Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
File: o1D687bxS8juGymW7tSOJwIOEIM.mft (raw, json)
Hash identifier: iw6RvYcgEfphv4rIGpTG2XpA90TwMsaPG0szg5KVpXQ=
Subject key identifier: D0:17:77:4B:96:C8:BC:65:75:01:89:6F:06:7E:F4:D2:DE:9C:BE:3F
Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83
Certificate issuer: /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
Certificate serial: 083D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
Manifest number: 082C
Signing time: Fri 28 Mar 2025 21:04:59 +0000
Manifest this update: Fri 28 Mar 2025 21:04:58 +0000
Manifest next update: Fri 04 Apr 2025 21:04:58 +0000
Files and hashes: 1: o1D687bxS8juGymW7tSOJwIOEIM.crl (hash: FuePXNG1naWgAwiNz98z07+AEJp6HpSp9w15gv4qlz8=)
2: C286BE40C4C711EDAFA9AF17C4F9AE02.roa (hash: wm0PciNiC4cbLFQcb4SHn/OMRIvkGpQeYyT8rS6bdpU=)
3: 032132A0E0D011ECAF88A30DC4F9AE02.roa (hash: Oqme3hgS+ErgCZrhOMJFY6E0bgLfBlO2jysH8V+HitY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2109 (0x83d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4834
Validity
Not Before: Mar 28 21:04:58 2025 GMT
Not After : Apr 4 21:04:58 2025 GMT
Subject: CN=67e70efa-5428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:af:59:74:d9:38:33:80:ab:0b:62:5e:94:90:
6f:41:1a:90:b8:a4:fb:92:c7:be:e2:44:82:86:1e:
3e:62:0c:ab:41:48:a3:77:a6:2c:24:3c:3a:8a:dc:
51:6f:cf:c7:25:e6:e7:d5:40:18:e0:61:07:49:f2:
fd:71:cf:0a:e1:e5:fa:ce:1c:33:15:d8:4d:e3:7f:
49:63:ef:37:8c:7e:03:ae:25:d6:0d:30:c1:d7:f5:
9c:92:50:4b:13:98:e7:e3:92:f0:0f:10:72:e1:a0:
b9:8e:9b:77:38:79:8a:25:76:01:d1:c4:d1:0b:78:
17:fc:10:15:5a:c7:94:d2:39:b9:3e:66:3f:74:22:
3c:47:eb:da:5f:fc:f9:cb:cc:c8:54:62:a0:a3:cc:
b7:41:15:16:a0:a8:39:7e:77:51:de:3b:8a:f0:a9:
09:f9:56:70:33:e6:7f:e8:a8:cd:b6:de:5b:ca:bc:
d9:e6:58:50:b1:89:af:d9:15:d2:9d:e7:53:0b:8c:
0f:dd:03:6d:b7:6c:11:34:5f:7c:b1:42:40:77:8e:
50:3d:f1:e1:22:48:f1:90:fa:a9:52:4f:79:e2:19:
0b:1a:fc:6e:16:17:a6:cc:55:4b:59:33:bb:de:28:
48:c6:f1:16:dc:df:74:24:f5:dc:3d:2f:ff:13:3c:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:17:77:4B:96:C8:BC:65:75:01:89:6F:06:7E:F4:D2:DE:9C:BE:3F
X509v3 Authority Key Identifier:
keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:1f:0a:99:f7:a0:0c:30:a0:2b:58:ee:86:93:ba:5e:66:9b:
6b:81:ed:70:5b:7c:8b:82:83:cc:7a:aa:97:60:83:2d:4f:40:
fb:93:67:96:33:ad:a5:2f:1e:3e:25:66:f9:e2:0b:0e:5a:86:
c1:60:6a:75:69:8f:2e:c1:1e:e2:48:a7:26:66:15:f0:75:a7:
a5:78:62:5d:3d:f5:b8:ad:a9:4b:d3:8e:ee:2c:33:55:27:2a:
af:b5:3f:d2:e3:9a:4b:f2:6f:ff:a8:28:4f:4c:2f:2b:38:1c:
3b:08:8a:18:4a:dd:9f:62:14:9a:02:04:21:b6:c7:e4:40:7d:
57:20:ec:d0:de:93:f3:4e:16:da:75:c4:2d:06:54:86:9a:eb:
6f:79:93:91:7e:25:f7:28:c6:94:e4:ba:2f:80:18:1c:79:34:
55:78:3a:78:05:af:fe:45:5e:9c:ba:fa:c3:95:52:63:eb:77:
c3:ea:39:7c:0e:7c:d9:8e:8a:71:92:22:34:4a:09:21:a5:7b:
25:fe:53:84:e4:51:76:27:be:36:24:a6:26:93:20:64:a9:07:
11:92:18:4e:80:3d:59:32:4a:29:cf:5a:e3:83:23:c6:13:81:
dc:f1:2b:36:32:85:f2:e9:e9:c1:e1:10:57:20:5a:12:a0:66:
d6:d1:f8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:51 2025 by rpki-client