Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft
File: yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft (raw, json)
Hash identifier: WdrvwtDJKYFdODNug/1VYT6P/giSmFQnpBLBp5HosWk=
Subject key identifier: C2:D7:B9:A1:98:37:61:F5:DC:D0:CB:F1:EE:44:D7:5C:6A:C0:73:18
Authority key identifier: C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B
Certificate issuer: /CN=A91CC8B1/serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B
Certificate serial: 0C0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft
Manifest number: 0C04
Signing time: Fri 28 Mar 2025 18:49:08 +0000
Manifest this update: Fri 28 Mar 2025 18:49:07 +0000
Manifest next update: Fri 04 Apr 2025 18:49:07 +0000
Files and hashes: 1: yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl (hash: zGT/Xv8IwNPbS1Nzo/RrdrlBJhtnGl8oGpN+HN3AzVA=)
2: 69308C200A9611EABF034172C4F9AE02.roa (hash: UpR8nuBc/YxAqJ5KwZdD471HRL+h2X0H2SIoY13S/74=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3084 (0xc0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC8B1
Validity
Not Before: Mar 28 18:49:07 2025 GMT
Not After : Apr 4 18:49:07 2025 GMT
Subject: CN=67e6ef24-b0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e8:11:a3:c6:39:1a:86:e9:62:ca:f5:ae:76:
a8:6c:26:c1:e0:cb:43:2b:e9:38:3d:7e:77:fa:ea:
25:c3:4b:1b:5b:0e:e2:4f:03:07:5b:22:12:7d:ed:
75:01:73:7d:4d:56:93:28:3e:2a:31:a6:3c:26:28:
fb:a6:3c:21:7f:d7:15:bc:05:e7:df:82:89:9b:98:
76:0b:69:ba:7a:47:2b:eb:24:e8:8b:4f:20:69:a3:
7c:a9:98:a2:26:68:c2:e0:7c:37:f0:38:37:67:d2:
11:df:ec:38:f4:80:61:10:c9:41:39:fe:38:77:3c:
6d:32:a1:34:4d:93:67:de:aa:8c:fd:71:f2:11:9c:
61:63:18:28:ef:4e:ab:f0:45:66:bd:ad:de:a1:1a:
bf:59:1a:9b:38:cb:b8:9e:36:f8:9e:54:f6:f0:e9:
d4:0f:12:ed:bd:40:5f:29:3a:b3:4a:c5:cb:a0:03:
46:07:ae:73:05:e5:bd:13:cc:65:4d:4f:a7:57:2d:
a6:67:36:e0:fb:42:cd:ff:20:3a:41:8b:96:a4:94:
3d:93:44:fd:79:39:9a:c3:33:81:27:c0:74:47:e4:
d1:48:de:ce:03:cc:40:8b:59:b6:0b:51:5d:fb:cc:
be:15:5b:6d:30:c0:9e:05:ee:6f:74:e6:25:aa:8c:
0d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D7:B9:A1:98:37:61:F5:DC:D0:CB:F1:EE:44:D7:5C:6A:C0:73:18
X509v3 Authority Key Identifier:
keyid:C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:7e:93:ef:e2:aa:f8:8c:0d:c0:16:b0:61:81:f4:db:80:1b:
b2:1d:f3:5a:e1:23:c1:83:46:16:b0:e2:c0:1c:f7:ef:c2:9a:
7f:ed:4f:de:51:37:6c:d0:d5:5f:ad:17:ec:ff:b4:90:4e:38:
5d:7b:d8:10:0f:66:90:d5:1b:49:65:a4:b3:54:51:90:26:71:
90:54:1f:50:61:3f:0a:7a:ac:de:ff:2d:2d:a4:26:c2:91:c4:
03:3e:08:55:da:a4:a8:f9:2c:ee:82:e2:29:07:8c:17:67:61:
ef:ae:a1:12:18:b3:46:c6:8b:0f:43:97:b2:e6:52:53:2c:d3:
58:5e:8d:77:00:c6:ed:3b:40:d6:c3:da:58:f1:8f:f1:78:f4:
af:7d:4f:c2:39:a3:08:72:be:5e:2d:ac:a5:02:8b:b9:5e:1f:
21:9d:48:9b:27:7e:59:ee:89:2d:d8:a4:e0:4b:3a:ec:89:3a:
d5:15:57:b9:9e:24:df:a2:a4:cf:6a:58:34:df:59:21:4c:21:
5d:26:0f:d7:96:b7:68:85:4b:a7:b0:62:99:7c:bb:e1:f7:4a:
d0:ef:ce:4b:af:4b:51:24:6a:db:04:ac:01:76:12:b8:c6:f9:
3b:b3:d3:f1:92:d6:85:4a:26:47:0c:5d:78:4b:2d:c1:b4:32:
ae:aa:eb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:22:15 2025 by rpki-client