Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft
File: wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft (raw, json)
Hash identifier: MujtNU5OKSVerhUDTnS4Vt1HV1S/AWuvLR8HxHiqlfY=
Subject key identifier: AB:86:E1:05:A0:D3:97:BD:1E:E8:79:12:F4:89:63:A2:41:62:B4:E1
Authority key identifier: C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C
Certificate issuer: /CN=A91E1729/serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C
Certificate serial: 1C42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft
Manifest number: 1C34
Signing time: Fri 28 Mar 2025 16:18:00 +0000
Manifest this update: Fri 28 Mar 2025 16:18:00 +0000
Manifest next update: Fri 04 Apr 2025 16:18:00 +0000
Files and hashes: 1: wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl (hash: Ym1qJg2wupyc/EwLECryViLcQA0gJk1M769VBZ5nkSU=)
2: FFA62018DF1811E6805D922AC4F9AE02.roa (hash: rxhW+eUGuHsGzOdXNnXeavFfh2S73u8toqvlJOlu9DQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7234 (0x1c42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1729
Validity
Not Before: Mar 28 16:18:00 2025 GMT
Not After : Apr 4 16:18:00 2025 GMT
Subject: CN=67e6cbb8-c7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:54:0a:3c:bb:a6:7e:ad:1f:2b:56:34:2d:e8:
b7:33:6e:69:ad:5b:a4:ff:32:f8:a0:82:32:4a:6c:
f6:f9:6f:12:88:90:c6:26:e6:85:7c:ce:bf:79:e5:
c5:9d:41:ce:04:2e:aa:81:70:18:66:66:e4:5a:a7:
05:70:08:aa:82:7e:74:e0:e5:51:98:a5:e5:67:d1:
04:40:6d:af:4a:55:b9:af:fc:d5:f1:a3:6e:6e:7a:
43:b9:a4:36:26:fb:f1:01:0b:19:a0:88:46:b0:9f:
42:40:65:ca:cf:55:02:1c:12:b9:b1:3a:29:d2:0a:
13:66:0b:4e:54:90:a6:e6:f2:29:4f:5e:b7:38:c7:
b1:c9:bf:99:5e:01:7b:87:88:be:d5:52:14:56:aa:
ea:35:73:a1:3f:1f:a5:43:74:ef:ca:ed:28:34:71:
9a:e6:ec:6a:70:18:07:51:bb:06:8c:6f:0d:06:0f:
31:28:e9:a1:7c:8b:91:bb:64:53:a0:cc:f0:0a:1b:
fc:6a:a8:59:05:32:cd:ef:fd:78:6f:cd:3b:85:79:
15:ac:58:51:c6:e2:68:bb:be:33:1a:a8:57:4e:1b:
d3:30:cd:4f:69:6b:cc:ed:72:be:2c:19:b7:94:ac:
46:7f:22:61:27:fc:cc:9f:8b:a8:54:7f:13:21:f7:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:86:E1:05:A0:D3:97:BD:1E:E8:79:12:F4:89:63:A2:41:62:B4:E1
X509v3 Authority Key Identifier:
keyid:C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a7:80:40:b9:bb:41:fa:7a:e7:1c:5c:4b:5b:46:44:92:e7:
c4:f3:d2:a5:49:76:66:f2:8e:f6:4d:c1:20:ba:da:53:d4:3c:
82:6b:19:3a:1a:98:a2:1c:e6:e3:df:90:18:23:b9:92:5e:d9:
e5:1d:d8:dc:ce:87:b9:b0:de:0b:12:54:58:a7:77:c8:aa:43:
3e:43:6d:88:01:90:19:96:5b:ee:b1:ba:be:d0:ae:8a:70:00:
ed:0f:db:11:ad:2d:e4:4a:db:3d:b4:c3:a0:61:8a:3b:d7:17:
b8:32:10:25:b1:fd:87:8d:9e:f4:91:89:86:ee:fe:6c:4f:e2:
0f:43:5f:0c:00:b9:7d:b8:ef:8a:41:84:48:6c:ea:6f:0b:a0:
a2:3d:71:4d:a0:95:04:7f:7f:e3:1a:02:1f:25:f0:8a:bb:1c:
df:5d:88:1c:69:b4:1e:35:e9:6b:55:91:9a:58:08:03:ee:29:
a0:9c:ef:63:94:2b:ed:77:e9:17:54:5d:d2:59:2e:85:8a:8d:
26:69:3a:88:c5:a2:bb:a0:40:cd:05:c8:dd:43:7f:36:6a:68:
15:b6:17:be:3b:46:70:ee:d9:0d:2a:34:71:fb:22:7d:83:b4:
48:4a:fe:56:d9:37:b6:3c:5b:e0:10:55:94:b7:f3:d7:b1:0d:
d1:ec:a7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:49 2025 by rpki-client