Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
File: ficJop5GIOVCf3NfN8A0c-NrWXo.mft (raw, json)
Hash identifier: kXx7CYSvPayE174kd9u8AnTW3SqD3dPIcx7TjPVk8Rs=
Subject key identifier: 51:B6:13:E5:9F:10:E1:D0:0D:FD:7A:3A:98:24:67:FD:E4:20:7C:D4
Authority key identifier: 7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A
Certificate issuer: /CN=A91DD0A4/serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A
Certificate serial: 08EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
Manifest number: 08E2
Signing time: Fri 28 Mar 2025 20:42:09 +0000
Manifest this update: Fri 28 Mar 2025 20:42:09 +0000
Manifest next update: Fri 04 Apr 2025 20:42:09 +0000
Files and hashes: 1: ficJop5GIOVCf3NfN8A0c-NrWXo.crl (hash: cikIkpvkuizz1+lUwWxzJN8QbzYyYAJwwmBxRDWAk7s=)
2: C8CCE2CCAA7411EA9DF2E685C4F9AE02.roa (hash: EY5IebdCRceAV1N2Sno2htu2PUjjGh0mWkvzE1zUnnE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2283 (0x8eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD0A4
Validity
Not Before: Mar 28 20:42:09 2025 GMT
Not After : Apr 4 20:42:09 2025 GMT
Subject: CN=67e709a1-1754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:c7:d5:cb:94:5b:c8:c2:50:07:5d:4e:74:
d8:9b:5f:a7:93:b1:d1:a0:a2:b2:4b:5b:68:5b:91:
0f:bb:5e:6a:e7:aa:14:69:dd:f5:5d:d9:e2:15:02:
03:cb:98:12:4a:df:ec:c4:58:e8:a3:6e:cc:23:46:
91:b5:e6:21:07:2c:ab:70:28:ce:8a:05:5b:1e:f7:
5a:f8:b7:2c:a0:9f:a0:07:bb:f5:a3:2f:42:15:40:
31:a7:a8:68:a6:f4:db:50:12:85:8b:38:52:4a:f7:
a5:2c:0d:90:59:95:80:9e:0c:12:1b:1f:7e:ec:45:
40:cb:63:03:fd:8f:76:21:41:8d:fd:dd:6d:d1:e3:
2c:e2:ab:40:b9:ab:60:42:ba:33:a9:17:e8:73:f1:
36:df:02:db:55:9f:b3:98:34:00:ed:f9:61:8b:ec:
75:83:66:f3:6e:b7:e3:15:0b:0f:d5:17:d7:42:ca:
8b:da:82:65:ea:62:7a:d5:c6:8c:3f:40:d2:99:e5:
11:67:e5:23:87:aa:ad:f5:a5:af:2e:65:bc:ed:39:
7e:e7:f6:13:e2:41:1c:63:07:2a:9c:a6:ab:56:62:
79:98:7f:19:c2:f3:c2:15:23:b3:3b:b4:b5:51:00:
6b:8d:45:59:0b:0a:7f:c5:d0:2b:74:4b:86:cf:ba:
67:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B6:13:E5:9F:10:E1:D0:0D:FD:7A:3A:98:24:67:FD:E4:20:7C:D4
X509v3 Authority Key Identifier:
keyid:7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7c:07:9c:f2:3f:63:c4:71:27:20:b5:9c:08:32:f1:ac:82:
8d:9c:0b:2b:ca:81:2a:44:e1:5d:09:3a:fb:78:84:ea:b2:b1:
55:16:b7:48:e6:69:09:86:c8:9b:4a:6f:99:26:d6:eb:9d:dd:
fa:0e:d8:0d:ac:3d:ec:62:5f:3b:45:41:3f:37:38:65:ab:c3:
6f:f0:5a:ed:0e:4f:1a:2e:3b:a2:62:be:fa:8f:4d:09:0a:64:
94:ca:d3:a8:05:77:b3:9b:fb:35:43:70:09:ef:31:50:b3:a8:
b8:1f:eb:3a:24:18:f7:ed:a8:92:4f:a2:a5:34:2e:f3:2d:ba:
50:b2:a8:6f:be:53:6b:92:56:78:4c:d3:e1:d6:a6:49:bf:44:
84:4b:e3:30:1e:1b:9f:28:5d:f2:08:aa:e4:2d:6b:b6:d8:4f:
5f:7d:6c:3e:59:d2:12:bd:c7:5b:b6:10:43:e8:a9:57:f8:da:
99:97:f9:c1:48:e4:ff:ca:38:7f:e4:86:30:82:9c:4c:2b:5e:
84:67:ff:1e:5b:60:c9:d9:b4:ef:41:2a:bb:2b:b6:89:78:98:
7b:59:b8:ce:be:ea:d8:0d:d2:d5:2f:7e:8b:a7:e6:15:57:59:
04:75:81:0c:b4:97:ef:0c:4b:ec:2f:a1:27:4a:a9:65:ca:f0:
e8:c1:39:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:34 2025 by rpki-client