Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
File: cx4n4S-z2wtszAsg8YaAm6CNCRU.mft (raw, json)
Hash identifier: wjS56mDtuJx0G1cFzoWLRvixhJTutK1pgwDUykpdcNs=
Subject key identifier: 73:F3:4A:43:08:3D:3C:D8:4C:A7:85:37:F6:23:33:A3:86:7E:B3:79
Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15
Certificate issuer: /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915
Certificate serial: 0EDD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
Manifest number: 0ECE
Signing time: Fri 28 Mar 2025 17:48:02 +0000
Manifest this update: Fri 28 Mar 2025 17:48:01 +0000
Manifest next update: Fri 04 Apr 2025 17:48:01 +0000
Files and hashes: 1: cx4n4S-z2wtszAsg8YaAm6CNCRU.crl (hash: jIRelYLBJ+ZYJp3LNPj2fI4I4ZpnTbheu6A565X5708=)
2: 76C782CC836811E9B8830935C4F9AE02.roa (hash: S6BUVTLFR5ykemKBBu8dE6BaxtUQEDDw3K/csPghGJc=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3805 (0xedd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D58EC
Validity
Not Before: Mar 28 17:48:01 2025 GMT
Not After : Apr 4 17:48:01 2025 GMT
Subject: CN=67e6e0d1-cbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b5:37:31:52:76:4d:81:56:82:37:7e:88:0d:
f1:9f:97:78:ae:c9:3e:ad:7c:8b:c5:2b:04:90:68:
75:cc:fe:14:11:74:18:7d:8d:8b:d1:b7:93:c2:24:
52:00:2a:9f:c7:41:07:ca:c6:be:8a:4e:ae:19:81:
13:f9:5b:80:6d:82:ca:16:67:87:5b:42:a5:6f:db:
fc:d1:5a:d7:bc:d0:72:cb:2c:ee:e6:99:e9:e9:5d:
0a:91:19:e9:c2:26:20:c8:93:c3:e1:f2:38:d3:d9:
6b:32:81:63:06:fc:c6:06:74:68:fd:9a:df:36:3d:
61:96:86:10:0f:ff:bd:2f:95:a8:fe:3f:0f:fb:38:
72:78:5e:43:36:b4:2f:24:6b:41:b2:e0:4e:20:0a:
48:2a:6e:0b:02:ed:40:05:2f:95:e0:ab:44:89:05:
71:d7:75:97:6f:af:af:84:19:0c:e3:85:9d:dc:ee:
ae:f4:56:3f:cb:a5:d3:97:94:da:91:36:ea:e6:a2:
59:77:05:c6:86:f4:ae:75:b7:31:5d:2d:f8:76:a7:
99:3e:5e:1e:c1:97:b3:a0:cb:3f:76:17:8d:2b:d9:
7f:6c:3d:aa:6b:2e:db:77:cc:cd:22:27:38:ac:9e:
74:28:09:8f:fb:9f:b2:9e:be:54:8d:6e:21:51:d9:
88:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F3:4A:43:08:3D:3C:D8:4C:A7:85:37:F6:23:33:A3:86:7E:B3:79
X509v3 Authority Key Identifier:
keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:fb:89:94:da:8f:7a:24:00:bb:ef:46:0e:49:c8:2c:72:ac:
76:92:a3:89:7f:61:2f:14:08:15:70:e9:3c:48:58:49:ab:d3:
7f:d4:9c:49:56:b0:84:79:af:0e:4b:72:96:e2:96:1b:fb:8c:
30:d8:95:58:64:1f:18:01:d5:05:16:76:64:6e:f4:40:cc:d3:
01:1d:42:28:f9:1e:d7:85:1a:15:4b:4d:49:23:96:f3:f5:9f:
b8:61:2d:7d:30:a3:c4:41:62:27:63:e8:01:91:5b:f0:00:75:
f1:df:78:9e:7a:41:6f:4f:8f:4f:81:56:83:15:4e:c4:85:e2:
1b:a5:66:aa:95:15:e3:0b:c3:22:82:36:08:c4:17:3d:60:84:
b7:59:60:12:43:66:b1:3a:ef:21:9c:bb:27:7b:cc:3c:38:21:
db:3d:e1:d0:c5:1b:f8:a2:63:09:98:54:b7:d0:f8:2f:d1:8e:
9a:51:8e:c7:72:eb:8b:9c:80:ad:16:0e:1c:5f:ec:9f:e3:f0:
69:54:ad:7d:72:48:82:83:61:34:62:eb:4c:bd:8e:bc:bc:34:
71:a1:6f:fa:4f:df:90:fe:81:c3:1c:4c:4e:97:39:1b:ad:5f:
04:c7:0d:14:6e:4c:74:a2:03:18:01:00:6f:ce:8c:ce:e6:2a:
19:8c:99:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:27 2025 by rpki-client