Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft
File: woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft (raw, json)
Hash identifier: bT0lhLtD7I1wnWBm1EIHUnhT0OCAkR5Jqpa7GqApqlI=
Subject key identifier: 63:3A:5A:3F:C8:7A:CB:D0:B9:D4:25:84:0C:70:1D:7C:65:10:06:FF
Authority key identifier: C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D
Certificate issuer: /CN=A91C7B68/serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D
Certificate serial: 08F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft
Manifest number: 0997
Signing time: Fri 28 Mar 2025 20:46:41 +0000
Manifest this update: Fri 28 Mar 2025 20:46:41 +0000
Manifest next update: Fri 04 Apr 2025 20:46:41 +0000
Files and hashes: 1: woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl (hash: volNGDQJYCCXUrbRZQCv6tOsRFEAEYcT/s5dSbRXyN4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2289 (0x8f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7B68
Validity
Not Before: Mar 28 20:46:41 2025 GMT
Not After : Apr 4 20:46:41 2025 GMT
Subject: CN=67e70ab1-a0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:e5:20:73:56:79:21:dd:61:8b:02:49:51:
7e:de:40:ca:92:72:5f:52:d1:a3:68:e1:eb:13:26:
df:19:c5:25:5f:74:7f:16:fc:86:b8:6c:1b:b9:60:
cb:c4:0a:d3:30:4d:4c:1a:e7:6c:44:4f:7d:a6:5a:
f7:eb:84:c0:cd:89:76:6f:43:fb:71:46:95:3f:08:
b1:da:60:8d:fa:c7:21:9b:a9:c1:5f:d3:b0:9b:2f:
cb:cc:f5:1f:81:81:78:be:ea:8a:00:a9:ef:ca:ab:
49:f8:76:a8:6b:9f:a8:da:ad:06:25:28:6d:15:14:
40:19:17:d2:d7:61:57:69:6e:fb:f6:2c:04:8e:c7:
ab:ff:b1:fb:7c:78:dc:3d:65:86:df:24:6f:ac:88:
62:03:c3:a2:d7:bc:60:32:23:49:c8:19:99:1a:78:
fd:f7:e8:7f:4f:cf:b8:b1:c6:07:44:d6:7d:4f:23:
9e:33:f1:ba:ea:dc:a4:f2:a2:96:0b:66:1a:1f:a9:
b6:a2:22:93:ca:11:3a:1c:75:e5:51:02:51:14:30:
41:ba:13:86:b3:f1:3e:ed:5d:2c:dd:56:fa:1a:85:
ac:bd:07:3d:46:c3:b0:43:fc:3d:7e:af:47:f6:ba:
d9:e2:3c:21:06:af:0b:d9:db:2b:af:02:41:1d:33:
13:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3A:5A:3F:C8:7A:CB:D0:B9:D4:25:84:0C:70:1D:7C:65:10:06:FF
X509v3 Authority Key Identifier:
keyid:C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:9c:ee:72:2d:b5:f6:8b:78:ce:52:58:a4:3b:64:cb:d9:69:
d4:1d:de:23:b1:ff:91:6c:0f:44:c8:de:1a:aa:20:68:70:a0:
59:ff:8e:14:71:9f:e7:a4:fd:f9:a9:91:ba:42:dd:2d:a2:89:
d3:b3:62:5a:95:0a:cf:39:89:85:c0:06:33:64:f3:af:79:e1:
9c:42:c0:6f:b3:32:f3:68:d1:9b:d4:28:93:12:bd:9f:04:fd:
89:bc:5f:1d:8b:e9:74:b0:83:49:52:3a:65:a9:07:d2:dc:b6:
c6:d8:41:d4:17:20:25:66:02:9f:43:d7:01:f4:59:68:cf:f4:
04:7b:dd:c7:6d:e3:0b:a0:59:10:10:23:99:be:95:8c:84:07:
e7:ca:9c:3a:5f:50:4b:53:f7:6b:ad:2c:0c:f4:9d:02:4b:c9:
da:40:b2:20:a4:f3:0a:9a:f6:f3:64:05:a0:c1:10:4c:56:30:
19:06:3c:4c:73:78:b0:2c:d2:19:da:2b:c3:39:21:29:cb:e3:
c2:15:b6:09:45:32:54:22:5b:c4:ea:0b:88:92:4d:ec:71:f1:
ee:2f:70:00:36:49:6e:2e:f7:34:75:02:98:52:bf:2a:0d:d6:
6d:21:7b:44:1e:f7:d8:39:2a:73:1f:46:4c:45:8e:6e:d1:4f:
43:2f:ed:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:14 2025 by rpki-client