Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
File: -kF5Yn9bJllOVjA1Ogt3heDWksU.mft (raw, json)
Hash identifier: az9hP6GC/iYooU+TQjY248DxLdwrZ9z6xUWCo4hEc/A=
Subject key identifier: D2:59:0D:23:F7:59:BF:1A:B8:78:89:51:BF:AD:28:95:8D:66:E6:D7
Authority key identifier: FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5
Certificate issuer: /CN=A91C1621/serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5
Certificate serial: 349A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
Manifest number: 3483
Signing time: Fri 28 Mar 2025 14:16:16 +0000
Manifest this update: Fri 28 Mar 2025 14:16:16 +0000
Manifest next update: Fri 04 Apr 2025 14:16:16 +0000
Files and hashes: 1: -kF5Yn9bJllOVjA1Ogt3heDWksU.crl (hash: V3L7/yR9iE918JcegjXyIf2JSgAEDV76lBiBIFCXj3M=)
2: CDE36D52DB9511E99F3F673EC4F9AE02.roa (hash: zbmIG6CT7ypIn3HcTtsDFC7ihfXsVyZlUb242ctePDw=)
3: BB8F87B4D4B011ECAA427351C4F9AE02.roa (hash: V6xVQh9iUu5NDnwtI8z/zA2tAozAKTEZViih6UdSdQ0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13466 (0x349a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1621
Validity
Not Before: Mar 28 14:16:16 2025 GMT
Not After : Apr 4 14:16:16 2025 GMT
Subject: CN=67e6af30-9a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:53:53:a7:bb:5b:71:2a:dd:f7:44:db:ac:
d5:39:f6:f5:7d:f6:71:91:c3:50:1c:b2:2e:ab:40:
8e:20:4f:35:de:9c:d9:42:89:c5:23:23:ef:7c:41:
69:aa:9c:6d:fb:f1:fa:0c:bc:d4:ee:24:fb:b4:99:
62:5c:7e:65:f8:bf:30:39:51:3a:19:0e:fd:b9:0f:
22:f3:d8:c4:f3:2a:15:21:0c:c6:39:df:b5:2a:ed:
65:73:91:7a:07:72:3b:75:6d:3e:72:fd:f7:db:7d:
30:2a:50:5b:be:59:6e:06:de:7c:81:00:ca:96:85:
fa:32:42:01:2b:10:a5:22:77:5c:8f:c6:39:d9:4e:
d4:c7:a6:2e:ac:c0:6f:27:bc:6a:96:39:31:30:d2:
95:ac:dc:6e:2e:47:90:a7:d7:3d:4f:64:56:ff:1d:
ea:28:db:b5:49:70:4a:80:6f:ed:85:ba:60:82:b9:
e1:f8:fb:23:7b:85:d1:cb:eb:78:06:1c:8a:4f:b9:
3f:05:db:3c:73:91:a3:4f:78:cd:85:0d:eb:9a:82:
47:f9:87:ce:6a:b1:51:c2:9f:2e:ed:c0:49:ce:7d:
b3:c2:58:3b:41:d5:82:a2:32:a5:61:06:65:5c:5d:
40:4d:1b:5d:71:fa:01:8d:ef:8d:83:43:12:f6:9d:
f8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:59:0D:23:F7:59:BF:1A:B8:78:89:51:BF:AD:28:95:8D:66:E6:D7
X509v3 Authority Key Identifier:
keyid:FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:b7:74:a9:43:8b:1f:e7:be:07:0d:54:0f:43:a8:e7:71:cb:
84:89:a9:f2:d0:08:c1:a7:33:a9:53:70:cb:85:89:c0:28:fc:
8d:47:6c:9d:4c:25:4f:fc:17:15:46:cf:5b:da:f3:f7:98:9d:
c7:6a:c3:45:61:d5:4b:fd:63:57:f0:62:53:5c:79:3c:0f:a5:
55:e9:c6:10:62:b4:bd:3b:ae:f9:33:2c:57:23:b3:9c:77:d1:
00:88:c2:a1:43:db:98:67:79:64:a6:eb:0c:3c:9d:48:64:02:
a5:fa:7e:2c:56:4b:3b:79:bc:ee:fe:be:29:2a:ed:3e:b1:d0:
64:99:4f:9f:b1:b1:db:61:0c:c0:95:af:dd:56:9c:a2:fa:25:
48:24:c0:bf:59:a4:a9:87:e8:58:02:1f:94:cc:0b:39:40:d0:
5c:d5:11:6a:94:49:3b:e3:7a:27:92:d3:dd:0d:5c:32:5a:ed:
f1:f2:3c:0e:5b:47:9a:65:a4:d0:99:88:c8:ce:51:de:1f:e5:
1e:89:9f:99:ab:79:a3:70:c1:c7:ef:3d:36:75:37:9f:db:94:
4d:27:5a:c1:6d:b8:6d:3b:c9:5b:d0:e0:e7:5f:5e:7d:69:e8:
4d:aa:a4:82:35:b1:d8:0e:f6:57:c3:2b:1e:fb:b9:51:cc:61:
36:51:eb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:14:53 2025 by rpki-client