Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
File: _vLBxOoJZEd1FMGqlG5sQXeNBr8.mft (raw, json)
Hash identifier: Ni8jSnvFhsPQybW6VZyZqCe4WlctaEs8ujFJBZXd83U=
Subject key identifier: BF:E1:5A:2A:56:18:DF:B9:46:A9:6D:AF:04:4B:5A:7D:98:80:2D:E2
Authority key identifier: FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF
Certificate issuer: /CN=A91D298D/serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF
Certificate serial: 0843
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
Manifest number: 080B
Signing time: Fri 28 Mar 2025 21:24:15 +0000
Manifest this update: Fri 28 Mar 2025 21:24:14 +0000
Manifest next update: Fri 04 Apr 2025 21:24:14 +0000
Files and hashes: 1: _vLBxOoJZEd1FMGqlG5sQXeNBr8.crl (hash: qTOCl5mjEkrYr1R+g4CAi1XaXwONjknje2rOggPP5lk=)
2: 65519ACC506C11EC99354984C4F9AE02.roa (hash: nEa6jfXtxG9N2Xq8i5UVfOUP23F8VB7FknoSsQg1RJ0=)
3: 01BB1B8E7C0411EFB0D29158C4F9AE02.roa (hash: KU0OYgNotYA3UtDO5hlxYlQJ813PAymWu54BIJPXlUQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2115 (0x843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D298D
Validity
Not Before: Mar 28 21:24:14 2025 GMT
Not After : Apr 4 21:24:14 2025 GMT
Subject: CN=67e7137e-a503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:f3:53:36:14:63:52:9d:a0:a6:a9:f3:13:
82:11:03:f7:5f:0c:d7:fc:55:3e:7c:66:98:5a:44:
d6:aa:00:33:37:c8:64:43:1a:c0:e1:a9:02:c3:e0:
3b:0a:7c:48:53:0b:7e:9c:e0:75:ca:d6:af:c1:95:
9c:05:a8:da:35:07:a6:8f:e0:fe:74:2c:7c:09:72:
1c:a1:3a:e5:77:d6:50:19:19:53:ae:8c:39:5d:02:
93:1e:30:8d:e0:e1:4f:08:6e:3f:f5:37:b6:56:3d:
43:d1:fa:08:82:33:be:ec:53:f0:a0:42:b9:9c:ce:
0e:7d:a4:95:a8:07:4b:a1:c3:4f:bb:38:f8:9c:55:
70:35:e7:2f:b3:c6:29:38:64:71:56:72:6b:91:09:
3b:98:26:16:95:ab:41:7e:a4:70:d3:74:c9:7d:db:
7a:c6:2c:ab:ca:88:2f:f5:c1:0d:bd:0c:69:20:65:
91:75:d0:8d:4c:9a:1d:47:a0:ec:bd:8a:9a:cb:6c:
c6:37:3e:2e:ce:d3:5d:2a:d6:0a:a4:a4:cd:0c:9e:
82:1d:6d:d4:46:7e:d7:62:91:c8:18:ab:7c:83:1b:
4e:e6:db:a3:5d:19:80:cc:d2:d9:c3:43:13:9c:25:
ec:14:33:c2:41:49:64:29:01:9d:53:56:e6:5f:aa:
df:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E1:5A:2A:56:18:DF:B9:46:A9:6D:AF:04:4B:5A:7D:98:80:2D:E2
X509v3 Authority Key Identifier:
keyid:FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:03:ce:a5:21:af:f1:60:4a:ef:48:88:2b:2b:c7:57:4e:89:
a5:0e:c7:ee:fb:cf:fd:78:d0:4c:5f:fb:2b:8c:ea:83:69:24:
94:41:63:7a:29:b0:b4:4b:42:37:fa:25:33:be:b1:95:1c:7c:
e5:c5:90:86:48:0b:24:6b:fd:01:c7:c3:21:ec:7f:40:a0:18:
fb:61:76:f8:7c:e5:76:35:bf:63:9f:19:1f:86:8d:ce:ae:4e:
78:4b:20:5f:ba:14:c1:34:bd:87:3c:34:e4:23:fe:88:8f:d8:
0b:d9:b0:80:b1:87:3d:8d:c1:79:c1:78:4c:11:e5:c7:2c:39:
ec:c2:48:11:04:f7:ad:d6:88:95:40:dc:22:bf:91:02:f5:8c:
5c:8f:18:c6:ac:d8:7b:23:e8:33:5f:e2:1e:36:37:a8:9f:11:
38:ff:5d:22:98:4c:fb:28:e1:71:44:7b:e3:2d:85:a4:cc:96:
fe:5d:0b:8e:d0:01:14:35:8f:8b:ae:57:94:02:46:35:19:6e:
62:54:da:9e:fb:74:55:b5:60:4e:c6:b0:28:33:0b:3d:8a:58:
6b:88:e0:80:97:a7:15:49:76:7c:50:57:04:1e:d4:bd:bc:4b:
7f:e5:b3:06:71:6b:e6:36:45:ce:79:c7:0e:75:8e:8d:a2:0e:
af:7c:14:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:08 2025 by rpki-client