Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
File: 4B1987D5160068092602529871C93EA320045A75.mft (raw, json)
Hash identifier: BVoNdfZO+WkKwwYxckGLALAMrMHK+nmNfybQUktvuic=
Subject key identifier: ED:1C:BA:E5:1F:C3:FC:B6:D2:3A:6E:A8:37:09:F3:48:15:EB:A2:62
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial: 1E0BEFC6FCC7166C0484C6C345D48FA8729E5F5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
Manifest number: 0302
Signing time: Fri 23 May 2025 02:43:05 +0000
Manifest this update: Fri 23 May 2025 02:38:05 +0000
Manifest next update: Sat 24 May 2025 04:25:05 +0000
Files and hashes: 1: 4B1987D5160068092602529871C93EA320045A75.crl (hash: gNtcN4hbdZO0IoY/5zdyVg3pdOiFLXmBPE2udZ6px48=)
2: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: SbkxL+7COZ6Tytm7k2uPgmc/+iWRhYRcOoIgx0LtkYU=)
3: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: IuJmEVUfqCPytnG8AEOkj/ZoGEMJgsuh1bHlpcX48s4=)
4: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: h2bSnnI9a+kGlKn3GxEShW8TmFpFzCWMgYRzWIvLc4c=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:0b:ef:c6:fc:c7:16:6c:04:84:c6:c3:45:d4:8f:a8:72:9e:5f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75
Validity
Not Before: May 23 02:38:05 2025 GMT
Not After : May 24 04:25:05 2025 GMT
Subject: CN=ED1CBAE51FC3FCB6D23A6EA83709F34815EBA262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a5:ce:cc:b0:d4:f3:6e:06:0c:7a:50:67:c4:
ca:69:ae:2e:82:17:79:f8:b9:d8:ed:91:5b:05:48:
e1:b1:26:4b:b4:83:a0:b7:99:c5:9e:da:fa:4f:66:
0a:67:f1:39:8b:85:67:77:20:6e:a2:9f:cc:5b:50:
56:17:55:b4:f4:52:b1:f0:88:78:78:ac:a9:69:34:
1b:f5:1a:e8:63:24:eb:19:3c:b2:7d:f7:9f:86:35:
a9:a9:df:dd:f7:e2:fe:9b:30:71:b6:a0:fb:40:dd:
a1:5b:b7:b1:f4:a8:ba:35:9c:eb:51:e7:a5:7a:68:
b1:be:c0:c6:11:ad:2b:ff:05:79:4e:9b:d0:e9:26:
0b:8d:12:d5:1c:63:8e:5c:c1:e4:e2:03:8d:d8:06:
92:f7:51:2a:46:d0:73:73:fc:11:c8:db:3a:90:07:
6b:2f:de:da:0d:5f:f2:98:2d:70:08:6f:2f:6e:f8:
35:f5:1e:91:98:40:1b:93:49:c5:98:78:fa:2d:a8:
b5:c5:c3:f4:9e:62:92:be:55:03:bb:92:d1:20:85:
7a:dc:67:d7:21:bf:94:bd:ad:30:25:e5:50:dc:68:
04:a5:c2:19:57:ca:1a:2c:10:05:10:5e:b7:88:aa:
37:85:c8:07:64:7a:97:db:f1:c1:ea:cc:ee:fc:b5:
b1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1C:BA:E5:1F:C3:FC:B6:D2:3A:6E:A8:37:09:F3:48:15:EB:A2:62
X509v3 Authority Key Identifier:
keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ee:55:f3:75:23:36:c1:0c:ba:53:71:19:9b:95:1d:88:14:
ce:47:67:e7:b0:3f:82:e6:e0:b7:a2:1e:0e:bc:0f:e2:d6:cb:
f4:b3:94:ce:8c:86:8d:08:09:28:dc:c1:8a:3d:8f:0a:40:6a:
fd:7f:83:41:65:00:ed:f1:a4:2d:b3:3e:04:8e:b7:73:86:46:
e1:bf:78:4a:16:d1:26:74:34:8b:bf:40:53:67:92:ee:86:03:
3c:c3:d4:d2:d7:b5:28:63:d2:7f:a3:c5:15:36:22:7c:07:e8:
3b:b7:38:fd:23:90:8f:b8:60:4b:a7:ea:51:a5:7c:c1:e2:bd:
40:10:3b:0c:ec:c6:23:8a:f8:c1:01:94:8b:e0:94:df:fa:8c:
03:90:ad:18:41:7c:f2:28:89:41:72:8a:76:ac:8e:1c:f9:92:
d9:09:f3:10:b7:51:c3:fe:59:1d:6d:2e:6b:88:88:a0:2f:cf:
24:7e:89:26:47:43:ea:06:12:fa:c1:49:a2:32:d7:71:24:1c:
61:f2:3f:2d:57:4f:90:c8:98:1f:5e:38:a5:c3:0c:5d:78:11:
1d:78:d4:70:8a:24:75:4a:1d:95:28:c1:ac:a8:2e:4c:2b:eb:
d5:33:7c:11:23:9c:04:e3:33:ff:cf:30:fe:93:a2:19:19:e0:
f3:6c:01:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:56:18 2025 by rpki-client