Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
File: xsGRae6n0Ga8m8py3YgwvBg6EmY.mft (raw, json)
Hash identifier: mtRRSSquXK7Vq+p9V7gYi/CjQUXMjKzZsLNlhBad2OE=
Subject key identifier: 92:4D:9D:B9:01:6C:5D:9A:1E:58:B8:78:8B:A2:11:82:A2:42:5D:F2
Authority key identifier: C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66
Certificate issuer: /CN=A91F1C46/serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
Certificate serial: 07BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
Manifest number: 07B6
Signing time: Fri 28 Mar 2025 21:23:33 +0000
Manifest this update: Fri 28 Mar 2025 21:23:33 +0000
Manifest next update: Fri 04 Apr 2025 21:23:33 +0000
Files and hashes: 1: xsGRae6n0Ga8m8py3YgwvBg6EmY.crl (hash: qC/Co8BB8YdO3cqBC0nJDsaXe1lIZOIxI4vn3kK0nJs=)
2: D3EA977EF32D11EA8498822CC4F9AE02.roa (hash: r2T7XJOkXRBGynKocftf/aUA3rARniOBCv1mNIL5QlU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1982 (0x7be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1C46
Validity
Not Before: Mar 28 21:23:33 2025 GMT
Not After : Apr 4 21:23:33 2025 GMT
Subject: CN=67e71355-803c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ca:0e:a9:99:98:2a:c7:5d:94:d0:ce:2a:34:
87:58:b8:ec:6d:fd:65:b7:1b:b5:b2:18:0b:d5:f1:
46:0a:35:18:a9:d8:6d:00:c3:25:8c:c9:35:b6:f3:
9e:7f:21:ad:f0:84:cf:6e:a8:4b:58:00:8a:19:90:
90:dc:45:1e:df:0e:b6:c8:5d:64:48:09:de:63:79:
10:63:d9:aa:c3:2b:39:46:9a:7f:b9:84:d7:34:53:
b4:12:c6:1d:c8:41:f4:7a:e3:d1:f3:45:28:f5:ab:
18:1e:80:c2:17:fe:16:1c:16:6d:44:4f:ca:0b:39:
ad:25:84:38:ee:89:c3:2f:31:8a:17:ef:90:09:4e:
27:82:c5:2d:39:92:07:4a:19:07:1d:59:6f:d0:03:
92:10:16:0b:37:70:eb:90:e4:07:52:cd:83:52:c3:
cc:20:0a:19:92:78:e4:69:81:6a:8f:3c:5f:8c:1d:
68:84:34:a6:8f:0d:d1:c0:66:b4:6e:68:65:28:14:
95:89:52:e2:71:5a:47:b7:ea:d2:bc:2f:c2:d5:64:
e1:d4:c9:1c:a5:e3:61:12:f4:6c:57:dd:79:e1:f8:
88:51:2a:95:5e:57:80:7c:f6:a9:01:d5:85:0a:37:
c3:14:ab:f7:36:6c:f9:f9:24:63:23:4f:36:d4:df:
1a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4D:9D:B9:01:6C:5D:9A:1E:58:B8:78:8B:A2:11:82:A2:42:5D:F2
X509v3 Authority Key Identifier:
keyid:C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fb:f7:1d:ad:71:98:38:32:fe:9a:f6:4b:2d:29:bd:ca:90:
61:9e:c3:48:0c:77:a8:70:d1:02:bb:0a:33:b4:68:a7:91:aa:
eb:55:67:65:ca:25:c0:d0:28:bb:42:f3:64:78:8e:b6:25:1f:
9d:98:e7:de:3a:ec:9e:cf:e9:ce:d0:c3:40:b4:7c:a3:e5:7a:
5b:2e:27:9e:65:4d:8a:df:e9:32:4a:41:55:e8:88:6f:63:8a:
a1:df:ff:2f:67:ae:a0:b7:d0:b5:f8:6b:9d:d2:49:e5:c6:a9:
83:5f:15:4b:a8:7e:39:db:e1:5a:ff:30:d7:31:89:ff:78:96:
b6:3f:15:83:9f:2a:ef:60:6d:d0:02:1e:f1:2d:32:11:8d:fb:
4a:97:f8:80:f2:8e:93:8b:cd:b6:8f:e3:ca:6f:11:67:4d:4e:
eb:2a:74:14:d2:1a:f4:5e:b8:63:48:03:fa:02:4f:38:a6:b7:
fb:90:1e:c8:e8:3b:bc:91:d8:18:c0:b5:cd:c0:e4:f0:f9:a2:
a8:6d:f7:37:11:7d:b0:82:18:04:be:20:0c:c0:03:ae:a2:6c:
fa:11:72:aa:e2:5f:2b:8d:7a:31:85:ae:43:91:d7:f6:10:6d:
85:25:a9:9d:65:f8:11:6e:7d:11:ae:3c:78:dd:1f:24:9a:0b:
c4:6f:6c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:48 2025 by rpki-client