Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
File: bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft (raw, json)
Hash identifier: SeuU1p3oy6gDxS7Uab6EA38Ln+dp5sXbR1GGmBFNz7E=
Subject key identifier: 69:E3:91:73:74:D0:4C:AC:37:A6:A5:3E:95:E1:C1:2D:F8:B4:80:9E
Authority key identifier: 6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C
Certificate issuer: /CN=A91CF24F/serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C
Certificate serial: 0979
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
Manifest number: 096B
Signing time: Fri 28 Mar 2025 20:27:52 +0000
Manifest this update: Fri 28 Mar 2025 20:27:51 +0000
Manifest next update: Fri 04 Apr 2025 20:27:51 +0000
Files and hashes: 1: bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl (hash: HQXOvlsbeGyMIxBJDqCmmydtYgylIPvtD98L5T8JwAY=)
2: 75D9F37C007A11ECA444E049C4F9AE02.roa (hash: dpLf2qBFe220x5GKZk4KYPgV5wQJtggmyE0D/YCjeAI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2425 (0x979)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF24F
Validity
Not Before: Mar 28 20:27:51 2025 GMT
Not After : Apr 4 20:27:51 2025 GMT
Subject: CN=67e70648-c131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6e:42:bc:81:fd:d1:2d:f6:69:d0:08:97:95:
29:32:5a:2f:2e:ae:90:f1:2f:08:5c:99:1c:8a:00:
e0:45:20:6a:a8:97:ed:b4:9d:97:54:4f:cd:fe:ac:
0b:79:75:95:d7:e5:bc:97:d7:3b:03:21:85:02:b1:
96:92:00:84:a8:15:a1:cd:7e:fb:7f:6a:62:c3:96:
56:dd:ad:31:99:93:be:27:c8:5c:89:74:65:da:88:
04:9a:01:53:44:59:ad:08:7f:a5:31:00:1b:59:5a:
14:56:78:4b:40:5b:39:c6:b1:ba:ff:cb:46:be:60:
16:a5:08:ab:cc:b5:16:fd:21:3e:34:9f:71:41:63:
30:7b:07:e3:0c:2d:d7:b6:66:f2:1d:13:64:d2:49:
2b:d4:73:d8:6a:27:42:cf:c0:51:60:02:b5:9b:04:
f3:8e:8e:ad:df:18:7a:3a:5f:cc:b4:da:af:42:cb:
2d:ad:37:1e:56:79:33:d8:69:73:c2:b3:56:f6:25:
7b:28:19:59:a3:35:1b:9b:78:37:aa:ad:6a:c1:75:
6b:fe:f3:ad:07:2d:fd:8f:6a:78:06:7c:b5:a1:dc:
73:9a:30:e2:a9:b5:f5:50:84:d3:10:b1:15:68:4f:
10:4a:f0:42:58:38:cc:e0:5b:db:5c:0b:2a:4e:09:
ab:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E3:91:73:74:D0:4C:AC:37:A6:A5:3E:95:E1:C1:2D:F8:B4:80:9E
X509v3 Authority Key Identifier:
keyid:6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:0f:30:09:c6:0b:b4:62:95:13:0e:dd:b8:1c:32:b2:2d:57:
c3:45:67:b6:ea:66:f3:94:b6:cd:06:3d:6d:ef:b2:85:84:62:
b9:99:66:1a:67:96:f0:0b:40:42:c5:78:ff:65:b8:6a:b3:51:
a5:a9:d4:f6:c8:fb:1d:3c:b1:ec:ad:4d:c7:06:93:8c:d6:c3:
de:de:29:4c:55:25:3b:8f:3c:49:1c:91:30:f0:b6:6e:a6:49:
70:ad:f3:7b:ef:bc:58:08:a6:fa:3b:61:8a:5c:2a:0f:7a:df:
ce:5b:38:1e:22:e2:bc:7c:96:ec:63:09:b9:b6:a4:c9:90:68:
3d:4a:a0:c1:e3:4f:6f:e9:0f:b5:60:09:6a:cd:28:0c:73:63:
db:05:0f:95:81:37:fd:6c:94:0a:ed:5a:ec:ef:e0:5e:a1:c3:
30:64:ae:2b:ed:bd:34:be:e7:f4:ee:37:0b:63:f7:f0:ba:11:
4a:02:46:01:f8:35:3d:48:53:82:91:f2:b2:32:93:67:16:73:
b9:69:c6:55:70:75:ad:7a:fb:2b:34:97:33:b9:b9:71:89:00:
10:03:e9:60:c0:7a:a9:4e:14:95:ea:ea:27:8d:d3:fe:2f:52:
53:ad:1c:74:7f:54:c8:53:65:c0:3f:ba:4b:eb:77:b2:7d:da:
a8:10:0e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:01 2025 by rpki-client