Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/0/BD435E3ED6FEEC26F879A0542F609A272CC71307.mft
File: BD435E3ED6FEEC26F879A0542F609A272CC71307.mft (raw, json)
Hash identifier: B0ieZvPBfIfgGXLUfbLuVUK5QlOsssR0Sq7OvIvjDBA=
Subject key identifier: A2:54:7E:9A:38:46:93:DB:76:23:57:59:E0:B9:1E:FE:6F:2B:AD:26
Authority key identifier: BD:43:5E:3E:D6:FE:EC:26:F8:79:A0:54:2F:60:9A:27:2C:C7:13:07
Certificate issuer: /CN=A917447B0000/serialNumber=BD435E3ED6FEEC26F879A0542F609A272CC71307
Certificate serial: 4FC584480060F9A2176D3335E8D073B3D2DFC2F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vUNePtb-7Cb4eaBUL2CaJyzHEwc.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BD435E3ED6FEEC26F879A0542F609A272CC71307.mft
Manifest number: 0171
Signing time: Mon 16 Jun 2025 06:34:24 +0000
Manifest this update: Mon 16 Jun 2025 06:29:24 +0000
Manifest next update: Tue 17 Jun 2025 07:55:24 +0000
Files and hashes: 1: 3136302e3138372e3132342e302f32332d3234203d3e20313533333436.roa (hash: 6Sq9SvcA7Ko4uHqBJaPg4mhC8hCWFMTiL0m1v1oh8PE=)
2: BD435E3ED6FEEC26F879A0542F609A272CC71307.crl (hash: QsubMAdO6gcz6q1vKheS5YJrF4DTf4xZgvr2HcBy5/k=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:c5:84:48:00:60:f9:a2:17:6d:33:35:e8:d0:73:b3:d2:df:c2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917447B0000, serialNumber=BD435E3ED6FEEC26F879A0542F609A272CC71307
Validity
Not Before: Jun 16 06:29:24 2025 GMT
Not After : Jun 17 07:55:24 2025 GMT
Subject: CN=A2547E9A384693DB76235759E0B91EFE6F2BAD26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:f8:6b:7f:8b:19:8f:49:a4:36:0b:1d:91:
9c:f0:8b:3c:5e:96:61:a9:3c:20:6b:95:eb:b6:ed:
46:20:30:45:57:e8:a1:c4:09:d9:32:f1:69:4c:2f:
c8:38:ad:49:03:e2:22:b1:88:da:ae:6e:ce:68:4d:
12:a0:0b:ab:97:3d:dc:60:75:f6:a9:e9:58:bc:38:
8e:8d:a0:de:ea:7c:4a:24:10:72:f4:1e:f3:53:36:
5c:fc:38:fd:96:f6:80:60:2d:7c:54:3e:fe:e2:0d:
42:f9:43:a4:e1:29:94:7c:a3:31:f4:c7:8b:6f:aa:
26:15:44:29:41:7a:77:f5:44:38:86:d0:a4:6d:ac:
53:c3:2c:10:08:98:3d:4d:7f:6a:c3:c6:32:43:21:
cd:e3:e5:70:b8:c4:9c:f5:54:f7:70:e5:d8:0e:c6:
35:b1:fb:0e:12:98:cd:2a:c1:7c:73:5f:03:0a:5c:
2b:2a:78:f5:1a:eb:63:fb:64:dd:f2:d2:81:de:21:
45:8b:d9:94:02:8a:1b:cf:27:cb:fa:30:00:eb:4d:
06:f6:f8:36:68:05:28:65:89:57:84:c1:ce:f8:aa:
ed:34:57:9e:a7:94:55:68:aa:e2:73:19:9f:14:58:
5d:eb:78:b6:64:7a:d5:b2:18:dd:6c:de:0b:de:44:
f2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:54:7E:9A:38:46:93:DB:76:23:57:59:E0:B9:1E:FE:6F:2B:AD:26
X509v3 Authority Key Identifier:
keyid:BD:43:5E:3E:D6:FE:EC:26:F8:79:A0:54:2F:60:9A:27:2C:C7:13:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BD435E3ED6FEEC26F879A0542F609A272CC71307.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vUNePtb-7Cb4eaBUL2CaJyzHEwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BD435E3ED6FEEC26F879A0542F609A272CC71307.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:36:c9:00:e3:38:36:b3:16:19:a7:1b:2c:5d:6a:a6:f8:c3:
14:69:d1:45:70:fb:68:0e:ec:d7:c5:43:ae:38:79:32:a3:5e:
ac:37:60:43:2e:8e:3d:a8:9e:cb:b0:63:5e:d5:d5:73:9b:01:
0d:b5:de:57:3c:f5:27:f7:05:da:62:e1:28:7a:e8:c8:1a:43:
32:c5:02:39:d6:b8:5a:6d:c9:6c:aa:20:3f:4c:28:80:47:d8:
3b:ca:9d:0a:42:e0:8e:a8:7f:fe:14:39:09:ef:e0:cb:fe:1f:
e2:78:2d:0e:a4:2a:a1:7b:06:26:72:cc:41:05:6a:dc:82:71:
df:4d:43:6b:c5:89:33:b7:7e:f6:70:39:ed:c4:8c:8f:e4:75:
86:6a:00:3b:cd:dd:f2:7f:c5:c7:a1:76:f2:4d:94:be:b5:2b:
cc:13:0d:9b:61:e2:71:34:6e:ec:d8:74:05:5e:d6:c3:66:af:
88:fd:79:a7:67:21:4b:dd:ab:2f:11:7d:8a:b1:e5:dc:b6:0f:
12:0d:be:62:bb:fd:2b:40:03:2d:c8:38:64:18:52:9c:7c:8f:
6f:0b:d8:73:47:15:c0:bf:f0:3a:49:01:83:a4:bc:1f:b4:c0:
f6:33:e9:55:fb:85:ea:0e:a0:ac:4f:2c:80:5e:db:ff:77:79:
f4:9c:fa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:07:00 2025 by rpki-client