Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
File: cL0eSV4lCyLieYKWlpeFotd9c38.mft (raw, json)
Hash identifier: ZikK7+I7jmN9HMNN6JZxc4JMaPDregefzoXjCE0JInc=
Subject key identifier: 83:34:E2:A4:ED:AE:BB:61:AC:DE:D3:33:EF:9D:B5:3C:59:3B:E0:B5
Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
Certificate issuer: /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Certificate serial: 0725
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
Manifest number: 0716
Signing time: Fri 28 Mar 2025 22:08:32 +0000
Manifest this update: Fri 28 Mar 2025 22:08:32 +0000
Manifest next update: Fri 04 Apr 2025 22:08:32 +0000
Files and hashes: 1: cL0eSV4lCyLieYKWlpeFotd9c38.crl (hash: 3FjyXAi0+WyHizNJx9D74A45ffRs8qEWVVF2JylttRs=)
2: AEFB1B262FB111EB89A04D37C4F9AE02.roa (hash: Wg8lhii6fS+ISW5JHYHpOa6pzoQlnpj7gMJiQaNStNA=)
3: D992CDCE2FBC11EB8E017F5CC4F9AE02.roa (hash: qKRjykDno1daJfQQjFQDgdcngx+c1WC/QlLs58bkJD4=)
4: D8EA255C2FBC11EB8E017F5CC4F9AE02.roa (hash: BkTcuyEezWUWEkhN6v2tftRUBORfyEfzklVup25IVEk=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1829 (0x725)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE1C4
Validity
Not Before: Mar 28 22:08:32 2025 GMT
Not After : Apr 4 22:08:32 2025 GMT
Subject: CN=67e71de0-62b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:94:cf:77:b7:d8:c4:de:4c:23:05:04:c6:
ce:7b:ae:2d:2b:c6:e7:74:17:41:2b:d5:f2:fa:e6:
18:32:54:92:80:62:08:e0:5f:bc:9c:77:5a:3d:8a:
da:a9:57:e4:b6:e0:72:7a:02:60:68:86:ea:e8:c7:
a3:1b:b6:e9:e5:df:9a:b2:bc:34:a6:e4:39:6f:2c:
09:7a:6c:b1:14:2f:13:1f:ba:64:8b:d2:e4:95:45:
d3:13:0f:fa:8f:12:f1:19:c4:c4:dd:cd:e1:23:d0:
ad:44:91:9c:d8:fa:35:ad:9a:18:67:c8:d4:b0:63:
c4:80:9e:f7:d3:76:df:eb:b4:21:6f:06:a2:6b:98:
ce:ba:b5:10:1f:13:46:9d:32:0e:52:70:2a:38:b7:
da:f8:e8:af:b8:d4:3c:ea:fc:f4:48:0a:8b:23:8b:
0a:42:d9:4e:0b:93:a7:fd:64:0f:c9:85:b4:1e:3c:
05:20:ac:1d:65:54:2d:84:fa:39:0a:a7:6f:6b:e7:
9e:a0:87:05:6f:0e:06:bc:c3:2b:86:8d:fb:00:1e:
98:9b:98:3c:13:ac:09:8c:01:42:73:9f:13:b7:02:
aa:58:af:31:7b:15:30:c6:69:eb:77:40:3f:9d:9a:
5b:f8:6b:8c:61:31:39:6b:a4:2e:16:0f:df:69:09:
31:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:34:E2:A4:ED:AE:BB:61:AC:DE:D3:33:EF:9D:B5:3C:59:3B:E0:B5
X509v3 Authority Key Identifier:
keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a0:ff:9d:3a:7e:f5:a5:0d:9c:59:1b:f2:b0:af:92:ae:03:
b8:1b:b7:28:5a:ce:06:b9:65:1b:c8:cb:d3:f0:ed:68:5e:0e:
82:fc:ab:bb:6d:13:ba:56:90:4b:f6:d9:7f:c6:00:49:14:f9:
88:0f:da:d7:4f:55:56:26:20:c8:13:db:00:59:f8:c1:92:64:
ef:05:44:31:c7:2f:21:1a:e1:3f:47:10:3e:c3:9a:af:b1:9b:
a3:23:13:01:ca:53:aa:95:4a:31:f5:f9:f4:cc:96:41:f0:2d:
3f:eb:65:d9:2c:5e:42:94:8c:ac:4f:fc:1b:dc:22:66:26:45:
08:52:6a:c1:6a:44:df:d0:e6:ad:07:43:aa:c0:99:12:4d:0f:
62:4f:f2:24:d5:82:42:54:53:f3:9e:76:ca:8d:d4:b6:87:33:
06:be:f5:6b:03:86:fd:4c:d6:c3:b4:f6:b3:2e:1e:54:7c:a3:
35:b8:be:94:9d:3c:15:50:ba:f1:ac:77:5d:71:b9:fd:2c:00:
05:ce:84:c4:ac:f7:9b:33:cc:f7:fb:c9:02:88:74:38:2d:3c:
d5:ff:3f:3e:b1:74:64:60:45:c2:f8:1c:97:d6:6d:6d:c8:ff:
c3:f9:e2:4f:95:46:35:0a:61:21:fa:3d:c6:73:fd:a7:c2:15:
1f:46:4f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:53 2025 by rpki-client