Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
File: a-rAl7V48XydcRl3ez9RFPvglxs.mft (raw, json)
Hash identifier: fBRrH4YmHambcHRZ4mGjtrzZNUHglwTmA5iIPgqw4cA=
Subject key identifier: 00:61:26:77:E3:35:26:FD:84:EF:B5:D6:9C:85:EA:7A:A2:CC:D4:96
Authority key identifier: 6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B
Certificate issuer: /CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
Certificate serial: 0C8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
Manifest number: 0C77
Signing time: Fri 28 Mar 2025 18:27:31 +0000
Manifest this update: Fri 28 Mar 2025 18:27:31 +0000
Manifest next update: Fri 04 Apr 2025 18:27:31 +0000
Files and hashes: 1: a-rAl7V48XydcRl3ez9RFPvglxs.crl (hash: JIJXbU2KfsxAmH0f2g/TLK8pFpsC8WXElqC7EklPktw=)
2: 498956B8FFC411EEB2369013C4F9AE02.roa (hash: w5Dpoxz9EcTss3nAI8ZMtrwKEHayowiUIHwPNhpEFMM=)
3: 48B3316EFFC411EEB2369013C4F9AE02.roa (hash: Fswv/F/vaivrwx2kQ/qe3AmxF+uS0o5WMUgISHj2Mxo=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3213 (0xc8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5A9F
Validity
Not Before: Mar 28 18:27:31 2025 GMT
Not After : Apr 4 18:27:31 2025 GMT
Subject: CN=67e6ea13-475c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:fb:21:53:56:38:5d:1a:82:04:7f:b4:19:
cd:8b:a6:9c:2b:8e:1e:d1:4f:b1:af:b7:c0:8e:65:
01:4c:9c:0c:ee:08:37:3e:77:0c:a1:c4:ea:3f:14:
9d:49:56:f4:45:aa:8b:0e:9e:ea:ca:be:58:24:98:
24:1b:53:a9:7c:39:45:02:ce:b7:9a:42:9e:fa:7a:
a7:0a:c2:30:fc:29:49:2c:b0:83:e9:1e:65:e8:91:
41:50:d5:44:9f:83:7d:25:5c:45:0e:f6:e1:95:dc:
51:c9:f9:c3:7d:e0:6a:69:ed:14:c4:a3:d9:31:55:
2f:a7:60:7d:98:ae:42:eb:1d:42:dd:ad:19:38:2d:
4c:64:8f:a0:10:77:8f:07:0f:ea:fd:26:81:fe:c0:
5e:21:5f:0e:41:99:6f:f1:c3:5d:a5:60:5f:7e:42:
26:08:f2:ad:9b:a3:6b:65:15:18:ff:27:1c:64:39:
63:2c:8d:bc:28:a5:a5:39:50:2f:4c:6c:cc:93:5a:
a5:4e:df:91:bb:16:b9:6a:f6:4a:61:e6:06:89:13:
e8:dd:bf:c8:f1:86:f0:40:a4:11:da:24:d2:bf:35:
2c:41:84:12:1f:0a:53:35:f1:0f:7c:a3:ba:7c:12:
fb:27:90:cf:2b:76:79:5a:a5:24:7c:94:3d:f4:3d:
b9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:61:26:77:E3:35:26:FD:84:EF:B5:D6:9C:85:EA:7A:A2:CC:D4:96
X509v3 Authority Key Identifier:
keyid:6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:b1:d1:9b:f2:20:c3:94:b9:7d:3f:10:e3:3e:56:26:a5:33:
64:a6:e2:24:c8:f8:93:db:3a:91:ae:8d:f6:4e:a6:bb:f1:f3:
b0:4c:c5:d9:18:48:d7:d4:cb:bd:ac:b0:03:49:e3:39:94:7d:
75:c4:28:f2:78:64:27:0b:c5:0a:83:a0:0b:e3:6e:7f:2a:09:
2a:cc:9f:9e:81:e7:dc:08:b9:45:f5:4f:0b:de:c3:a3:c4:83:
71:d5:15:d0:ee:a0:64:88:16:8e:4a:a4:fe:8a:cf:c6:2e:ef:
9b:c4:34:a5:21:d9:c8:de:8d:50:b4:d4:59:c7:d3:bf:81:2e:
b6:ad:93:7d:a0:30:fb:60:59:2b:a4:d0:6c:bf:17:ef:04:8d:
c8:39:8a:e4:b8:0a:74:2a:38:3d:23:74:e8:79:15:a2:23:e6:
ba:ea:de:33:cd:ea:9d:5e:41:60:8b:fd:fb:33:cd:66:77:1c:
f1:42:cc:ca:b3:4e:02:6b:d7:5e:ab:fc:2c:e2:18:b7:86:cc:
f4:ac:a8:3d:d4:00:ad:b4:cf:12:fd:a9:34:d5:28:c8:24:49:
9e:e8:f1:c7:53:5b:2d:ac:d9:8d:46:1d:a0:0e:c1:b8:f4:ff:
a8:f7:b5:f6:c1:69:33:39:29:6d:38:2a:91:08:86:8b:57:01:
5f:23:85:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:01 2025 by rpki-client