Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
File: EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft (raw, json)
Hash identifier: GXp8sFuUdPQM3cvbWf3PNSPUcexQVlabyqdphAkPIbM=
Subject key identifier: 1C:84:BE:B7:A9:BC:28:0C:EE:FC:71:B7:03:E8:45:73:5F:5D:E0:5E
Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1
Certificate issuer: /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
Certificate serial: 0DF3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
Manifest number: 0DE3
Signing time: Fri 28 Mar 2025 18:00:20 +0000
Manifest this update: Fri 28 Mar 2025 18:00:19 +0000
Manifest next update: Fri 04 Apr 2025 18:00:19 +0000
Files and hashes: 1: EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl (hash: SF6/iV3V6txKVT+r/5H6hH3PZL+qWljshESq76mzrg8=)
2: 14ED07C27B8D11EDB395B621C4F9AE02.roa (hash: QWOTAeLgnWJFAAIChZL1m0e0kICN2c6Ng+tc3RXx8Yg=)
3: E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (hash: tRUYfW/mxJFIRHVM9QsIKc4UoKBg/TdEbDm54bKQfQg=)
4: C145485EAE9A11E9B17AC77EC4F9AE02.roa (hash: agk9fTE0Dhy5dYc90EBQeapRa6cEZ8A1rQ5/CvNJ7LU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3571 (0xdf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA7B2
Validity
Not Before: Mar 28 18:00:19 2025 GMT
Not After : Apr 4 18:00:19 2025 GMT
Subject: CN=67e6e3b4-80a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bb:fb:7e:ef:26:4e:29:6c:ea:f3:c7:d4:50:
33:45:40:62:bf:34:cf:d8:5b:53:d6:7b:e9:bf:70:
8e:97:18:55:8a:29:57:75:bd:9a:e4:04:7e:77:13:
8d:8a:16:5c:c3:10:ca:93:0f:e0:ad:d7:5e:d1:0a:
6b:64:2b:31:88:32:7c:12:a0:3e:42:34:0b:9a:56:
9d:31:d2:b0:e2:ba:2d:a3:03:08:05:89:d4:af:0e:
9f:b6:c5:a4:42:19:91:8a:fd:3d:f9:62:af:40:b2:
04:89:96:3a:ca:05:48:bf:1f:85:b0:57:be:7d:b3:
44:48:02:dd:91:23:c5:e3:d1:c2:c6:ef:c4:27:c5:
0f:2b:07:03:31:e5:65:70:de:01:90:f7:66:09:d6:
78:48:9c:1a:e9:cc:46:a1:6c:1d:e4:da:ad:bc:c0:
66:e0:47:a4:40:f6:ff:a9:58:33:f5:f6:2b:ca:65:
7a:dc:26:b0:db:62:6c:87:d5:01:56:29:9c:c0:bc:
3c:0c:e3:4a:f9:9e:ac:02:48:2b:a8:6e:d4:6d:16:
08:3b:dc:5c:59:41:fe:41:ec:24:da:f9:28:fa:80:
ff:e0:a0:b5:8f:ac:92:b8:83:34:b9:46:6d:2e:b8:
ce:49:53:5d:ef:60:9a:16:d9:4f:9d:01:c9:54:4b:
2b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:84:BE:B7:A9:BC:28:0C:EE:FC:71:B7:03:E8:45:73:5F:5D:E0:5E
X509v3 Authority Key Identifier:
keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:43:ca:12:4b:f1:ca:11:01:31:d0:ae:64:50:35:03:9c:c6:
8a:08:50:62:14:de:17:c4:1c:43:cb:97:e7:30:73:b5:b7:89:
bd:7f:d7:fa:53:b0:cd:fe:62:57:49:2b:0d:ce:af:72:13:55:
e2:df:66:0c:d1:0d:2f:c3:cb:0e:60:a1:6a:ed:2b:28:86:d4:
c8:4a:49:fc:89:1a:1c:a4:3e:02:14:42:6c:80:29:bd:03:d1:
83:97:8a:84:67:9b:85:8b:04:35:15:86:3d:a0:e1:5f:c0:e0:
b9:dc:0b:a6:78:0b:0e:73:fd:53:a7:38:8d:63:11:b3:95:4c:
20:b1:5f:34:9c:9a:cd:aa:39:e2:66:e4:89:d8:6e:4b:47:71:
85:bb:aa:db:ab:1e:90:e3:33:04:cf:88:e2:00:43:86:8b:4c:
06:0f:ff:4a:9e:99:8e:44:57:36:a3:2c:7a:4b:8e:47:7d:36:
54:96:7c:a4:3f:1d:84:f8:c5:ad:de:33:ab:16:b8:1b:f9:ad:
74:c6:8e:5c:ad:4f:cd:a0:69:c1:3d:c8:f7:5d:09:14:c1:48:
e7:31:98:d5:c4:6f:2e:e7:7c:ab:e4:1c:fb:93:f9:83:5a:de:
fc:83:55:97:8c:52:4e:42:91:b2:a5:c6:d2:3a:8e:3b:81:d2:
cc:35:16:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:48 2025 by rpki-client