Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft
File: jX4wWDULuN_v_Od3C7yMhrdioeQ.mft (raw, json)
Hash identifier: l9mNDQKXKCYXo+zuriXOXnAIab3rBJ805TRQYGp1XIs=
Subject key identifier: C5:B1:88:70:E7:2E:D5:F6:31:81:98:C7:C6:B0:A6:A5:5C:8A:F5:A3
Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4
Certificate issuer: /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4
Certificate serial: 09F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft
Manifest number: 09DA
Signing time: Fri 28 Mar 2025 20:13:10 +0000
Manifest this update: Fri 28 Mar 2025 20:13:10 +0000
Manifest next update: Fri 04 Apr 2025 20:13:10 +0000
Files and hashes: 1: jX4wWDULuN_v_Od3C7yMhrdioeQ.crl (hash: +0bwXKcrfvG42/uDsnVIgHFb1385hEe5QPfPP5j4CHk=)
2: 1043B2347BBD11EA8356C986C4F9AE02.roa (hash: 5JEqGqZjOXkDQpngg62rkwfruwetrEFqTjvsf4P8Fxo=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2552 (0x9f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C51
Validity
Not Before: Mar 28 20:13:10 2025 GMT
Not After : Apr 4 20:13:10 2025 GMT
Subject: CN=67e702d6-a707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:37:ba:55:5a:c3:bc:22:e0:c3:98:cf:13:8b:
0c:2c:eb:29:bc:a1:c0:c6:60:05:9e:fc:98:28:a8:
97:61:ad:a2:1a:17:11:e5:6c:49:37:a5:d8:a2:85:
da:c2:de:e4:9e:fe:8e:a3:e1:6a:70:6b:79:80:1d:
b8:c2:ec:3a:5e:58:b2:ca:c8:c7:1c:bc:47:6b:b7:
35:dd:2c:63:cc:f3:3c:46:40:fd:36:3f:ec:c6:68:
58:e9:e9:9d:de:7c:46:b1:a8:8e:e1:9d:be:14:64:
b1:f4:dc:c3:25:86:bd:92:b7:42:76:18:87:de:7a:
82:7f:06:2c:2a:0d:2f:26:3a:38:92:40:6e:e2:8e:
59:05:e0:cd:c0:4c:4a:ff:ad:ef:c9:0f:e8:83:42:
c0:4a:a5:17:5b:ff:8c:a9:5d:8e:fd:d5:a9:07:77:
28:88:8f:11:63:f8:11:ba:8a:82:97:68:fe:41:4e:
42:d8:11:d5:38:53:00:5b:3f:70:0e:44:56:1d:00:
f4:98:58:f7:ad:3e:11:e2:94:43:04:18:d0:c8:cd:
73:82:54:16:44:10:c3:43:26:a6:a9:62:94:0e:ba:
3f:ec:d0:0a:ba:b0:ad:53:68:db:ba:1e:37:77:16:
20:c2:4e:aa:91:e3:16:0e:be:25:2d:38:dd:52:d9:
78:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B1:88:70:E7:2E:D5:F6:31:81:98:C7:C6:B0:A6:A5:5C:8A:F5:A3
X509v3 Authority Key Identifier:
keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:d6:40:5e:2d:30:5e:b9:f3:f3:2e:35:b2:17:23:fc:cd:91:
7c:28:5b:db:bc:ca:6f:12:50:f5:dd:bd:77:56:1d:74:67:ab:
ac:b7:12:6f:ad:04:d3:69:aa:07:73:f7:5d:f0:ae:dd:e5:f6:
1a:a7:bf:7d:3d:f9:f9:45:db:61:a1:1f:44:b7:15:07:21:4d:
42:2e:16:c2:bc:ee:ff:5e:d3:40:88:2c:e6:c8:86:8a:39:5e:
01:58:56:7c:1e:fe:83:63:ad:8e:cd:00:0c:c9:10:68:ad:65:
15:3b:94:ba:ed:84:13:df:84:87:4e:61:b3:ce:15:f0:da:43:
1a:4f:81:46:99:49:fe:cb:6c:97:60:73:02:65:b2:25:4f:f9:
e0:6f:43:6f:88:49:0d:e8:43:04:4e:1f:74:c8:7a:90:3d:33:
07:57:78:84:f6:91:0f:ba:a4:97:29:f8:95:b2:1e:d0:97:87:
e7:7c:a9:29:d1:91:db:21:a4:b6:02:9d:65:0f:16:19:c6:c4:
e4:d8:bc:74:8c:11:9e:b4:3a:2b:dd:03:cf:a6:0a:88:92:e2:
1a:dd:0f:4e:40:1e:b1:30:3e:77:71:61:1e:ca:9c:26:67:a6:
a0:b3:aa:85:97:8b:a2:2c:7d:d0:e8:f3:7a:5a:e4:53:8a:8b:
44:3b:45:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:30:04 2025 by rpki-client