9:35:be:81:92:41:86:63:
e5:e1:44:b0:7c:cc:4b:e6:a6:bf:d6:c3:82:c9:c4:71:fe:29:
62:8b:2d:21:b6:79:97:e9:34:75:dd:7d:bd:64:d0:90:b3:22:
4d:26:f8:e3:c0:2f:4b:2f:4a:ca:96:e0:59:aa:d6:cd:ba:8d:
e6:f1:cc:63:af:14:21:dc:09:97:40:b4:c4:49:82:32:f4:b4:
17:2d:87:0b:8b:25:5e:17:22:8d:5b:08:66:ca:62:20:ca:c8:
ff:c7:52:93:d2:51:ef:1c:7a:4d:72:b0:c8:3b:79:2d:ec:93:
d3:c4:9b:8e:bf:10:30:d5:62:d4:20:87:64:d4:cc:d3:6d:57:
fd:52:ca:2b:3e:e9:91:11:5f:e4:93:d9:f9:5d:13:18:93:ec:
f1:44:4f:35:38:0c:b0:a9:7a:c5:ae:ef:31:0c:e3:57:33:a5:
9d:eb:eb:e6:ad:17:dd:3e:1f:14:66:24:30:a8:60:90:64:90:
b2:66:7f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:52:02 2025 by rpki-client