Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft
File: 3lBUK-oQggGncsALyfJRrRf6ls0.mft (raw, json)
Hash identifier: SaJx3zoNrosEUAKfML1rC09Mx6raU5caSFV/wGgCwoc=
Subject key identifier: 69:F7:79:2F:4B:31:0C:13:0E:71:EF:84:CB:AA:AE:AA:B5:B4:F8:B0
Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD
Certificate issuer: /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD
Certificate serial: 0C95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft
Manifest number: 0C5A
Signing time: Fri 28 Mar 2025 18:37:16 +0000
Manifest this update: Fri 28 Mar 2025 18:37:15 +0000
Manifest next update: Fri 04 Apr 2025 18:37:15 +0000
Files and hashes: 1: 3lBUK-oQggGncsALyfJRrRf6ls0.crl (hash: sbFa8YhuydYHrNAf6nQAClzU76l2TQUhE3tK1AkfMDs=)
2: AF0508E8B1EE11EF93E70F63C4F9AE02.roa (hash: 3pP3sdtqTiWCcrGq+H7BVXzx0my8jLX9t9qyXkMSDe8=)
3: D59CB8F4968511EF93AE8239C4F9AE02.roa (hash: FPiGGcK4pF8UzcHguK5mqg4YmbaTICQWjS75XqzTA24=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3221 (0xc95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEBE3
Validity
Not Before: Mar 28 18:37:15 2025 GMT
Not After : Apr 4 18:37:15 2025 GMT
Subject: CN=67e6ec5b-d4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:9d:47:5d:da:cb:b3:e3:44:72:9b:8f:57:
02:ff:0c:93:c9:40:31:1f:bd:05:ad:d5:6f:33:5c:
dd:27:e7:c8:9d:3b:39:7e:23:29:db:89:c6:b4:08:
b4:b7:2a:a2:52:be:31:a6:8b:22:21:50:7e:18:e8:
49:70:e1:26:80:c0:5a:34:e1:78:8d:a5:aa:1d:ca:
c9:ca:8e:4d:a9:c7:96:33:57:dc:7d:49:3a:49:a5:
eb:4b:a3:67:bd:ff:1c:d4:71:80:0f:19:d0:77:d8:
0c:29:a2:95:7c:64:58:c6:5c:cb:9c:17:4a:37:1f:
f6:4b:77:0a:ad:90:45:c0:b1:0e:fa:59:26:da:d9:
10:41:5c:59:e8:b2:d6:7a:a8:0e:0b:b8:41:61:1b:
f0:d3:86:cf:8a:35:4a:df:81:3c:8a:99:75:66:9c:
81:ef:3a:30:7d:5a:6c:77:ed:ad:84:57:92:79:a7:
45:e2:2c:f8:aa:58:53:16:e2:e7:c8:f4:5f:3f:97:
c1:9c:b7:c6:b3:23:91:bc:27:60:af:12:06:ed:37:
73:2f:ea:24:e5:2f:23:08:c8:4d:3a:db:d3:13:99:
15:64:d5:7e:96:2a:4a:9f:65:66:86:92:ab:44:98:
c3:a3:50:1f:8b:00:f6:29:3f:26:01:00:0e:f7:c9:
b1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F7:79:2F:4B:31:0C:13:0E:71:EF:84:CB:AA:AE:AA:B5:B4:F8:B0
X509v3 Authority Key Identifier:
keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:96:29:f3:0d:98:f7:e8:cc:48:56:36:51:e0:3f:28:2d:c9:
a7:bc:97:42:e5:f9:3f:00:ec:19:e3:22:8a:14:c4:cd:e6:a1:
2c:2d:07:81:3a:bd:58:7e:9a:cf:fe:f1:74:c8:92:dd:49:d3:
d4:fe:16:ff:b0:bc:38:6f:23:ba:0c:69:ac:7e:39:62:04:ea:
86:78:db:a6:f2:6c:3f:4e:e6:84:24:de:e7:b2:79:46:a0:d8:
e3:b0:29:92:4a:c7:14:be:f3:46:99:38:a6:e3:bc:33:e3:7f:
c8:03:30:d9:40:01:c1:00:d7:4c:cb:d5:2f:5f:60:a9:04:eb:
aa:31:e9:70:6c:de:29:83:ff:e9:3b:bc:5c:42:9f:d6:83:29:
7f:85:7f:23:2f:79:3f:70:0c:d0:19:36:c1:63:f0:ef:0b:c0:
41:e1:67:46:91:4b:32:b5:d6:df:c1:92:c9:0a:b6:45:4f:12:
be:0f:02:a8:7f:ae:6e:f3:13:3a:8f:b2:23:90:f2:4b:4d:e1:
fe:c1:c8:fb:c2:69:2f:42:27:aa:52:7d:8a:03:54:89:b6:cb:
a5:99:88:36:9b:d8:8e:33:aa:f3:21:9c:7b:0a:49:18:2b:a3:
9d:54:70:e1:49:b0:86:52:6d:9a:e7:95:b7:a5:f7:71:9c:02:
1a:1e:b7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:30:10 2025 by rpki-client