Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft
File: j1nI_VoLWpmrBABkQjq_TbC04IY.mft (raw, json)
Hash identifier: Fs55nqIOeX9oY91D+fwiJOrzzzY2V8tkxgiYJgvxh8k=
Subject key identifier: 1A:B1:40:CB:A6:54:64:CF:7D:DB:36:00:3A:14:AE:BF:2C:ED:82:E7
Authority key identifier: 8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86
Certificate issuer: /CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086
Certificate serial: 3499
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft
Manifest number: 347C
Signing time: Fri 28 Mar 2025 15:22:38 +0000
Manifest this update: Fri 28 Mar 2025 15:22:38 +0000
Manifest next update: Fri 04 Apr 2025 15:22:38 +0000
Files and hashes: 1: j1nI_VoLWpmrBABkQjq_TbC04IY.crl (hash: EBoWllXPnaqAsCq3ESnNJg0iEPR0Neh+2PcagoDE7HQ=)
2: F3DC25C41E4511EFBB4DF80DC4F9AE02.roa (hash: 4K1AhY9g2ySc0ysIrXTw5HOO4AeH3GPRlqEzwlH2eL4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13465 (0x3499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E647A
Validity
Not Before: Mar 28 15:22:38 2025 GMT
Not After : Apr 4 15:22:38 2025 GMT
Subject: CN=67e6bebe-8c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:5f:41:5b:d2:67:41:f9:6c:65:57:85:e6:
37:d6:4c:81:ab:dc:8e:32:f2:f3:b9:ca:46:e1:ab:
88:0d:b9:1f:07:1a:57:cc:de:c3:4e:9d:98:1f:e4:
7b:b3:6c:ef:b4:39:6e:b0:09:93:be:44:fb:f7:18:
e2:99:d8:3f:ec:c1:78:eb:97:7b:7b:51:2c:4b:d5:
e7:04:0f:52:b4:e3:60:0d:8e:a2:31:b3:1d:d3:68:
6c:ae:22:95:6c:ff:ac:78:ef:7f:8b:86:a4:7a:27:
80:d8:70:1e:d7:53:45:00:79:d9:f9:81:95:3b:5f:
37:e6:1f:79:e8:c5:02:0d:e4:2a:cd:fc:dd:64:46:
39:99:d7:51:12:cb:9d:4c:5a:95:c6:cc:14:04:a1:
b5:44:e5:80:43:e0:a0:34:ae:4b:57:5e:cc:61:fc:
a4:a7:f2:a6:d9:a5:fe:0a:9e:26:81:26:7c:8e:b4:
d4:62:08:e6:85:c3:d5:3e:a6:ba:a9:9d:e6:60:87:
0c:27:c4:11:0f:6d:88:55:bc:58:07:ac:35:19:2b:
6e:08:24:a6:b8:2b:93:ba:60:f1:fc:c7:4f:a1:d4:
d5:46:99:a8:77:1f:ba:be:aa:d5:83:b1:d2:fa:6c:
15:65:98:aa:95:ac:aa:13:67:9b:37:f6:6f:f8:90:
9d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B1:40:CB:A6:54:64:CF:7D:DB:36:00:3A:14:AE:BF:2C:ED:82:E7
X509v3 Authority Key Identifier:
keyid:8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:3a:98:a7:94:27:3c:fe:5b:e4:95:1a:0d:a3:d8:2d:d1:fd:
33:b4:08:c2:1d:7c:31:17:24:a8:40:df:64:28:c4:79:0d:2c:
e6:14:fe:1d:8c:9e:bf:9d:dd:f7:9c:6d:65:26:25:7e:3f:0d:
c7:6f:67:f7:c2:6e:b3:d4:ab:8a:b3:6b:46:cb:2b:02:bf:33:
b2:2a:68:81:19:52:ac:b5:b4:0d:f8:05:2e:d2:28:af:3a:bd:
40:3b:1a:76:44:9b:ff:41:8b:34:33:c2:2b:4b:d6:e3:ab:8c:
9d:dd:b6:89:b9:e0:87:9e:be:30:12:07:a0:d1:95:b5:87:5a:
7e:52:0b:38:f4:29:6e:3d:49:77:1e:68:bb:29:a6:fc:65:45:
7d:73:5c:30:6a:d9:56:df:47:a4:52:e1:b9:77:96:c9:d7:93:
f7:ac:83:6b:6f:c9:99:6e:4a:31:9d:30:ad:26:7a:c8:41:45:
4c:12:57:0a:d2:77:09:75:a7:51:93:9f:e6:0b:9d:3f:53:67:
66:c4:71:bb:5e:4c:c4:22:6e:c1:ac:7b:09:0e:3a:15:02:e9:
81:c2:35:0d:5e:dc:74:09:b9:f0:94:ac:e4:05:d0:6f:12:7f:
b8:a3:26:6c:2d:3d:d6:8e:e5:cc:8a:c9:1a:5e:24:4d:2b:a7:
7b:6f:6c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:32 2025 by rpki-client