Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json)
Hash identifier: NME99k2sHoUrAdJG/ZfQGnf3AyhV1lXzAbZuU4j3I98=
Subject key identifier: 6D:2A:15:22:BD:5A:47:33:DB:AC:DF:65:5F:B7:EF:30:5E:9E:7D:5B
Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD
Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD
Certificate serial: 0C12
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
Manifest number: 0C05
Signing time: Fri 28 Mar 2025 17:43:56 +0000
Manifest this update: Fri 28 Mar 2025 17:43:56 +0000
Manifest next update: Fri 04 Apr 2025 17:43:56 +0000
Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: DqDtwKYuYF9MpCEuTLPdM4/1fRK7Tf9B0oDMDWq+LDc=)
2: CDD0C38ECCE111EB90AF2C7AC4F9AE02.roa (hash: e16SVTPpwjEg2RE9Hpi4GSSEsMxTTKPyjdQEKVYgs6Q=)
3: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: ZahlDvvl4xqyMO4InfL5NLuVKGcItekitU1WQ9tGmBk=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3090 (0xc12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A86D0
Validity
Not Before: Mar 28 17:43:56 2025 GMT
Not After : Apr 4 17:43:56 2025 GMT
Subject: CN=67e6dfdc-65a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e9:b2:38:12:6a:e0:ca:de:82:bb:d8:8a:e0:
39:cf:bf:94:c0:55:96:ca:de:ab:ff:37:8f:87:ae:
f3:c4:f8:1b:d6:5a:d2:b0:9a:8d:f9:d5:c7:3a:87:
10:9e:b7:83:b3:b8:57:20:d0:6f:4d:c7:07:fb:87:
9b:eb:f6:a5:74:34:5c:db:8a:3b:37:b9:48:63:0a:
79:c6:d4:41:32:be:55:29:83:5e:3f:9e:80:ac:7e:
7d:ed:ab:9e:f3:c7:5f:2d:27:6c:fe:4f:61:7b:d8:
c7:22:00:d0:2e:2f:49:53:04:50:75:6a:a1:f4:22:
30:f8:f9:4d:1d:1e:43:05:1d:33:36:23:85:31:6a:
1f:15:7d:cb:0d:5d:7c:ec:38:3a:32:19:7c:9d:f2:
97:f1:37:4b:3a:8b:3d:d1:0c:6a:10:d4:ae:6e:50:
53:fa:9f:46:9d:c4:b6:be:a8:36:bb:88:2c:64:27:
4b:50:37:c4:97:cd:15:90:e4:db:da:b5:19:9e:10:
71:7a:35:37:5f:7d:51:65:89:5d:0a:ff:49:b2:c6:
fb:a4:dd:6e:0e:2a:8d:1a:41:f2:2e:a4:d3:e9:47:
3c:da:c5:60:52:1a:e2:34:3e:45:ff:ae:0b:51:53:
e1:83:61:2d:93:3c:05:c2:39:2f:47:fc:ea:4d:79:
25:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2A:15:22:BD:5A:47:33:DB:AC:DF:65:5F:B7:EF:30:5E:9E:7D:5B
X509v3 Authority Key Identifier:
keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:40:9e:cc:0f:55:ea:d6:e1:63:45:4c:80:42:41:8f:60:f7:
9c:09:69:ab:e7:2b:52:ca:91:b7:34:01:82:70:a7:4b:13:d2:
35:a6:0e:90:91:8a:3e:fd:6d:9c:8f:83:ba:d8:f3:f2:c6:aa:
cf:da:96:bd:3e:98:23:f7:4c:40:1d:21:43:9f:76:17:4f:ac:
c3:58:7f:5f:0a:15:a3:56:c7:45:a1:30:a8:34:fd:4e:9a:51:
4e:7e:65:a8:d3:88:5a:2d:69:17:43:63:84:7a:9c:d6:a3:57:
2e:9b:03:f6:ec:fe:64:91:65:40:ec:d3:40:53:25:77:65:60:
0a:dd:9e:bf:e0:cf:6a:59:a7:bc:93:78:8f:c4:61:75:7f:ae:
db:f1:0b:0f:85:49:6a:d7:08:3b:b5:80:d3:2e:bf:b7:07:b6:
1b:b3:f2:a2:01:e8:cb:62:90:c1:b2:1b:1e:55:9a:89:71:54:
d2:fa:86:59:12:52:34:8b:8f:ae:c5:dc:da:cd:7c:19:b6:1a:
ba:38:4d:c3:a3:47:4b:72:89:f3:b5:c7:2f:7b:40:04:43:bc:
73:81:4a:51:e6:b5:29:f6:4e:c9:f2:b9:d5:38:e5:7a:be:73:
00:d4:07:2d:0c:32:ce:77:fe:01:a6:d5:55:bf:fe:38:d8:38:
8f:9a:37:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:58:36 2025 by rpki-client