Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft
File: 4j5WiDpuN63lIjxBOzs7D3gbySk.mft (raw, json)
Hash identifier: MEDhYnqRXsdVPnw93hFZsmlfMz/2e8PRynjt3jTMHjA=
Subject key identifier: 1F:BC:14:0D:9A:C5:54:38:22:BA:98:B9:96:4E:38:A0:D5:50:A0:86
Authority key identifier: E2:3E:56:88:3A:6E:37:AD:E5:22:3C:41:3B:3B:3B:0F:78:1B:C9:29
Certificate issuer: /CN=A91DF645/serialNumber=E23E56883A6E37ADE5223C413B3B3B0F781BC929
Certificate serial: 1155
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4j5WiDpuN63lIjxBOzs7D3gbySk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft
Manifest number: 114C
Signing time: Fri 28 Mar 2025 17:22:20 +0000
Manifest this update: Fri 28 Mar 2025 17:22:19 +0000
Manifest next update: Fri 04 Apr 2025 17:22:19 +0000
Files and hashes: 1: 4j5WiDpuN63lIjxBOzs7D3gbySk.crl (hash: n6nIQIIv5zaY4jtbsFNiGPY7Z6IfNXj+3gBryQFd8YU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4437 (0x1155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF645
Validity
Not Before: Mar 28 17:22:19 2025 GMT
Not After : Apr 4 17:22:19 2025 GMT
Subject: CN=67e6dacb-8238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:39:ea:b8:d7:cd:1d:86:9e:40:18:82:87:13:
08:66:fb:4e:20:74:4c:03:51:34:e2:c1:d7:d8:ca:
5b:ee:91:3d:60:dd:89:6c:2c:8d:f8:22:f9:ab:35:
f6:3b:77:ea:05:ac:c2:a7:92:e9:01:da:a8:fa:ef:
a2:76:41:e2:87:96:00:0a:fd:0a:42:d2:c7:7b:ed:
08:5c:23:42:10:3c:06:63:bb:12:c2:71:b5:25:68:
93:c6:fc:67:27:c2:f3:95:de:da:1c:25:c1:6d:ef:
aa:4c:93:06:15:fa:cf:68:1b:bb:5f:63:ea:9a:ac:
ae:08:83:7d:18:6b:86:30:e8:f8:ea:46:b1:a2:98:
00:03:4d:42:89:53:62:37:19:7c:ee:6c:9e:4c:07:
6f:bc:c0:6c:97:b2:a1:91:e3:b0:01:b7:39:af:ab:
fd:b8:5b:7e:a7:81:cf:d5:30:40:b1:1b:a7:e7:69:
49:42:e1:cf:b9:55:58:27:cc:62:6e:d7:09:1e:53:
71:c7:97:89:12:94:93:3f:a7:4a:69:22:04:71:ad:
85:87:0e:fa:05:33:27:d0:16:f6:38:3d:2e:9b:10:
53:c4:9f:b3:26:3b:0c:58:3b:a0:d9:57:05:54:8c:
17:7b:2f:d7:67:ff:bf:80:05:d3:9a:82:10:ec:6e:
7b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BC:14:0D:9A:C5:54:38:22:BA:98:B9:96:4E:38:A0:D5:50:A0:86
X509v3 Authority Key Identifier:
keyid:E2:3E:56:88:3A:6E:37:AD:E5:22:3C:41:3B:3B:3B:0F:78:1B:C9:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4j5WiDpuN63lIjxBOzs7D3gbySk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:0b:0d:06:45:42:49:e5:5b:b3:3a:2f:be:06:82:9e:72:a0:
d5:0b:06:20:58:da:3a:3a:1c:9b:a3:61:82:25:ab:44:6b:23:
bf:2d:ee:ab:11:92:57:5e:ea:ad:e9:1f:1a:bb:66:fb:96:c2:
01:bb:9d:f6:bc:f0:71:d3:6f:a7:42:69:26:f5:96:a2:00:c6:
4d:30:03:24:ec:f2:74:0d:de:0e:33:a5:4a:d5:c5:ef:2c:c3:
d4:19:17:a4:1e:84:95:3f:19:25:94:67:75:06:59:c8:f7:19:
47:0c:1f:b6:f5:3a:dc:fb:8a:0e:6c:56:79:fe:f6:fc:46:4a:
d3:39:f9:a5:11:88:5c:89:9c:69:fc:ed:51:79:86:4b:6f:21:
f3:49:67:67:39:2f:47:a0:6e:56:16:23:92:6c:ec:65:5b:d3:
6d:9f:ca:55:4c:d3:27:a5:38:68:a0:41:2e:eb:a8:01:61:75:
b1:1a:8d:f5:7d:39:db:c7:69:c5:86:fa:3e:fd:e1:1b:55:5b:
86:74:c2:90:f6:74:83:14:d5:aa:3a:7b:7a:47:f3:6e:e0:66:
b4:e9:6a:c9:a5:6e:4d:8a:81:a6:06:a4:c9:33:08:7c:99:e7:
d6:f7:19:c8:89:2d:f3:47:30:93:7b:3e:9e:b9:9b:a5:f3:c4:
92:81:e6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:49 2025 by rpki-client