Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
File: i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft (raw, json)
Hash identifier: l6Ue9b8ntiZHKUsnqM2WFXd7Pd0zU8IAu7VIRE57hIM=
Subject key identifier: FC:8E:B5:30:18:1C:89:B3:CD:EB:3F:4D:09:B7:EA:6B:95:1C:2A:D6
Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40
Certificate issuer: /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
Certificate serial: 0C47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
Manifest number: 0C1E
Signing time: Fri 28 Mar 2025 18:51:31 +0000
Manifest this update: Fri 28 Mar 2025 18:51:31 +0000
Manifest next update: Fri 04 Apr 2025 18:51:31 +0000
Files and hashes: 1: i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl (hash: 39xiCRdJJREopVwP1ssPmdA/sPMYbdZ9j1ZngnUpB8A=)
2: 50AA91CAD70311EFB9BBC86DC4F9AE02.roa (hash: gdYeSr8OVfEXIHB8AE/R/OGyXt1CPyW6FryfjJbmXTw=)
3: 6309B36EEC3911EFB3A92E86C4F9AE02.roa (hash: mJvqce7dr7148HNrDiByF+54zvxocevFsAIl/C28B9c=)
4: 8577B1EAD1BF11ECA166E56FC4F9AE02.roa (hash: UKp0al5lwDctbpMZ4w91PmU9xh+b2uAj1qbyNOwUx6Q=)
5: FD1CA67AAD5511EDBA936539C4F9AE02.roa (hash: xNrMx2ykeoPHlp4OwjxlD2woswWyefyqLirhxUQ7v60=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3143 (0xc47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C21E
Validity
Not Before: Mar 28 18:51:31 2025 GMT
Not After : Apr 4 18:51:31 2025 GMT
Subject: CN=67e6efb3-3106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:19:ac:67:f5:26:66:1d:4f:0c:41:b9:39:
52:74:41:58:e1:b4:c2:54:07:8c:7b:9d:d6:81:2b:
1d:9d:7a:a1:c8:44:86:e7:4f:99:69:a7:35:9a:f1:
b5:fb:c6:90:48:27:52:63:bb:9d:b6:28:6e:73:85:
cf:61:d8:d0:f3:42:37:7a:30:56:54:d8:77:04:42:
cd:74:6a:4e:9b:04:0b:ac:9a:6e:b4:25:fb:af:b7:
78:72:7e:56:ce:d8:71:ef:ff:fb:13:11:37:9e:b2:
ca:cc:af:4c:a2:e3:e5:10:18:1e:10:8c:a6:92:13:
41:0a:95:bf:49:6a:7a:5f:76:31:27:0d:d4:1d:f3:
65:6f:e3:d5:6e:ce:36:cc:39:e9:df:d5:d0:90:e2:
c6:33:ff:f7:e6:98:ff:a8:42:24:f9:8e:2a:46:1b:
68:e1:5f:71:06:fa:a3:fd:11:61:a8:8e:02:6b:5b:
fb:45:a2:24:04:e0:66:e7:10:96:3a:37:42:8f:2a:
4a:77:6d:9b:41:e0:af:8c:23:2a:34:54:c6:ca:06:
05:3e:46:c6:1b:b5:ac:47:35:4d:b5:a8:a3:12:38:
57:db:3c:93:41:41:cb:48:40:27:a1:50:05:25:fc:
e2:5d:af:af:93:7f:ea:13:d8:cd:81:cb:cb:2a:6a:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8E:B5:30:18:1C:89:B3:CD:EB:3F:4D:09:B7:EA:6B:95:1C:2A:D6
X509v3 Authority Key Identifier:
keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e3:56:c6:b3:91:84:3e:81:9c:aa:32:06:e6:30:29:a5:d2:
02:a2:e5:d1:1c:bc:7e:48:ca:10:54:7a:f1:30:d4:cc:5c:e3:
05:1f:68:00:ee:bc:29:e2:43:df:f5:13:8b:b9:4f:da:79:5b:
03:e6:53:81:0a:8d:b2:10:b0:62:a3:51:b8:1d:00:8f:a9:01:
84:51:39:8c:90:fb:1c:c4:ef:86:a8:6a:d8:62:4d:ae:28:a5:
f9:dc:19:3d:88:f1:ca:3e:53:fe:ac:86:8b:d0:79:a6:12:ee:
0f:b5:b1:e1:b0:1c:40:ad:da:80:60:1d:4d:4c:02:1d:1a:75:
1a:e2:e1:93:96:e8:a5:66:fe:b5:dd:ab:85:10:bf:ca:92:31:
e1:a6:3a:3e:94:07:37:2f:c5:43:a2:ca:4b:d3:4d:d5:d1:b5:
ca:4b:4f:e6:7a:a7:d8:4a:2f:bc:e2:a4:48:4f:85:24:70:47:
27:4a:34:3e:40:6d:42:93:ad:22:8a:c3:2e:66:b1:30:12:3b:
e7:dc:46:b1:fe:41:3d:59:a8:9c:0e:b6:b2:96:0e:d8:0f:0b:
25:38:cc:97:0c:bc:0f:ca:74:37:c6:37:cc:f6:95:b2:a1:e7:
51:0e:28:90:25:92:ac:7f:39:49:65:5f:17:bb:f7:93:de:67:
bc:1f:d5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:14:57 2025 by rpki-client