Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
File: asd5dN_kUIBzXNuQZqfiRpYEkrc.mft (raw, json)
Hash identifier: CA76RBmPt+ywvfMXRw/G4exFeMsy0mj208Odqhi7/v4=
Subject key identifier: 4E:AD:EC:8D:9E:8E:6B:3E:57:0C:96:CD:2E:A0:00:61:72:25:F5:90
Authority key identifier: 6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7
Certificate issuer: /CN=A91F31A7/serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7
Certificate serial: 1031
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
Manifest number: 102A
Signing time: Fri 28 Mar 2025 17:31:29 +0000
Manifest this update: Fri 28 Mar 2025 17:31:29 +0000
Manifest next update: Fri 04 Apr 2025 17:31:29 +0000
Files and hashes: 1: asd5dN_kUIBzXNuQZqfiRpYEkrc.crl (hash: OxarEMPDOeTEVJtQDtjZPeTUZ7rJqwKj+BYuAeJ2eJs=)
2: DDEC8C2A39AA11E9B0166376C4F9AE02.roa (hash: Xl08iUFukXE24X8fvGUzm4LLhTQ/xSXJRNuZF2QZScI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4145 (0x1031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F31A7
Validity
Not Before: Mar 28 17:31:29 2025 GMT
Not After : Apr 4 17:31:29 2025 GMT
Subject: CN=67e6dcf1-5196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:41:75:98:e2:e8:b0:ab:2f:ad:c9:60:48:
c1:d0:7d:dd:dd:a4:d6:fd:8d:e6:b0:e6:8c:42:0e:
c5:e1:ee:77:f4:a5:6b:dd:6d:b1:61:2d:e6:11:d7:
a1:d5:c5:2e:2f:d4:79:18:61:c3:3c:3e:f5:8e:4d:
be:63:94:07:98:26:03:49:5a:af:c3:45:78:5e:03:
48:80:df:78:15:f6:51:ed:d5:c5:9d:fd:63:f3:98:
b7:40:6a:0e:b5:23:4d:df:c2:be:76:7e:f5:f5:ad:
c1:47:40:ae:ac:42:ea:27:a9:82:3e:12:2f:07:03:
7b:08:07:42:3c:eb:58:a9:ed:92:6d:75:06:b8:9e:
cc:19:ee:32:ce:e5:15:71:e5:ad:31:d4:f5:ab:f8:
9a:f4:10:d1:95:6a:43:3b:a9:65:5e:b2:81:6a:d4:
ef:32:b0:cb:2f:33:79:7a:4a:8e:78:bf:18:30:d1:
96:25:7e:25:93:e9:fb:cd:ab:5c:27:7b:e0:44:50:
58:07:26:a0:29:e2:f3:96:5e:94:ef:7b:6f:0e:df:
1c:12:63:ec:0b:db:96:ee:b1:7b:af:52:f9:e6:be:
2e:54:bc:c0:00:a8:27:76:26:3d:09:f6:53:dd:a8:
5e:68:e9:6e:09:21:ef:f9:01:12:38:22:63:62:7e:
95:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AD:EC:8D:9E:8E:6B:3E:57:0C:96:CD:2E:A0:00:61:72:25:F5:90
X509v3 Authority Key Identifier:
keyid:6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a7:ee:06:b1:04:5d:23:85:b4:c3:78:ff:51:4f:19:e3:bf:
46:99:b0:fa:0c:90:53:73:45:5c:26:01:77:35:2a:2e:6f:09:
75:b3:87:72:04:dc:b9:8d:75:65:9a:53:b0:98:b5:69:16:57:
a2:d8:95:89:bb:e2:e1:fc:92:bf:de:85:64:74:1c:08:f6:e4:
3e:e0:9a:86:a2:33:f6:24:57:bb:65:0d:03:82:63:b3:79:fd:
e5:42:b6:83:17:00:74:de:ff:d6:9a:47:e6:ae:6e:d7:da:0c:
99:80:f5:16:e8:23:95:dd:89:7a:3e:ec:c5:b1:b3:9b:38:04:
ca:a2:3a:d1:cd:c1:6e:da:52:56:d9:dd:0c:8c:71:72:2e:42:
d8:1c:41:37:14:38:8c:77:62:9a:92:66:cc:dc:8d:9c:8c:e9:
be:94:f8:f2:32:3f:80:ab:a6:e9:0b:64:f0:35:5f:bb:c4:06:
49:42:22:64:4a:2e:54:ab:01:96:02:23:7c:3f:4b:83:57:42:
2c:29:4f:85:38:aa:a2:43:ad:b1:68:b2:21:97:76:ca:b5:e2:
da:bc:83:37:1f:05:21:f6:cd:40:1c:d0:9d:5d:0c:e6:81:6e:
46:74:ab:f6:d6:9a:11:ed:c4:6f:3d:33:cd:30:e8:eb:f2:d4:
79:f2:a8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:08 2025 by rpki-client