Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft
File: 0WtcAvVxqLjfvUc87xSokssNAOE.mft (raw, json)
Hash identifier: EziS1COhGhBcIQufEQcLeKNY4uhCJ70LFISnOcGE2jQ=
Subject key identifier: A1:9E:80:DD:8A:B2:F2:80:00:A8:CA:84:31:68:CA:32:14:3D:A1:36
Authority key identifier: D1:6B:5C:02:F5:71:A8:B8:DF:BD:47:3C:EF:14:A8:92:CB:0D:00:E1
Certificate issuer: /CN=A91C4102/serialNumber=D16B5C02F571A8B8DFBD473CEF14A892CB0D00E1
Certificate serial: 077A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft
Manifest number: 119E
Signing time: Fri 28 Mar 2025 19:58:00 +0000
Manifest this update: Fri 28 Mar 2025 19:57:59 +0000
Manifest next update: Fri 04 Apr 2025 19:57:59 +0000
Files and hashes: 1: 0WtcAvVxqLjfvUc87xSokssNAOE.crl (hash: QFuaWcJ3XedFNUZ4s+nkbjND3Gkdi1vfK7TyG9TzZNI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1914 (0x77a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4102
Validity
Not Before: Mar 28 19:57:59 2025 GMT
Not After : Apr 4 19:57:59 2025 GMT
Subject: CN=67e6ff48-dc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f1:b6:00:39:92:3b:3d:95:4a:fd:c3:d9:41:
bf:72:d6:e3:75:49:07:56:3a:13:3a:f7:47:fb:a7:
0e:04:99:72:6b:ae:3f:81:9c:f1:ba:da:5b:eb:4f:
a7:fb:72:8e:3b:6b:e4:5a:1f:39:d9:e2:67:6e:ea:
a2:39:37:03:b9:69:06:fc:79:0f:f9:42:15:f5:57:
a9:41:02:57:c5:09:b4:9b:d5:17:0f:fd:00:d9:10:
bd:46:ff:70:b8:4f:d2:64:3e:79:e4:cc:a0:1e:a6:
da:4d:ad:3a:94:a7:b7:02:33:22:29:c4:4d:db:94:
b5:ac:a9:d9:1b:16:25:13:0b:8c:8b:e3:8f:07:8f:
cf:8b:0a:3e:c4:50:19:bf:98:02:93:43:36:cf:9b:
24:1b:3b:1c:e1:8f:b7:50:3c:25:19:f3:05:6b:75:
eb:31:6e:62:cc:a9:3d:e0:6e:12:0a:f0:dc:8e:07:
2c:52:2c:b9:4f:0a:f1:99:0d:71:15:ae:98:72:0f:
3b:46:07:7e:12:dd:9a:2b:56:28:f9:c4:ee:69:78:
00:b3:9b:0e:ff:7b:91:9d:63:f3:98:a8:79:c9:19:
37:31:44:a4:5f:14:73:f1:84:f7:33:e0:c1:d3:91:
fb:59:74:ea:6d:72:fd:8f:28:7b:c5:cb:fe:85:e5:
2d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9E:80:DD:8A:B2:F2:80:00:A8:CA:84:31:68:CA:32:14:3D:A1:36
X509v3 Authority Key Identifier:
keyid:D1:6B:5C:02:F5:71:A8:B8:DF:BD:47:3C:EF:14:A8:92:CB:0D:00:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:a4:bf:f0:a7:00:d7:b5:ff:3e:37:7e:1f:1d:9d:32:3e:64:
56:58:92:63:b6:d8:f7:55:26:bb:bc:6f:61:89:4d:0a:97:c1:
2b:03:ff:9a:a9:f8:b1:56:50:4c:8c:8c:8e:66:71:24:9c:36:
bd:2c:14:c0:84:91:96:7f:76:63:c0:7f:44:6c:19:5b:6e:d0:
81:05:bf:c3:70:6f:6f:29:a6:38:a5:57:f7:ea:c9:67:9b:9d:
1d:9b:10:d1:ab:22:7b:ae:d4:90:38:5b:35:49:91:f5:a4:4f:
1a:17:8b:78:6c:be:e5:b8:e8:08:5d:ee:b9:67:41:e2:96:8a:
7c:f4:b2:e6:ed:8a:b5:89:29:04:f7:e8:ad:41:2c:f8:4f:da:
84:05:6e:59:a3:fa:f3:4f:57:14:64:fc:3b:f6:53:9e:24:87:
8e:9d:21:84:cf:7e:6f:8a:c4:01:1c:e7:98:06:b9:71:5e:72:
89:8e:08:1a:3a:e7:4a:29:70:2d:5e:48:7d:d7:b7:13:90:22:
08:3a:ff:6a:a0:57:ec:7c:1d:e4:c6:36:d2:8f:60:61:d1:be:
b6:77:22:9e:22:e0:b3:08:28:f7:55:f4:2c:12:ad:41:54:e6:
88:8d:09:8d:4a:7c:47:6b:1c:14:14:20:2f:16:58:d4:a3:86:
33:9b:be:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:04 2025 by rpki-client