Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft
File: RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft (raw, json)
Hash identifier: msb50NR8OQC/kxcWH9FRtS5Yc8a5HKfs5gr3AY++dN0=
Subject key identifier: 35:7B:B9:9E:C2:B8:86:C7:60:AF:A6:E1:28:65:CE:A2:8F:1B:DC:B3
Authority key identifier: 45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1
Certificate issuer: /CN=A91C6833/serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1
Certificate serial: 1E31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft
Manifest number: 1E1C
Signing time: Fri 28 Mar 2025 16:11:27 +0000
Manifest this update: Fri 28 Mar 2025 16:11:26 +0000
Manifest next update: Fri 04 Apr 2025 16:11:26 +0000
Files and hashes: 1: RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl (hash: Cp8SRUpii+K2MS5mOR0z0TSFb9v4+87uNEgGVOa3nZs=)
2: 3F1BB7A09BC011EF995CBB11C4F9AE02.roa (hash: ppVaHDx1dLxEzXzKs4B/Bei6naIiQDjP+g7Sivk4L7g=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7729 (0x1e31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6833
Validity
Not Before: Mar 28 16:11:26 2025 GMT
Not After : Apr 4 16:11:26 2025 GMT
Subject: CN=67e6ca2f-39a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:c6:df:62:4a:01:85:e1:77:48:c6:c0:fc:
1e:d6:27:e9:1c:f8:f3:2c:82:fa:cf:6d:b8:c6:f4:
45:e1:d4:c0:08:5c:de:86:e9:d1:27:9b:f3:0f:cc:
c9:6a:c5:cb:80:98:8f:ac:a3:56:63:20:6a:7c:0b:
96:92:d1:90:af:40:70:fd:d0:1e:b2:3d:e1:6f:ae:
05:ff:db:91:33:fc:2e:3b:39:69:b0:bd:c5:d4:3c:
f6:bb:ab:57:a4:87:9d:0b:60:21:c7:20:ed:03:c4:
92:1e:45:f5:7a:3d:ed:30:94:62:c0:9e:3e:86:d6:
c0:7f:7d:5b:a6:fd:6f:97:f6:23:59:05:82:f2:69:
0f:ff:3a:48:d9:2a:24:29:06:99:00:57:6a:f3:ea:
d8:a9:d0:ba:ce:ff:71:f9:5a:bd:b8:45:85:e6:b3:
f1:30:2a:df:65:8d:e4:71:95:b0:49:ab:f8:69:2e:
72:4a:71:e0:ea:c3:48:b4:53:f3:bb:d9:45:fb:81:
c6:a5:69:a7:42:ec:7d:e7:2e:22:23:54:5a:14:b7:
1c:38:6c:3b:55:95:a0:79:b5:bd:79:62:0a:26:4b:
20:49:8a:70:58:1d:95:4b:7e:59:fd:06:8c:43:d2:
79:ee:68:b0:e9:a2:31:a7:29:61:68:51:d9:fc:f4:
e9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7B:B9:9E:C2:B8:86:C7:60:AF:A6:E1:28:65:CE:A2:8F:1B:DC:B3
X509v3 Authority Key Identifier:
keyid:45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:5c:70:1c:b3:00:eb:63:b5:77:92:97:7f:24:f2:6f:25:30:
b5:5e:3c:d0:f3:cb:26:fa:aa:ee:61:b1:0d:7a:7e:b7:d9:d8:
3d:17:95:d5:d9:6b:c2:a0:68:2b:38:4b:b2:8d:38:8c:fb:84:
9c:a7:60:88:19:56:a8:06:8d:78:01:c6:12:9c:22:a9:c2:be:
4e:b7:fa:e2:ef:12:86:bc:63:db:84:dd:1a:65:a1:65:7e:ac:
b3:0e:d4:83:57:49:4e:31:68:17:86:ef:4b:41:12:f3:ee:31:
bf:2f:5a:82:fd:54:e6:b1:02:5d:1f:1c:17:5d:71:41:b2:24:
6a:29:7f:68:02:27:a3:8b:fc:25:d8:45:b9:51:7c:8d:73:67:
ca:44:68:a5:15:e9:6c:92:14:34:56:0e:15:17:6e:2f:d6:78:
05:93:24:91:f9:69:94:9e:f2:05:59:2a:aa:a6:ae:7c:83:0d:
42:38:4b:f3:80:29:cb:99:26:6a:47:d4:02:e9:ad:c9:1a:e0:
fa:bd:c0:61:fa:2c:c1:c0:e4:d4:75:58:e2:1f:8b:d4:c9:86:
89:58:7d:48:35:e7:a3:8d:68:d6:d8:e4:8f:11:ad:1f:0e:ca:
4f:96:ac:22:e2:7c:4b:c1:b9:c5:c2:d5:6e:cf:df:84:e9:fb:
1d:05:96:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:30:10 2025 by rpki-client