Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
File: fXiohwseVXPWM8mnsAQKLuQF2VE.mft (raw, json)
Hash identifier: BL1JQtl+jLfEGnYQjDTzlk7Z500w/dQekWSHp+XdYKE=
Subject key identifier: FD:EB:67:E6:89:C4:1C:7A:28:4A:CC:EA:86:4F:3C:F6:60:62:47:02
Authority key identifier: 7D:78:A8:87:0B:1E:55:73:D6:33:C9:A7:B0:04:0A:2E:E4:05:D9:51
Certificate issuer: /CN=A91C162D/serialNumber=7D78A8870B1E5573D633C9A7B0040A2EE405D951
Certificate serial: 074D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
Manifest number: 0746
Signing time: Fri 28 Mar 2025 21:56:28 +0000
Manifest this update: Fri 28 Mar 2025 21:56:28 +0000
Manifest next update: Fri 04 Apr 2025 21:56:28 +0000
Files and hashes: 1: fXiohwseVXPWM8mnsAQKLuQF2VE.crl (hash: no8LAQLMyupIY4g6bFFY6CmvuGkfvpbiidPVwMTXEHg=)
2: 460D934A1C1611EB8BD35065C4F9AE02.roa (hash: lRmEF7OdQxrawwnYP3zjW/dSXGqk4ZIrvP4DGro+L9M=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1869 (0x74d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C162D
Validity
Not Before: Mar 28 21:56:28 2025 GMT
Not After : Apr 4 21:56:28 2025 GMT
Subject: CN=67e71b0c-e2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a9:6b:b0:61:31:58:dc:2d:7a:f3:ea:4e:91:
91:7e:72:4a:59:76:dc:40:c7:fd:bf:3b:b0:75:8b:
0d:1f:b2:40:b7:b1:2e:0b:01:0b:7b:40:9e:18:af:
59:de:a9:f0:74:52:b0:84:f6:bd:da:ca:1c:38:54:
38:4a:e3:26:73:04:23:16:ad:d5:b7:7b:3a:65:53:
5e:b3:58:6f:6d:b4:04:b2:52:2f:96:7f:5b:27:dd:
f5:4b:2e:2d:da:de:90:95:a6:bd:c2:dc:8d:61:e7:
14:5c:98:f7:4f:9d:61:81:8a:0c:f2:58:cc:28:ca:
db:68:bd:93:89:85:2c:ed:7b:d6:70:61:be:9a:5b:
15:b0:da:45:0b:88:10:ae:a4:1d:80:2f:05:86:26:
47:94:1e:a2:31:99:87:1d:24:a7:c9:ea:ec:72:a1:
5b:65:67:19:5d:90:d5:98:7d:f4:82:28:93:50:aa:
cf:96:11:bd:b3:eb:8f:50:45:73:c5:b7:bb:44:ed:
fe:35:1f:3d:c9:7a:0b:f5:db:5f:d4:28:43:b7:42:
03:34:8e:7d:26:d5:ec:2d:33:aa:d5:24:d5:92:19:
24:b3:3e:03:8d:46:f2:df:38:a5:72:e3:fa:ed:ce:
f1:4e:5e:a6:1e:f0:d7:f4:31:46:d7:27:dd:7e:16:
e4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EB:67:E6:89:C4:1C:7A:28:4A:CC:EA:86:4F:3C:F6:60:62:47:02
X509v3 Authority Key Identifier:
keyid:7D:78:A8:87:0B:1E:55:73:D6:33:C9:A7:B0:04:0A:2E:E4:05:D9:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f5:2d:73:a0:a5:32:e1:6a:ad:4d:e7:5d:73:af:73:b6:94:
4f:1a:5d:86:54:65:7b:68:23:f9:21:fc:23:bd:dc:77:d5:3b:
52:dd:2c:a7:24:a9:44:57:a4:86:73:1c:e3:f2:f9:cb:35:ce:
98:b4:30:9a:93:be:1d:7a:ff:0f:c5:46:21:30:6d:67:25:db:
6c:23:65:2e:65:0b:56:1a:f0:0b:02:64:94:b6:ac:dd:ae:c4:
d0:96:8c:2d:2f:45:e6:bf:f6:1f:d9:0b:33:c9:e6:10:cb:d8:
7f:54:28:ab:0a:75:f9:e5:e6:2f:bc:cd:99:89:f2:4a:b2:79:
bc:cc:35:85:e2:39:0a:d8:d8:65:d3:d7:2c:85:fd:e2:48:ab:
80:bf:43:60:cd:cd:3f:38:19:28:00:6c:76:51:39:c3:5e:84:
80:0b:46:c0:79:56:c5:d6:4f:06:a2:d5:1e:91:29:a1:48:d6:
dc:34:e3:e0:40:11:cf:a5:a5:8f:60:bd:dc:20:32:a5:3c:f8:
4d:13:b1:fc:1c:e5:18:e3:4d:d5:49:b9:62:b8:9a:54:06:f8:
46:f2:24:1b:6b:77:f6:91:ff:9e:33:c3:bf:f3:e6:7b:15:ea:
72:ec:75:1d:7c:44:32:84:72:0d:0e:de:fc:39:2f:59:29:cf:
0b:6c:d0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:14:59 2025 by rpki-client