Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
File: dOSCYGNYsugSWKrw2-THyWPYfhw.mft (raw, json)
Hash identifier: z/+0zGhs2mbPH89VKlLkSvbSvmOLIunim5JVN+eJDYw=
Subject key identifier: 02:CC:48:A0:63:E1:0A:E6:22:2C:E1:5F:CE:FC:1F:B8:0D:FB:97:EF
Authority key identifier: 74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C
Certificate issuer: /CN=A91D3633/serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C
Certificate serial: 1D97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
Manifest number: 1D7F
Signing time: Fri 28 Mar 2025 16:14:16 +0000
Manifest this update: Fri 28 Mar 2025 16:14:16 +0000
Manifest next update: Fri 04 Apr 2025 16:14:16 +0000
Files and hashes: 1: dOSCYGNYsugSWKrw2-THyWPYfhw.crl (hash: rMegztD5LCmHEcNsNL54leSuTsi242lDIH8E8SQzdqI=)
2: 79AE82F8171711EBB12F2574C4F9AE02.roa (hash: n/NMyqDI06S8XiVUDvMprWnoGUCP8JkT5dCu21/kF7c=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7575 (0x1d97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3633
Validity
Not Before: Mar 28 16:14:16 2025 GMT
Not After : Apr 4 16:14:16 2025 GMT
Subject: CN=67e6cad8-3290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:85:e0:6e:ab:26:68:45:54:f0:c7:a8:8c:b3:
be:50:ff:4e:e2:95:13:55:e4:6f:f1:a6:b1:5c:bf:
9a:43:6e:e5:05:22:89:29:ec:09:0b:30:f6:69:04:
b3:e1:2a:90:80:cf:69:a8:2b:03:53:4c:06:8b:d5:
b8:69:b5:a3:11:ff:4f:cc:bd:da:e2:29:b9:57:e8:
8d:61:a8:35:15:72:24:25:c8:78:f3:a1:3c:8f:d7:
a5:ae:82:f3:01:d9:11:4e:ab:ae:88:e2:8a:82:47:
13:46:a6:2c:79:a5:b0:92:dc:77:1b:fe:cb:c7:b8:
30:7d:36:fa:8b:0f:29:94:32:fb:67:40:25:7d:90:
6e:fd:0d:c2:31:19:13:be:b4:8a:7e:91:8f:64:46:
51:61:2e:57:12:61:f0:af:81:d7:99:e4:f2:ae:6f:
a6:d7:57:8e:7f:68:96:39:5e:54:df:61:2e:23:21:
96:12:4e:33:67:28:26:f5:94:39:3f:2b:b1:ac:d8:
42:39:26:c5:18:4a:89:5f:7e:ee:55:79:e5:49:2e:
56:be:a8:3b:b7:b7:fb:74:ac:54:c7:8e:4a:8e:86:
93:f2:73:da:00:c6:76:f4:13:f0:3a:da:8b:fa:72:
27:11:49:5c:3b:cc:9b:35:65:7d:17:70:c2:42:94:
10:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CC:48:A0:63:E1:0A:E6:22:2C:E1:5F:CE:FC:1F:B8:0D:FB:97:EF
X509v3 Authority Key Identifier:
keyid:74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6f:aa:82:43:cf:05:3e:ba:72:2d:24:5f:79:cb:57:10:32:
2e:7c:3e:7d:f5:18:31:20:73:b6:8a:7a:88:af:39:e3:03:5d:
a5:fd:46:68:70:f3:ce:db:64:29:c3:d3:07:d7:5b:45:72:ae:
fd:5d:d0:b2:58:a4:8b:69:62:18:42:11:02:51:07:37:0d:7d:
6d:66:ea:8d:eb:e7:a8:0b:01:77:bd:40:27:d5:3d:22:30:6f:
90:c5:4f:75:a0:0b:f3:a2:30:4d:8c:f7:0b:b6:54:3d:85:ee:
70:a3:c3:ce:45:4e:88:e8:2c:5e:51:16:23:a8:a3:b6:83:a5:
9f:5c:50:1c:65:e2:96:09:a0:da:2a:90:a2:2b:af:6f:bf:55:
8c:c9:db:32:1f:1b:cb:0c:c1:9a:8c:cc:11:b0:e5:31:07:ec:
24:5c:7a:7c:a9:59:12:e3:4e:9d:42:ff:ce:7b:98:5b:15:94:
e6:54:c1:55:32:26:6f:93:8c:19:c7:af:ca:56:08:bc:1c:ee:
ed:81:c5:9b:33:cc:46:02:96:f5:43:e1:3d:7b:d8:86:dc:90:
2f:23:8e:66:49:40:5b:fd:d1:24:51:43:24:1f:18:ff:46:6f:
61:21:46:3a:6f:66:ff:23:59:38:37:a4:66:f8:40:46:f3:70:
36:aa:9d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:58 2025 by rpki-client