Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft
File: FBXygRwDfzZMxYcYC_JAeVsEOmk.mft (raw, json)
Hash identifier: E5l3ljF1NTGPzf8Tdd4PNV7wMub1NDIRcrP/4y2reDo=
Subject key identifier: 36:82:04:14:86:3C:5E:08:AE:2E:D4:2D:55:52:95:49:DE:BB:5E:CC
Authority key identifier: 14:15:F2:81:1C:03:7F:36:4C:C5:87:18:0B:F2:40:79:5B:04:3A:69
Certificate issuer: /CN=A91E275B/serialNumber=1415F2811C037F364CC587180BF240795B043A69
Certificate serial: 3269
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft
Manifest number: 99C2
Signing time: Fri 28 Mar 2025 15:23:01 +0000
Manifest this update: Fri 28 Mar 2025 15:23:01 +0000
Manifest next update: Fri 04 Apr 2025 15:23:01 +0000
Files and hashes: 1: FBXygRwDfzZMxYcYC_JAeVsEOmk.crl (hash: kfNtW+P3yreskUNWDCfTzbRPLtnBGTqSJWOr0MqJFsk=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12905 (0x3269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E275B
Validity
Not Before: Mar 28 15:23:01 2025 GMT
Not After : Apr 4 15:23:01 2025 GMT
Subject: CN=67e6bed5-1aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:a9:84:6c:97:f6:d1:05:4d:8c:b8:76:81:
e0:fd:14:2e:32:55:a6:42:88:a2:58:f0:8d:f7:d5:
88:fd:db:ec:bd:b0:5e:be:0d:ed:83:19:eb:34:b2:
c8:00:e7:e0:10:09:3b:63:8f:f5:95:fe:5b:4a:97:
27:3f:35:60:cb:6c:64:17:31:93:70:fa:0a:81:cd:
79:0a:94:8c:ee:2c:c3:a7:a9:7c:b2:89:06:46:3d:
8d:4e:47:ae:6f:17:53:2a:5f:82:5f:b6:5b:8a:7b:
4a:37:61:9e:52:f8:2a:e7:ac:ea:5b:f9:19:27:1c:
5d:1f:77:35:9c:a3:74:35:62:d2:33:9d:ca:b8:03:
f4:a2:3d:8f:ed:cd:ed:24:1b:62:85:85:d0:4f:bd:
b8:2b:2f:c0:01:29:87:cf:57:41:43:11:fd:1a:54:
41:8e:2f:1b:66:d8:33:d8:e6:a3:d5:c5:b1:00:e7:
ac:bc:50:f6:07:71:5c:e9:b7:85:16:c0:7e:4e:8f:
18:3e:01:82:c5:8f:03:4d:68:51:df:61:a9:67:b6:
c6:5e:9d:35:c6:e9:9d:e2:ef:63:6e:63:d1:e2:e0:
80:96:05:7b:7f:4e:93:52:95:88:28:8c:af:8e:91:
7b:64:89:c2:8b:4f:c5:a9:b0:53:a5:b4:03:19:64:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:82:04:14:86:3C:5E:08:AE:2E:D4:2D:55:52:95:49:DE:BB:5E:CC
X509v3 Authority Key Identifier:
keyid:14:15:F2:81:1C:03:7F:36:4C:C5:87:18:0B:F2:40:79:5B:04:3A:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ad:7f:35:7b:12:8c:63:a5:2c:c9:05:38:c3:f5:bb:74:d4:
32:61:47:b1:35:8b:39:9d:ab:b6:8f:ff:40:a4:3a:d3:80:59:
87:ce:9f:80:88:e3:da:61:d3:84:3f:db:1a:f3:62:d0:9a:63:
1d:94:5c:c5:26:9a:5d:83:90:69:c2:f7:d7:63:41:a1:5e:c6:
7b:92:c2:60:69:3f:a3:f5:b6:18:26:4c:64:f5:a5:1c:66:53:
da:a5:e1:70:e0:17:37:b2:03:cb:50:4c:46:06:ba:fb:c0:3f:
bd:25:14:79:0a:ad:c9:0d:81:1a:34:43:cc:e8:28:4b:b3:6a:
48:f1:cc:c3:e1:01:02:0c:8f:7f:70:c2:59:e9:e7:b5:c2:4a:
a1:7b:e0:ee:db:21:7c:25:69:e9:33:0f:46:c7:95:4d:ba:41:
e3:fb:f8:e9:c9:d2:12:99:a6:d5:ff:4f:df:d7:24:b5:99:df:
2d:7c:9b:17:2b:ec:d5:51:15:a5:77:01:eb:d4:19:55:9f:6c:
4d:dd:8c:44:3f:58:f4:db:e8:6c:65:f2:f2:ea:81:08:40:a5:
cc:bd:ce:d8:c5:0d:53:80:90:74:90:f0:d6:7c:02:9f:9f:41:
48:4b:07:f3:0d:1e:4e:27:93:b2:14:a1:aa:b9:f0:c4:49:45:
69:f3:1a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:38 2025 by rpki-client