Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
File: zF1c4NwYIQkMvHU417txI3GQguc.mft (raw, json)
Hash identifier: QeoP6kf48depkLiyDADOHmQ9QWWbCiYWS9lYxJjuJDw=
Subject key identifier: 23:8C:55:34:5E:E0:DB:5D:3A:0E:8A:07:D0:66:C0:1A:81:35:4C:52
Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
Certificate issuer: /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Certificate serial: 0800
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
Manifest number: 07F5
Signing time: Fri 28 Mar 2025 21:09:16 +0000
Manifest this update: Fri 28 Mar 2025 21:09:15 +0000
Manifest next update: Fri 04 Apr 2025 21:09:15 +0000
Files and hashes: 1: zF1c4NwYIQkMvHU417txI3GQguc.crl (hash: BRwwf4iW5CdSwUHOzN7NcRi/GTflpU+CG+plAL7fZ8s=)
2: 5A020E1229E011EB80A2FF13C4F9AE02.roa (hash: cqbI01oJRPBEH+/wJOlpiaUkORzn2kWmqx1uTWAfIc8=)
3: 5B1534BE29E011EB80A2FF13C4F9AE02.roa (hash: 1CIYo//bwjYUMyQBStYQUQ8rbC/A2KlKjD1S8BvGyiU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2048 (0x800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C91A6
Validity
Not Before: Mar 28 21:09:15 2025 GMT
Not After : Apr 4 21:09:15 2025 GMT
Subject: CN=67e70ffb-20a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5b:76:0f:a6:21:a3:e2:29:2b:56:7d:05:6d:
15:d7:7c:23:fd:d4:b7:ed:07:a5:d3:f5:5d:31:07:
b0:08:98:02:c6:04:91:8f:af:cb:80:5d:06:91:3c:
cb:58:fa:cc:47:92:cc:33:1d:42:84:5c:57:a6:25:
9d:fe:6c:e1:10:0f:b1:4a:2e:98:fe:cc:ce:b2:1f:
b3:29:8a:5d:3e:f9:ab:b0:2f:08:1a:18:e6:40:56:
62:32:9a:76:5d:56:cb:c8:49:93:b7:a3:9b:40:1a:
2d:4a:32:e8:b4:a8:a5:85:5e:bb:2d:94:c1:45:07:
f2:fc:ea:50:91:1f:0a:ef:7e:a6:3a:05:e4:17:4b:
87:98:38:36:25:8d:78:af:63:c2:4e:b6:36:e7:61:
5d:5e:02:34:2f:70:68:38:c1:e0:ed:bd:8d:86:d0:
0f:f4:b1:98:26:a6:5e:f8:26:e1:33:1e:b3:98:de:
44:7d:48:fb:71:48:e1:74:59:e7:e5:5a:c1:7b:8c:
2a:9d:1f:74:8c:10:59:40:ef:47:1f:ed:06:ee:08:
72:2b:0e:ac:4c:f1:5c:14:0b:d0:86:a3:a7:b4:0e:
05:fb:8f:33:8b:2b:60:53:ef:8f:3f:80:63:ed:82:
0d:e5:05:ec:d2:8f:7c:83:b1:3a:af:1e:cb:51:2d:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8C:55:34:5E:E0:DB:5D:3A:0E:8A:07:D0:66:C0:1A:81:35:4C:52
X509v3 Authority Key Identifier:
keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:0f:24:94:09:5b:9e:7e:be:79:67:c6:58:99:36:54:43:a5:
e5:93:06:f9:9b:9a:bd:57:68:b7:3b:80:23:3f:d4:4d:d4:9d:
da:4d:ff:4d:76:cf:27:a3:2a:86:45:ee:29:98:03:89:15:12:
e5:52:c6:47:58:0c:1d:49:c4:45:c9:05:1b:d9:3d:e0:ee:4d:
36:63:26:98:ca:be:d2:cc:96:67:0a:ff:b6:bd:e2:2f:60:d1:
05:ac:65:38:67:b6:95:d0:e6:bb:88:ba:58:f0:6b:4c:d8:10:
93:00:19:b9:8e:4f:0c:12:3f:d4:4a:e0:8e:51:c4:eb:0d:0d:
62:71:ee:c3:2f:30:f3:1c:f9:62:fb:04:ae:50:8d:8a:3c:af:
5c:af:fa:5c:d1:75:bf:2d:d2:ab:b2:97:c9:f4:ce:54:d3:27:
34:05:da:1d:c4:fd:08:5b:74:0c:e3:0e:b7:8b:19:44:19:1c:
45:26:5c:3c:3f:34:9f:87:82:9a:ae:f1:0b:45:e7:6f:81:ae:
92:3c:34:5f:a2:d3:ef:34:4d:15:92:d2:bd:bf:7e:3d:d2:3b:
92:e7:8c:c3:d9:aa:a2:b0:0d:76:1b:44:68:6c:dc:97:c9:30:
62:9f:0b:4f:1e:55:0e:c1:98:85:25:83:08:d1:d4:e1:7f:1c:
47:01:04:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:42 2025 by rpki-client