Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft
File: K5XY2CKKiRR9gBk9l3DrUK7du2s.mft (raw, json)
Hash identifier: 49fbruTj0YlyvXHfR5JZWBZBGRgdcqfxLZ794Z0In58=
Subject key identifier: 3D:43:BB:B1:DB:56:5D:99:8C:8D:3E:F2:6E:31:19:9D:E9:8E:9C:02
Authority key identifier: 2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B
Certificate issuer: /CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B
Certificate serial: 16A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft
Manifest number: 1687
Signing time: Fri 28 Mar 2025 16:46:43 +0000
Manifest this update: Fri 28 Mar 2025 16:46:42 +0000
Manifest next update: Fri 04 Apr 2025 16:46:42 +0000
Files and hashes: 1: K5XY2CKKiRR9gBk9l3DrUK7du2s.crl (hash: eZ4PCH8ED+Re5Z4rYt+AHwgWcgNCoh1E6+0SnO1jOg0=)
2: 07D665E0862711EBAC147872C4F9AE02.roa (hash: h1jWRhCaXCGscugt7m7NPkJTh1NUHltfWypGJXiPwZw=)
3: F9E21144D90F11EDB2DBEA49C4F9AE02.roa (hash: fP45NGSHNvdQShMBiD1rePe2Esz9p+VlDQo2vfi2cz0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5792 (0x16a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF5A9
Validity
Not Before: Mar 28 16:46:42 2025 GMT
Not After : Apr 4 16:46:42 2025 GMT
Subject: CN=67e6d272-4e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:e4:3b:01:36:d9:52:1e:69:2e:6b:56:1f:
e9:61:ae:dd:91:82:2c:8a:2f:7d:2a:86:bf:b5:4a:
74:55:23:98:50:1c:f5:ff:af:b4:a3:2c:07:a4:aa:
f7:21:34:0f:fb:83:0f:11:e8:71:62:ee:68:65:4d:
ab:c1:44:6a:10:81:16:74:69:05:4f:e6:74:63:cd:
2e:3a:2e:9d:26:e9:b8:f7:1b:c8:a9:38:ac:0a:08:
00:de:54:98:78:db:cf:05:ff:b2:42:99:b0:4b:c9:
71:10:7e:fb:1f:36:e1:ac:89:74:db:83:c5:bb:71:
2c:f5:95:a6:ee:13:10:ec:80:48:4c:ec:a9:56:95:
d5:65:12:ae:39:11:be:73:b9:e4:aa:54:86:5d:a7:
f5:47:3f:66:16:7e:36:73:26:66:a1:60:1c:f8:80:
f0:82:84:38:80:69:be:1b:90:18:a7:97:2e:d6:34:
54:2b:e1:e5:32:d2:ce:1e:a3:a8:19:90:81:07:d5:
48:27:76:ed:f1:df:54:07:b7:03:55:ca:a1:ae:ee:
ee:19:a1:76:6e:c7:22:f0:ab:7f:8e:71:26:5b:a9:
cf:45:eb:b4:a9:6c:e9:69:8e:b3:ca:b6:c2:b1:9a:
59:01:66:0d:57:0e:42:81:f1:49:1e:1d:a4:84:cf:
6b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:43:BB:B1:DB:56:5D:99:8C:8D:3E:F2:6E:31:19:9D:E9:8E:9C:02
X509v3 Authority Key Identifier:
keyid:2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:43:f8:7b:1e:bf:bf:5b:1e:8f:2d:55:7e:19:44:31:b1:49:
e8:18:69:03:d7:3c:02:81:bb:55:2a:b9:90:85:bf:4f:6a:08:
c4:63:a5:11:4b:72:f0:f7:af:3f:1f:f6:c6:28:2d:66:17:67:
6d:2b:4c:80:6c:54:d1:5c:0c:56:ab:9a:f9:e0:29:a0:5e:d1:
3e:90:d7:7c:33:2e:16:3d:6e:7e:d6:3d:e6:a4:30:73:a1:13:
c4:a6:7c:72:9b:16:ba:72:29:4f:79:4d:05:eb:ee:77:bd:92:
08:dd:66:32:da:bc:a3:e8:c5:85:a8:a3:43:aa:f1:22:66:77:
ba:cb:f8:1d:aa:35:9d:ff:88:6a:85:53:d4:77:5e:c8:a2:b0:
c4:1e:83:08:82:80:72:1a:d6:3e:d3:9a:c9:fa:72:0d:75:35:
dc:1d:f7:d4:6e:64:d3:72:e4:26:be:49:34:42:3c:f4:03:65:
49:a9:79:03:5e:c6:21:73:2d:07:79:b2:04:14:2c:d5:44:af:
d6:14:f6:40:14:5a:05:2c:6f:ab:2b:bb:4a:af:ae:be:2c:57:
4e:02:30:b2:ca:fb:53:60:b3:20:81:e6:dc:61:f1:3c:1f:9d:
92:b8:a5:82:42:e6:96:ed:2e:12:31:24:31:a4:c9:19:b1:a6:
d1:b9:dc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:24:22 2025 by rpki-client