Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft
File: 7EhKUeRjuYr44bAq4ilVoTIvH3U.mft (raw, json)
Hash identifier: W8l/DCWj3ngZRcmXpiv492N95zGYV6hcE/IbEqCDNTE=
Subject key identifier: A1:81:54:30:E0:BC:87:20:DE:2F:9F:B6:FA:1D:85:7D:70:54:30:38
Authority key identifier: EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75
Certificate issuer: /CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75
Certificate serial: 34A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft
Manifest number: 3484
Signing time: Fri 28 Mar 2025 15:22:24 +0000
Manifest this update: Fri 28 Mar 2025 15:22:24 +0000
Manifest next update: Fri 04 Apr 2025 15:22:24 +0000
Files and hashes: 1: 7EhKUeRjuYr44bAq4ilVoTIvH3U.crl (hash: aLUC2kOSdrB3xEYGHl225WXZJzRYJPO240CBd3YBNio=)
2: 10704342B82811EFBBBB8612C4F9AE02.roa (hash: 8QIAuYOy9f6b5zSvfVedJi6THJS0SwovP5/GRdELmd4=)
3: 650B909C903B11EF924F0B86C4F9AE02.roa (hash: l9dH5Yk/IsrZlDMhS/m7QsOx2yvq3McTRworcFa7eFQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13475 (0x34a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F48F2
Validity
Not Before: Mar 28 15:22:24 2025 GMT
Not After : Apr 4 15:22:24 2025 GMT
Subject: CN=67e6beb0-0bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7e:ba:13:c4:80:11:8d:fc:f4:b0:7e:27:8c:
4a:23:6a:7b:d6:1d:d1:6b:fe:53:c1:23:fe:5d:3e:
2e:09:66:14:60:31:ea:6d:d0:09:9d:16:c8:38:1a:
28:09:06:ea:6a:21:11:25:f6:ed:51:a6:f1:ec:76:
99:63:bf:2a:ec:f6:db:c5:1e:d6:e4:96:92:0b:0c:
9f:84:55:5a:aa:f8:9b:40:30:f6:57:37:48:45:d2:
e3:25:6f:f5:1f:2e:bb:fa:af:3a:55:2d:a0:2a:d6:
0b:6a:c3:43:7a:62:2d:be:13:f4:3d:f0:60:7b:2d:
f3:df:94:83:84:e6:e2:ff:7e:31:da:d9:af:dd:3a:
31:e4:30:e7:eb:8f:25:7b:24:e6:3c:c6:d5:bf:6e:
2f:9e:b3:48:46:03:b3:ff:43:81:43:e8:ae:94:4f:
a6:4a:f8:b0:10:9e:4f:cd:31:b6:5f:f6:30:61:02:
cb:fe:1b:9d:9f:c6:34:db:c1:7a:fa:e1:29:a7:13:
0e:83:bf:a4:7a:ff:01:da:63:c0:84:96:ba:f3:eb:
34:f6:5e:18:00:72:c1:83:b1:26:4b:45:47:d5:89:
10:fd:56:f8:a3:21:90:67:0d:65:8a:f8:0c:5a:03:
41:ff:8f:f4:04:8e:68:64:d9:1e:f2:d2:e7:fc:68:
7e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:81:54:30:E0:BC:87:20:DE:2F:9F:B6:FA:1D:85:7D:70:54:30:38
X509v3 Authority Key Identifier:
keyid:EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b8:6e:f1:02:15:91:72:c2:65:b2:85:49:29:e4:6f:78:f8:
d5:8f:17:99:99:2b:76:ed:09:47:88:59:61:40:c0:1c:c2:17:
63:40:db:97:e4:3b:1c:89:3a:8e:66:63:66:70:e0:0d:89:29:
88:82:4c:9a:d2:3a:e0:c8:e8:cb:10:bb:6b:f3:81:f5:f3:c9:
cd:a9:56:b2:35:6b:67:7a:68:1b:2a:0e:b5:b6:ac:65:68:5c:
ae:88:4c:d0:9e:8d:8e:c3:be:bc:f0:1c:0d:c0:41:be:81:76:
b0:86:ff:69:39:51:03:cc:da:3d:51:41:b9:3a:da:74:5c:e2:
8c:91:29:6e:8f:72:c5:a5:07:3f:1a:e4:27:5c:16:7b:7b:78:
a2:5e:ae:3b:88:ce:e4:59:9f:ca:7e:a0:b4:09:4c:ad:9e:f8:
c8:34:57:d7:74:63:56:9a:1d:7a:6c:22:98:c7:c6:9e:27:9b:
33:a4:5d:21:c1:70:20:7c:37:dc:a1:ab:6f:d7:dc:4b:56:81:
3c:7d:3b:49:ef:b7:3b:fa:a9:8c:70:cb:85:19:b4:3d:4c:18:
ea:31:e9:18:ac:18:a7:64:bf:bf:41:f3:60:7b:02:3f:d7:02:
ca:b4:a9:72:33:9c:a6:26:7c:ed:09:63:3b:df:73:bf:5b:73:
e8:81:4e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:52:01 2025 by rpki-client