Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
File: MJHb_j66tWY-h63G6ZX4gtOyZMo.mft (raw, json)
Hash identifier: 9/Tx2l1oUUnyJM/VITDyV1Zuqm88Q7Z80KOSAMu6zNA=
Subject key identifier: 2F:0F:86:2E:78:0A:1D:B0:27:93:7C:88:8C:C1:8B:56:C0:19:5F:6D
Authority key identifier: 30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA
Certificate issuer: /CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA
Certificate serial: 0BF8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
Manifest number: 4058
Signing time: Fri 28 Mar 2025 15:08:30 +0000
Manifest this update: Fri 28 Mar 2025 15:08:30 +0000
Manifest next update: Fri 04 Apr 2025 15:08:30 +0000
Files and hashes: 1: MJHb_j66tWY-h63G6ZX4gtOyZMo.crl (hash: sNiKzvvK8eiVoRqJ03CLHU2SCMue3kZR3dy9m+/N0rg=)
2: 8941689CB44911EA92F1F886C4F9AE02.roa (hash: 4Z25oEXKd2i0RXY7kF9Yj9e1Ufs0rVahsGX9EeBSaFg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3064 (0xbf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1C49
Validity
Not Before: Mar 28 15:08:30 2025 GMT
Not After : Apr 4 15:08:30 2025 GMT
Subject: CN=67e6bb6e-dd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a1:8b:39:22:4a:bc:33:59:6d:32:5b:16:8b:
43:5f:52:1f:7a:e8:c1:f6:06:46:71:7c:79:4c:ed:
23:d1:ef:4c:17:a4:1f:da:90:ab:99:71:3f:28:fd:
e7:e2:f9:71:1a:08:af:77:f3:ae:fe:17:e8:71:23:
3b:12:6e:3e:2d:d3:ba:10:8b:4f:e3:bb:4b:0b:7b:
20:cd:7d:36:8f:2e:60:e4:61:bd:cd:9c:27:b6:34:
22:45:5c:4c:ac:d3:a2:81:e8:cb:6e:2a:16:a1:8f:
d0:82:1c:fa:f7:f3:43:ff:ab:41:d1:22:cc:77:3f:
c6:49:c6:41:98:51:9b:53:5c:d8:5c:4f:20:b0:bf:
2c:e4:7c:73:21:7f:b6:e6:1e:86:75:59:15:08:db:
ed:7f:61:83:46:e3:4a:31:41:e2:02:7c:86:4c:57:
fb:27:09:fd:b2:32:89:a0:07:e4:1e:66:53:17:22:
b3:87:93:45:b0:e3:ab:c1:16:2c:37:bf:1f:30:34:
80:f4:87:d9:84:71:f5:4b:69:5b:e8:79:e4:ef:07:
7f:c9:e0:60:00:01:8f:94:71:d6:af:39:0e:d2:aa:
d0:c8:0f:81:b4:01:ae:0a:74:dc:54:f6:a1:9f:4c:
d9:ce:6e:d9:d2:7f:08:fe:37:5f:a6:e9:db:ec:58:
3c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0F:86:2E:78:0A:1D:B0:27:93:7C:88:8C:C1:8B:56:C0:19:5F:6D
X509v3 Authority Key Identifier:
keyid:30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:ac:2d:09:79:64:4b:6e:4f:69:59:6f:7c:0a:00:c2:41:5f:
1d:97:bf:5c:62:5c:cd:33:7b:71:da:b9:0c:82:c1:9d:84:54:
e1:72:0b:6f:4a:c2:1a:bc:19:6f:fd:1c:54:2c:79:37:ba:1c:
b8:66:9e:b7:6c:d3:8e:e9:32:5f:5c:3b:ed:c6:b3:c2:ac:80:
f5:54:47:69:3f:b5:82:13:0c:78:0a:d2:8f:8a:fc:58:93:ca:
1d:6c:18:e9:30:31:04:89:03:27:38:28:56:cd:7d:14:de:e3:
44:45:71:40:36:8a:2b:15:de:6e:72:ff:f3:cc:bc:66:16:a2:
51:88:2c:24:52:c2:8c:7e:30:44:33:be:dc:d4:bd:9a:0c:c0:
52:e0:a2:07:a2:78:3e:9e:4c:8e:bc:31:ee:e6:09:13:5d:ab:
16:e4:4a:81:7e:dd:b2:ae:ef:4d:6d:90:2c:dd:09:b4:b0:ac:
6e:64:c2:8b:89:fe:fd:e7:c8:0d:dd:8e:b0:fb:c8:1f:74:ab:
13:cc:c1:b7:78:4b:b3:0a:27:da:55:ae:24:56:80:96:b3:ca:
c6:18:61:10:d4:a2:1c:23:60:59:aa:68:71:69:66:9d:80:08:
51:de:81:bf:a8:56:a1:f1:86:8c:13:21:e3:04:36:41:46:ef:
f8:80:6f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:19:17 2025 by rpki-client