Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
File: h81xgndjHgvdtrTzot8esxEio4E.mft (raw, json)
Hash identifier: lFVmUFX2QWWikQ47yFSXclcpsDZ51NigtaUvljwMsQM=
Subject key identifier: 5D:04:75:83:1B:24:66:96:6D:3C:A4:33:98:04:77:9E:D1:3B:CF:00
Authority key identifier: 87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81
Certificate issuer: /CN=A91F2DDD/serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381
Certificate serial: 0E33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
Manifest number: 111A
Signing time: Fri 28 Mar 2025 17:53:02 +0000
Manifest this update: Fri 28 Mar 2025 17:53:01 +0000
Manifest next update: Fri 04 Apr 2025 17:53:01 +0000
Files and hashes: 1: h81xgndjHgvdtrTzot8esxEio4E.crl (hash: nri8NSb/l15X3vun8bgenlnqOONTr5Z16FZRqXpY/tc=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3635 (0xe33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2DDD
Validity
Not Before: Mar 28 17:53:01 2025 GMT
Not After : Apr 4 17:53:01 2025 GMT
Subject: CN=67e6e1fd-d6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bf:2c:b4:11:8c:7c:44:6d:34:83:c7:19:d0:
98:54:47:13:1c:6d:27:82:b9:eb:04:21:0e:83:e5:
85:29:ff:db:e2:b8:5a:b8:9f:78:cd:4e:5e:59:bd:
b9:da:d5:c2:b0:60:a7:a6:eb:53:0c:da:0a:75:ad:
71:d8:78:fe:8d:19:2f:10:f9:5e:de:96:de:02:69:
4a:ea:c0:32:e1:fb:87:14:c8:f6:b2:64:db:94:78:
a6:5f:16:2f:1d:ac:fd:00:1b:46:60:93:0f:cf:20:
96:97:7f:2f:f6:09:3e:c4:42:7e:dd:92:89:2d:7b:
04:8f:1b:16:c1:1c:16:06:bd:fc:41:ec:29:84:48:
f3:ce:ad:c7:4f:b4:35:19:4d:82:18:b5:68:70:2e:
6f:8d:2e:84:17:75:97:c0:ab:1f:0d:5f:17:6d:f0:
df:43:19:9d:9b:e1:63:f1:60:b3:a1:b9:4e:8c:77:
d1:ee:22:5b:eb:1e:9a:fa:53:41:60:aa:30:8b:10:
1b:2b:75:c1:55:ba:ce:84:ac:5e:93:ad:ea:31:4f:
0d:6e:c0:ee:56:42:d9:7c:f5:cf:7f:60:1e:9c:b9:
2c:5e:11:5e:64:dd:ee:78:84:85:a6:23:d5:db:01:
55:b1:05:d7:ac:ba:e8:fa:2b:08:cd:d4:93:12:28:
66:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:04:75:83:1B:24:66:96:6D:3C:A4:33:98:04:77:9E:D1:3B:CF:00
X509v3 Authority Key Identifier:
keyid:87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:76:3c:64:4b:e5:73:32:f1:8a:fc:6e:df:6c:af:14:03:64:
29:c3:ce:63:86:1b:5a:13:b5:db:b8:92:ba:20:65:30:8e:38:
d9:e2:ac:e2:94:bc:cb:c3:d6:8e:f3:1d:c2:8f:73:f6:26:35:
0d:21:cb:2f:ec:e2:d6:83:9a:61:c5:28:a7:5d:23:85:63:cc:
a4:db:2c:ab:92:af:51:7a:44:66:1c:20:09:df:47:a9:ad:b9:
b6:50:6c:bd:97:ab:d8:57:0f:0f:e6:3c:d1:89:9a:e9:ca:19:
eb:24:d5:24:2e:65:be:99:aa:c8:11:40:7d:41:0b:80:c5:71:
1c:15:2f:7e:82:f7:82:db:af:93:3a:0c:1b:7f:84:da:74:4e:
37:9b:ef:01:62:41:da:b1:52:29:b8:4f:ba:91:da:21:8a:8d:
26:c3:d0:4e:a3:e3:c5:a2:65:f4:48:47:88:d2:b4:3a:07:28:
b8:c4:78:0f:09:0a:05:b2:b2:c0:46:51:5e:70:11:34:f8:af:
e1:4e:da:e5:d8:a8:95:ad:aa:64:18:52:07:88:2e:88:21:f3:
2b:1e:da:ea:5b:b4:fe:3a:17:e7:a2:c3:cc:1f:f8:73:3b:ea:
45:d5:1f:a0:2d:14:6b:83:30:96:47:29:89:55:85:b4:cf:a2:
b0:30:e7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:50 2025 by rpki-client