Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
File: 6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json)
Hash identifier: a8tNFMSgGsPPc3gFGH5Nqk/f04bAP4tGm1p1cyG/auo=
Subject key identifier: EC:9C:8E:00:0A:21:F8:FE:7E:51:DB:11:ED:DF:C7:36:2A:BA:3D:7A
Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89
Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389
Certificate serial: 2061
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
Manifest number: 203C
Signing time: Fri 28 Mar 2025 16:05:23 +0000
Manifest this update: Fri 28 Mar 2025 16:05:23 +0000
Manifest next update: Fri 04 Apr 2025 16:05:23 +0000
Files and hashes: 1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: jne/IoxarPqDHFDfIz3doZEL15+hBELkNCnTkSLUX2k=)
2: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: dRYh9WAvcIumZjCZ5S62u32XoLkiqwXXygrg2DE1FBI=)
3: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: 0oF1Qfg6/q63oXyqNiJvhv+IBvlt379syGArKmuw6+w=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8289 (0x2061)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F724B
Validity
Not Before: Mar 28 16:05:23 2025 GMT
Not After : Apr 4 16:05:23 2025 GMT
Subject: CN=67e6c8c3-3015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:7b:4c:30:a9:b8:e4:ed:c7:ea:dd:ab:cf:
04:80:01:62:df:33:be:6a:dd:9a:9c:fe:49:7b:2e:
80:fe:be:94:ec:da:45:3b:f7:74:6a:b1:9d:4e:65:
71:be:bf:ec:bf:f2:a8:b3:cd:7b:ad:e3:8b:54:52:
8e:30:40:72:f0:ca:a5:14:dc:74:34:ea:33:14:40:
56:d8:a5:de:a2:64:55:df:e4:49:e7:83:18:24:b8:
12:41:f1:e5:a7:68:9f:8b:e3:3f:f1:fe:fa:77:c5:
ee:9e:29:e6:49:f6:9d:24:a3:57:79:ad:25:57:90:
96:72:4a:73:d5:34:92:a2:68:37:81:6d:83:27:bc:
83:00:9b:17:77:df:1c:0e:f2:45:1d:3c:14:27:8b:
cb:ba:c8:ee:9c:ca:c2:50:52:8e:76:f4:f1:96:c9:
9c:73:aa:95:b6:80:d4:9a:95:a2:1b:7d:d0:80:f3:
b3:01:7d:5a:2d:f4:ff:01:62:32:be:42:d2:ef:1a:
50:b6:d2:17:85:ba:6c:01:6d:02:e0:18:76:2c:36:
f9:92:13:f2:db:58:67:71:45:4f:a6:c2:46:da:d2:
88:27:a8:03:b8:65:3e:f8:b9:2f:49:d2:e9:bf:39:
de:60:d7:10:a7:b4:3e:45:3d:38:80:cf:fb:19:61:
ca:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9C:8E:00:0A:21:F8:FE:7E:51:DB:11:ED:DF:C7:36:2A:BA:3D:7A
X509v3 Authority Key Identifier:
keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:68:bf:43:38:5d:9f:6a:bd:48:23:75:8d:4a:7d:3c:4c:ff:
f7:a3:24:6f:a9:c0:14:84:d9:eb:7b:f1:01:f0:64:ff:a5:16:
85:da:59:94:55:9b:7e:b5:04:a6:4a:43:e8:f2:f8:70:2a:ac:
2d:44:07:14:4c:80:15:ad:ff:ea:15:72:c0:42:c6:10:7b:d8:
a2:97:4e:15:71:13:0b:fc:f1:83:e9:a4:39:c1:17:b2:4d:7e:
70:30:5e:61:93:fa:51:93:51:c6:b5:8a:7a:3c:91:70:fb:c5:
ea:f8:19:67:6b:68:4d:5b:16:2c:34:b1:0f:7f:87:8f:85:1e:
7b:05:cb:09:15:b7:7c:f2:5c:5f:3a:ce:27:83:7b:c9:c5:d3:
98:59:bc:c4:1d:2a:86:dd:ec:54:b5:cc:e5:41:dd:7f:6e:44:
72:45:f7:86:fa:16:0d:5d:6d:fd:d0:26:d1:5b:67:fb:59:ca:
11:e6:ec:39:44:04:c3:1b:b3:78:27:39:ce:ca:ec:32:41:a5:
f2:c8:dc:2d:20:7c:47:da:3a:32:12:c6:80:6f:e5:06:d4:39:
b0:06:a4:54:10:d1:93:a3:8a:4d:f2:9a:86:52:92:94:52:14:
48:bd:ba:71:19:ad:34:72:d1:ff:33:f7:b4:30:dc:0a:74:12:
68:cc:c3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:52 2025 by rpki-client