Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft
File: y0yV-DniHR3g9FhVPZpM4o5BTYg.mft (raw, json)
Hash identifier: 1Bq9Ba0xYX+bNfzdKDK7sqDOSO4Wygkomv7z+mIWjhQ=
Subject key identifier: 19:9B:AB:B3:10:8C:89:6B:58:44:F1:23:15:96:3A:5D:86:93:BC:04
Authority key identifier: CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88
Certificate issuer: /CN=A91C4502/serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88
Certificate serial: 08D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft
Manifest number: 08AE
Signing time: Fri 28 Mar 2025 20:49:18 +0000
Manifest this update: Fri 28 Mar 2025 20:49:17 +0000
Manifest next update: Fri 04 Apr 2025 20:49:17 +0000
Files and hashes: 1: y0yV-DniHR3g9FhVPZpM4o5BTYg.crl (hash: 0BteFwlLpR37t79jzUegQ4AGQUzwrBld59Xbf+bZbkg=)
2: 9768CAB2550211EDA744F948C4F9AE02.roa (hash: +c7JrobNieG+ZMgvcidemgeezLPPKCFpg7+084o7JoA=)
3: 8CE5EE808E1A11EC96B4970AC4F9AE02.roa (hash: EZBagVr/hD3KJ6ELkAAEEOXAeLi6XW6fcfcVyYg3wjQ=)
4: 8C3B232E8E1A11EC96B4970AC4F9AE02.roa (hash: 8QLJCSW7Dx5LXrLw450pRNDRNzSQEQRY9thpGou2vRw=)
5: F407F0D49B8C11EC98C88432C4F9AE02.roa (hash: S/k+u3wzST4BAkpqg+O7+3Um9PXES4RfHWYozst9ucQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2256 (0x8d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4502
Validity
Not Before: Mar 28 20:49:17 2025 GMT
Not After : Apr 4 20:49:17 2025 GMT
Subject: CN=67e70b4e-e9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:52:67:d6:b0:ea:c7:29:cb:12:15:4e:c5:37:
d8:82:0a:54:54:08:82:00:95:16:28:16:0c:79:e3:
3a:14:02:f9:13:13:3c:c4:86:86:52:32:98:8e:2d:
af:ad:ff:7c:d9:54:d1:ac:ab:0d:0f:8a:9b:2d:d7:
3c:8f:83:ec:bf:05:85:d8:e0:24:cf:bc:fa:98:e5:
7b:84:7f:3a:5e:f5:d9:b3:ba:c8:7e:43:45:e2:80:
7c:77:f0:96:ea:96:87:17:1f:13:0b:8c:56:34:32:
ae:c6:dd:29:2d:72:93:99:5c:11:e0:46:3e:0f:89:
19:63:c9:cf:da:04:1c:dd:58:4c:8e:e7:45:f6:c0:
51:01:fd:7f:31:5b:d2:a8:2a:1e:25:62:38:1b:34:
3f:19:e5:46:24:3f:0d:5c:bb:70:13:2f:48:18:47:
55:5e:d1:15:6c:bb:52:bf:e3:64:c4:91:07:66:39:
f9:85:20:a3:52:e2:16:31:53:e2:61:16:fe:7a:91:
14:e0:51:af:ed:8d:7f:63:da:e0:47:33:68:c5:ea:
89:fc:97:61:b6:e7:3f:1b:6c:94:c6:6e:3f:85:2f:
49:2e:68:66:5f:e9:84:d3:c6:1b:7c:5d:91:54:9e:
d1:07:f3:39:f9:6b:62:2b:87:34:b6:8d:fe:d0:07:
92:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9B:AB:B3:10:8C:89:6B:58:44:F1:23:15:96:3A:5D:86:93:BC:04
X509v3 Authority Key Identifier:
keyid:CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ef:cd:5a:30:90:85:48:e7:5d:8b:d5:01:c5:2d:1d:d1:d0:
73:04:2e:17:fd:af:00:55:92:a5:c0:e8:c2:14:03:cd:e8:bd:
0d:5e:20:d7:6e:99:0d:f1:93:92:0e:39:fe:71:38:b1:84:76:
38:c2:80:af:4d:14:98:90:b1:6b:f5:d6:eb:9a:34:e7:47:1e:
40:27:95:94:bb:4f:c7:04:fa:f5:ec:70:c0:ba:48:f6:bd:50:
ca:7f:79:bf:d2:cf:a7:b2:8f:53:e8:ba:03:6d:cd:f5:ea:56:
7c:d0:f1:32:70:d0:1f:04:7a:ad:7d:5f:c8:3c:5c:b7:29:25:
27:45:3b:94:4b:a3:e0:19:0c:e6:68:bb:c6:49:c7:66:7c:30:
6b:7b:32:0a:c6:e0:be:49:32:66:0a:38:2d:5b:16:1b:28:85:
cf:e5:92:53:6b:ac:32:34:67:44:b9:4a:9f:27:d7:e4:dc:ce:
83:1a:0f:9f:9d:e3:df:eb:0b:40:38:08:0e:a9:8d:ba:d4:f7:
95:91:d2:cf:39:07:72:6f:6e:60:a8:49:5b:50:59:d0:46:32:
16:66:1a:bc:17:ae:d5:7c:62:40:90:3b:47:6f:33:0a:ce:90:
6d:41:59:87:07:20:3b:5f:c4:57:9f:1f:4b:65:93:ce:7e:8e:
2d:09:5c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:25 2025 by rpki-client