Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
File: yuLPsaeXStawJFrjTksNztggmGc.mft (raw, json)
Hash identifier: yzeGCepbW+tXa3uvEM9ZFHVIaomggZWoN0FmvqmC1A4=
Subject key identifier: 3F:C4:71:5E:B9:53:61:5F:06:9C:0A:2C:4F:E2:0F:97:CA:EC:15:A6
Authority key identifier: CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67
Certificate issuer: /CN=A9120968/serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867
Certificate serial: 3466
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
Manifest number: 3466
Signing time: Fri 28 Mar 2025 15:01:16 +0000
Manifest this update: Fri 28 Mar 2025 15:01:15 +0000
Manifest next update: Fri 04 Apr 2025 15:01:15 +0000
Files and hashes: 1: yuLPsaeXStawJFrjTksNztggmGc.crl (hash: Zupdg8TpfmQLRBfOURVIcEhos/keemXZTkCBnjlwpdg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13414 (0x3466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120968
Validity
Not Before: Mar 28 15:01:15 2025 GMT
Not After : Apr 4 15:01:15 2025 GMT
Subject: CN=67e6b9bc-b8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8a:99:5a:24:21:ce:15:a7:dc:5a:b5:74:8b:
48:34:f0:cd:8d:53:ab:e4:24:97:2d:02:94:10:d5:
a8:7e:c0:4a:82:7c:88:2a:bb:f0:25:08:f2:66:ba:
f6:cf:91:48:5e:05:5e:cb:dd:7b:91:f9:19:15:d8:
9f:88:58:fb:76:3d:d6:91:18:58:0a:2c:8f:f4:72:
a1:23:9c:f2:e8:27:fe:5f:ea:56:c2:b7:c1:d8:98:
45:60:7b:3f:9c:04:b0:5a:19:c9:dc:a6:3e:21:0b:
2d:a3:03:82:b0:c3:8b:6a:f0:37:a7:b7:c2:8a:b8:
9a:4a:83:4f:19:c2:28:d9:9b:0d:69:23:42:e5:e5:
b7:76:e6:05:77:e5:0d:d6:bc:78:e6:c4:c2:f0:bf:
fd:a4:e9:9a:15:8b:d7:a3:02:00:38:8c:b6:8b:7a:
b6:1b:b4:6f:f6:42:68:5c:a9:55:94:68:9c:12:31:
36:ad:d3:e4:33:f3:0f:33:f8:a1:e4:19:06:21:d8:
6c:5a:d1:b3:ad:ac:5f:1b:a7:e9:6f:f3:8b:e5:25:
5a:ac:2b:58:77:fb:c9:5e:9c:7f:4d:d6:0c:3c:4f:
3a:4c:e5:ed:01:37:e5:ef:d4:c8:65:e2:62:a3:e8:
74:3d:64:42:1e:be:c4:0f:e8:97:32:72:47:5e:b2:
30:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C4:71:5E:B9:53:61:5F:06:9C:0A:2C:4F:E2:0F:97:CA:EC:15:A6
X509v3 Authority Key Identifier:
keyid:CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d1:44:0c:86:49:c6:62:81:b7:ca:fa:ff:a7:bc:66:c9:fa:
73:16:2b:90:10:4b:1f:5f:89:8a:a6:df:82:eb:77:d7:3e:35:
03:72:5b:77:f2:aa:ef:48:3b:19:9a:26:a8:dc:00:aa:ac:b9:
5a:c3:5a:8f:c2:72:11:77:47:47:cf:10:fe:0a:15:75:d5:bb:
c4:ad:f7:74:ca:40:90:3f:73:58:56:48:34:be:8f:23:b4:82:
c3:2a:23:56:72:5b:a5:85:dd:e7:e8:52:58:07:54:e6:31:43:
44:b7:68:0e:ba:27:05:92:67:82:5d:6e:96:63:ef:94:0e:bb:
94:a0:9b:6a:3a:d0:f1:44:da:ef:01:7a:32:23:d5:59:60:f9:
37:4c:73:52:f4:6e:f6:d4:90:ec:b2:4c:41:be:e7:9a:91:1c:
10:c5:ed:8d:7e:ce:77:ab:4b:5d:05:71:33:80:5e:cc:53:c8:
8b:97:bd:19:e1:99:9e:8f:e8:bf:e6:bf:7b:4d:a8:5c:7c:ef:
b8:5c:34:97:f6:84:8b:7d:99:14:23:7c:93:cc:22:7b:2b:e6:
46:ad:57:47:a6:3e:88:26:12:0e:41:f7:66:58:79:84:cc:d1:
eb:36:48:c3:92:b7:6a:11:d0:68:fe:a9:3a:65:c5:00:3f:e0:
46:14:1a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:29 2025 by rpki-client