Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
File: P7eFXvMwunfZ87ct_97CBxKsFAc.mft (raw, json)
Hash identifier: Y4pB+IXNCs7D4wEWZCUrlgeNd1PpUPGquOkWSEfgduY=
Subject key identifier: 10:FB:80:4E:A1:48:3A:78:99:A1:F9:97:74:62:2E:C3:FD:B8:BC:1E
Authority key identifier: 3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07
Certificate issuer: /CN=A91CD4DB/serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407
Certificate serial: 1798
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
Manifest number: 1785
Signing time: Fri 28 Mar 2025 16:42:13 +0000
Manifest this update: Fri 28 Mar 2025 16:42:12 +0000
Manifest next update: Fri 04 Apr 2025 16:42:12 +0000
Files and hashes: 1: P7eFXvMwunfZ87ct_97CBxKsFAc.crl (hash: asQ5IwiekHVot6CAPBHXOktrqcf1UZW3LzN5hIdRB5Q=)
2: 1615AC3AD9E911EC9017DD21C4F9AE02.roa (hash: tZ+n1rBeiFep27McDY+TR8Gj4nHp3eK0QyhamvlvTOk=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6040 (0x1798)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD4DB
Validity
Not Before: Mar 28 16:42:12 2025 GMT
Not After : Apr 4 16:42:12 2025 GMT
Subject: CN=67e6d165-d5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:73:9f:3e:31:95:c3:65:70:0e:c5:53:bf:11:
92:6e:d2:92:51:e9:86:96:d9:99:1a:71:6f:d5:67:
df:1a:1c:f9:f0:6d:d3:db:da:e5:1b:5e:9e:85:91:
26:28:ee:29:92:ed:f3:d2:39:d1:73:0c:a3:af:23:
c6:82:73:47:12:16:c0:bb:46:8b:78:28:e7:8d:5a:
f5:f7:76:71:29:1a:24:5e:58:28:59:d4:f3:52:35:
a1:e4:01:69:66:6d:8f:ba:f0:a1:61:b8:95:8b:68:
80:5b:fd:38:68:4e:a3:24:ed:33:f5:5c:c2:9d:04:
df:24:58:d1:5a:16:ee:d5:d4:ee:e1:be:46:c7:92:
3a:c0:d5:14:ca:29:94:2c:2b:5b:5e:d4:df:72:26:
30:37:1e:df:7b:ec:14:e6:01:71:3d:5d:4e:58:6f:
82:35:c7:8e:9b:68:6a:63:9f:d9:c4:0a:40:f3:ae:
bb:b7:dc:63:54:4f:c8:5b:bc:b1:47:07:f5:33:72:
3d:f5:5e:fd:29:7e:e6:94:28:33:bf:7e:d1:b4:cc:
39:58:1a:f5:06:0c:88:2f:05:46:36:f2:67:10:99:
36:a6:dd:fd:1d:a3:bd:b5:bd:20:bf:a9:9e:10:83:
fe:1a:ba:87:1c:ac:79:0b:4b:80:b2:56:61:24:43:
d4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FB:80:4E:A1:48:3A:78:99:A1:F9:97:74:62:2E:C3:FD:B8:BC:1E
X509v3 Authority Key Identifier:
keyid:3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:ee:60:76:47:6b:1c:74:19:b3:c9:ac:20:47:8d:60:7e:ba:
dd:9b:e2:63:cf:63:cd:27:e5:42:73:37:ee:18:8c:4a:a8:9a:
2a:9c:bc:6f:c1:aa:aa:48:7e:de:95:51:85:de:81:c6:1e:9b:
12:8f:c9:54:ca:b9:03:a9:95:3a:65:18:db:b1:b8:a6:71:a9:
d6:e2:bc:2e:42:2b:d9:ac:06:30:a1:ee:1d:d6:1c:35:bc:40:
1a:ec:77:fe:51:b6:c7:4e:02:2b:47:9f:f5:50:fe:62:80:72:
78:e8:23:b4:5b:ee:cd:28:a5:37:bb:cb:76:13:26:36:88:58:
78:4a:f5:20:8e:5b:17:ef:7f:85:18:d0:71:de:5e:d5:9a:11:
fc:e0:e3:65:23:aa:73:02:49:09:8e:fa:4c:cf:4f:bb:e8:ef:
d3:b8:cf:4e:33:1d:5e:7c:21:41:e8:b0:77:22:2d:8d:5f:a2:
b6:1e:18:74:03:44:fe:7c:07:d5:fb:b9:8c:0c:17:e4:ac:81:
fd:22:37:03:f3:ba:b0:55:cc:56:85:12:44:8e:70:12:7d:42:
dc:26:3b:14:d4:43:27:38:14:c2:6d:07:67:b1:db:c3:7d:81:
48:03:bf:66:aa:a8:1b:73:62:9a:41:54:26:6c:64:40:fb:43:
53:f3:a2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:13 2025 by rpki-client