Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft
File: SFseanLJRvLiQ6KAe3DF3V6stzA.mft (raw, json)
Hash identifier: i05/YSf/eKBnI+kY00AkCwGlPcondypjmy8JHZi9rnU=
Subject key identifier: BD:6F:7F:34:AB:44:4E:F8:FA:D2:7C:3F:59:37:AE:2C:DC:E0:46:08
Authority key identifier: 48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30
Certificate issuer: /CN=A91D4413/serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730
Certificate serial: 20A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft
Manifest number: 2B05
Signing time: Fri 28 Mar 2025 16:03:59 +0000
Manifest this update: Fri 28 Mar 2025 16:03:58 +0000
Manifest next update: Fri 04 Apr 2025 16:03:58 +0000
Files and hashes: 1: SFseanLJRvLiQ6KAe3DF3V6stzA.crl (hash: 7AqHIifNNxH3VbBQ7MfeJn9JoZQDafijuVmNwnOz8JQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8360 (0x20a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4413
Validity
Not Before: Mar 28 16:03:58 2025 GMT
Not After : Apr 4 16:03:58 2025 GMT
Subject: CN=67e6c86f-bd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:94:bd:bb:fd:71:06:93:34:ca:f4:21:20:26:
90:43:8b:66:c5:e4:32:3b:22:01:1a:2f:17:51:44:
89:ab:0f:28:17:fc:a2:63:36:14:c7:35:4f:04:78:
ca:e0:ad:13:fb:2c:2f:5a:22:52:33:95:53:bf:3c:
64:1f:66:2f:c6:df:98:d4:b2:b1:4e:9d:b1:99:a5:
59:16:9a:82:e5:fb:f2:84:1a:a0:4d:16:c9:19:81:
61:a9:d2:a9:7b:4f:a9:81:b2:6b:0e:dc:e4:d3:39:
7c:6a:21:56:cb:d5:f3:5d:99:64:97:c0:aa:a3:8f:
dd:ff:6f:31:1e:71:a3:98:94:21:2f:d1:70:0e:69:
7e:52:97:93:d8:bc:89:8f:38:9f:9f:22:08:7c:72:
a2:2d:cd:fe:fc:e2:86:d1:d9:9d:c0:4b:8f:fc:79:
24:2c:de:7e:99:c6:94:05:a3:1f:26:d0:4e:11:47:
95:ae:e2:82:0a:e5:98:22:a8:fc:d6:c5:8b:44:2e:
cd:53:9a:aa:db:53:4e:e6:4c:bf:ef:07:28:7e:f7:
f0:9e:f4:12:ef:3f:a6:e5:60:52:2b:0d:fc:20:a2:
76:0e:a4:1a:bf:b3:60:dd:01:e1:c1:85:fc:58:15:
d9:95:4f:fa:cd:6d:56:e8:d1:52:04:ae:11:cd:32:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6F:7F:34:AB:44:4E:F8:FA:D2:7C:3F:59:37:AE:2C:DC:E0:46:08
X509v3 Authority Key Identifier:
keyid:48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:a9:ce:0f:7b:90:32:65:e7:52:02:37:7a:14:c9:78:4c:d6:
a3:50:27:c0:dc:b7:c3:e7:f6:c2:d5:84:9d:d9:bf:0b:92:e0:
13:a9:a1:c8:db:85:bf:57:ee:6f:1f:5f:df:2c:cc:f3:5b:2c:
41:99:02:fb:d0:d4:84:40:33:81:c0:a0:83:1c:4b:cf:a7:52:
4f:be:6a:f8:7f:bd:2e:dc:0e:be:0d:c5:e7:fc:97:4f:d9:f7:
5f:98:1e:af:79:fc:be:e5:3c:2f:1d:d2:fa:b5:93:27:4b:0b:
c6:ee:a7:98:d0:de:4a:fc:53:77:55:fd:5e:22:e2:6b:fd:a0:
ea:d6:9e:45:1c:10:98:47:22:03:bd:90:e0:04:99:1f:97:81:
5c:0c:84:e6:88:ad:2f:de:c8:b4:54:1c:73:6b:20:f0:48:6b:
69:32:f5:24:3e:28:04:70:9d:35:63:8c:8d:ed:57:24:cd:97:
5c:0a:39:f6:96:f1:14:94:b1:da:95:d9:1b:ba:87:27:46:97:
41:9e:52:b4:64:2c:f2:45:57:1c:2e:b0:39:c0:12:98:c8:97:
fc:dd:e8:23:db:67:b1:5b:d0:68:f0:4c:96:19:a7:09:25:9e:
4f:b3:2b:ed:6a:33:6a:15:3b:d7:34:7b:ff:ae:af:6d:1e:e8:
f9:ca:c0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:15:41 2025 by rpki-client