Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft
File: BEC716379E148BA880231B055E3B034159DB8697.mft (raw, json)
Hash identifier: Miz5k54dX4rYqX1c4ylIF/5Q+ZUqm3ZcTp6aCZv4mY0=
Subject key identifier: 03:C5:DE:C9:74:7F:79:1A:95:33:86:FC:10:47:11:8D:7F:71:EB:60
Authority key identifier: BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97
Certificate issuer: /CN=A917447B0000/serialNumber=BEC716379E148BA880231B055E3B034159DB8697
Certificate serial: 711E13B24F49B3EDEE34996876A4FD158267696B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft
Manifest number: 44
Signing time: Tue 02 Sep 2025 16:16:15 +0000
Manifest this update: Tue 02 Sep 2025 16:11:15 +0000
Manifest next update: Wed 03 Sep 2025 17:24:15 +0000
Files and hashes: 1: BEC716379E148BA880231B055E3B034159DB8697.crl (hash: QfZ3yxn5AGBhouxR7N95gnmgw2/jA7WaNeMo4SWxcGA=)
2: 3136302e3138372e3132342e302f32332d3234203d3e20313533333436.roa (hash: lt8UIG15p3kUFo1J40t+NeYpM4QkHXYfBc0bEGxMbK0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:1e:13:b2:4f:49:b3:ed:ee:34:99:68:76:a4:fd:15:82:67:69:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917447B0000, serialNumber=BEC716379E148BA880231B055E3B034159DB8697
Validity
Not Before: Sep 2 16:11:15 2025 GMT
Not After : Sep 3 17:24:15 2025 GMT
Subject: CN=03C5DEC9747F791A953386FC1047118D7F71EB60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:a7:44:b7:01:f0:dc:e7:dd:c5:1a:cb:23:
b6:99:8c:69:c7:36:20:6e:fe:dc:9c:0b:7a:b1:e7:
2f:15:c4:af:3d:05:5a:83:b9:80:ae:68:9e:0c:9e:
bc:03:bf:9a:e5:0d:12:27:85:ea:b3:01:dc:c7:13:
b8:61:9e:f7:d1:44:8c:7d:5b:74:8b:10:22:1a:8a:
51:bb:32:99:52:83:2f:82:73:32:36:6b:bf:47:dd:
81:31:c3:20:c1:2c:fa:2b:19:af:eb:ba:71:7e:72:
95:2c:bb:2d:c4:09:d8:d3:b1:7b:ee:33:e0:88:73:
9e:dd:53:3a:03:0d:f6:21:e8:49:0a:67:71:f3:d1:
40:df:f6:98:74:90:e7:6a:f3:07:94:60:c2:71:c5:
22:a0:b6:ee:32:13:0a:e7:fe:d4:d3:2f:b5:5e:66:
b6:4c:0c:17:20:21:eb:01:e9:0d:34:df:fd:f9:8d:
b1:75:86:0e:cd:4e:83:3f:39:76:42:fe:fc:14:82:
64:1a:83:9f:34:90:f0:5d:be:b4:9f:a1:0d:33:7b:
00:9d:d3:68:37:86:5d:01:83:61:35:c3:6c:80:c7:
4e:9e:12:94:0d:7c:ee:37:77:6e:da:7d:5b:8d:b1:
2e:1d:09:9b:82:c0:a8:d6:50:17:16:12:56:d4:fc:
9f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C5:DE:C9:74:7F:79:1A:95:33:86:FC:10:47:11:8D:7F:71:EB:60
X509v3 Authority Key Identifier:
keyid:BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:44:0c:58:76:33:2a:14:de:76:b1:1a:e9:56:a8:f6:d8:90:
84:28:29:e3:b0:bc:dd:81:9b:c6:61:98:34:1c:8d:bc:16:13:
95:41:10:f4:06:69:1d:af:32:1d:b6:87:ae:4f:56:2e:ca:9b:
29:4c:0c:df:64:03:29:9c:a6:c9:17:f3:ab:b8:f6:31:83:ce:
7f:88:f5:c2:85:57:6c:8b:c2:fa:d8:01:d6:4f:c7:3c:f0:c4:
37:5d:59:73:3d:f9:70:95:88:2b:ed:e4:da:6a:27:be:b1:4e:
21:bb:65:c8:7c:55:b2:11:a8:17:2f:2b:14:8b:e2:24:57:74:
9c:97:a1:e0:fb:7f:c4:5b:ed:42:48:68:b3:d0:54:58:76:e2:
3c:4e:f2:3a:ed:dd:cb:dd:13:36:f7:d3:cf:b8:90:2a:c5:b2:
f2:3c:43:ae:2a:c4:7b:4e:9c:ad:58:a4:e4:3b:30:b2:dc:d9:
d0:51:46:d7:d8:48:12:39:f1:f1:0a:6c:3a:e2:0a:55:1d:cd:
c8:e8:9d:1b:9f:37:e4:81:e7:1a:3c:bf:af:32:0c:51:93:36:
cf:0a:77:47:0b:5b:04:20:2f:34:0e:89:13:a6:08:9f:88:b5:
3f:b8:14:1b:5d:e7:02:79:68:94:23:9b:e8:90:80:b2:03:b1:
6e:aa:e6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 21:04:29 2025 by rpki-client