Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
File: zFfgNkMaXqPBcqpyg0Aa88StXFk.mft (raw, json)
Hash identifier: EZbDf0fBLHGYnF/nRdci8JBXJ4jCm8OgTfXJURDIoSY=
Subject key identifier: 09:77:C9:77:FF:B6:19:4D:AB:6E:A2:00:7D:7C:4D:2A:F1:AC:51:6D
Authority key identifier: CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59
Certificate issuer: /CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59
Certificate serial: 08D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
Manifest number: 08CA
Signing time: Fri 28 Mar 2025 20:44:59 +0000
Manifest this update: Fri 28 Mar 2025 20:44:58 +0000
Manifest next update: Fri 04 Apr 2025 20:44:58 +0000
Files and hashes: 1: zFfgNkMaXqPBcqpyg0Aa88StXFk.crl (hash: MGxG6bTmo/CPRt8hBWVNUJfvILAx8y3LYTFx95igYjQ=)
2: 6BC3CFFCAEAF11EAB092EE6BC4F9AE02.roa (hash: SybMfJLj0+vEkXuaQthUd0H8Z1vNjBlLLQ9rhZgOuPQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2264 (0x8d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDC78
Validity
Not Before: Mar 28 20:44:58 2025 GMT
Not After : Apr 4 20:44:58 2025 GMT
Subject: CN=67e70a4a-653c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:24:b1:45:d9:5a:0e:6a:5f:2b:fa:61:39:cd:
70:a1:df:81:3b:d4:1f:1e:c4:4b:cf:68:b9:b2:9a:
32:5e:e7:be:e0:de:63:58:5b:d0:e2:e9:fb:ba:f5:
7f:63:2d:03:79:99:0b:f8:64:e2:60:d5:98:bb:05:
b6:79:66:98:d9:1b:10:18:2b:fe:4e:df:ed:38:df:
5b:68:60:b7:fe:b7:e7:89:eb:4e:df:3f:3d:af:74:
06:6a:dc:52:3c:6c:53:5f:76:2b:81:b0:ec:6e:8e:
86:33:06:98:d6:1d:78:35:13:b8:71:ab:5e:e7:d9:
fb:48:21:9e:cf:d4:4c:6c:3c:c9:15:96:43:f5:db:
69:63:19:8b:16:dd:22:6f:c2:28:b9:de:c7:34:18:
da:db:5b:9e:ae:c7:37:41:c2:8f:60:69:02:3e:24:
37:12:fb:e9:b3:99:24:71:7a:b7:1c:e1:a1:c9:20:
9c:31:e7:47:65:52:a0:c2:76:ed:3b:d4:f9:53:c8:
13:42:e9:69:97:51:d0:5d:39:84:5d:11:25:79:4b:
c0:dd:55:1b:95:33:ab:f3:48:ab:22:89:8b:5b:11:
4d:b8:65:61:e7:b3:39:b6:8d:35:6a:da:30:89:cd:
3e:a3:28:6e:a7:60:16:80:8f:cf:54:d4:da:f3:b9:
b1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:77:C9:77:FF:B6:19:4D:AB:6E:A2:00:7D:7C:4D:2A:F1:AC:51:6D
X509v3 Authority Key Identifier:
keyid:CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:91:98:b6:5e:51:9a:35:b1:8e:71:d2:0d:a0:8b:e9:b1:ab:
25:a8:48:88:f9:6d:7b:9e:57:fe:87:cc:e7:46:53:66:cc:9b:
b3:63:4e:4e:45:b9:b5:4c:00:77:ce:41:ee:13:dc:94:3e:e2:
f4:ac:4e:0a:bd:5e:de:23:48:7b:9a:a6:58:fe:38:bd:ef:62:
a2:b9:83:2d:63:e0:69:c7:66:e4:78:90:76:0f:5e:01:09:16:
3c:be:16:5f:77:8e:07:e7:8b:08:38:cd:c6:31:d5:f0:82:3a:
ff:6b:a9:f4:05:eb:3b:14:13:04:68:1a:19:79:39:5d:d3:a3:
2d:48:2b:b1:43:53:08:7e:93:28:21:14:4e:82:23:3f:db:4f:
53:22:e2:2d:16:b5:78:1e:1f:29:4e:aa:35:ca:ca:e9:11:e4:
a1:30:f3:81:60:37:83:17:fc:5b:1a:9c:e7:0d:5a:ba:f1:2f:
df:6e:81:6c:47:25:fb:7e:75:ae:07:c8:eb:3f:fd:de:dc:74:
8a:29:5a:c5:3c:d9:dd:01:50:2d:3c:20:85:ff:21:7f:26:19:
26:2a:75:d2:b3:e5:f4:73:07:a3:a6:a5:1f:a3:e7:4c:c7:c6:
0a:85:95:77:16:02:db:a2:ce:91:3a:4d:9f:1e:fd:92:48:c4:
ea:0c:3c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:14 2025 by rpki-client