Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
File: hseUaUaypXsFbwKyeTQNMMLOSbQ.mft (raw, json)
Hash identifier: d6pNTxyuUZ2dj9VsOM0QMA6Uu9uyBLLlynfFf5izkWM=
Subject key identifier: 62:5B:33:D1:AD:80:06:0C:7E:52:E2:CB:91:75:E2:F2:8F:54:BF:DE
Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Certificate serial: 34D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
Manifest number: 34B5
Signing time: Fri 28 Mar 2025 14:23:17 +0000
Manifest this update: Fri 28 Mar 2025 14:23:16 +0000
Manifest next update: Fri 04 Apr 2025 14:23:16 +0000
Files and hashes: 1: hseUaUaypXsFbwKyeTQNMMLOSbQ.crl (hash: PA42os1f8vyLLEqTATyR+owG0BfyS8Pbffy9LPVoaNc=)
2: D750ADC20ACF11F0B4EBA55FC4F9AE02.roa (hash: pkmjk5YpgQEzOOXW1rqsSotkyEzABm2WDg1lbccKOvE=)
3: AF6AA9ECFF6011ED90C62C26C4F9AE02.roa (hash: WN63r0LYc8OT8onwa3D/94S7/WYcequXWARWDYr4XRc=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13529 (0x34d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120B99
Validity
Not Before: Mar 28 14:23:16 2025 GMT
Not After : Apr 4 14:23:16 2025 GMT
Subject: CN=67e6b0d5-dbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0a:a6:c3:72:48:63:b9:93:a5:0e:70:68:7d:
df:19:3c:7b:18:84:41:ef:e2:81:50:1a:4e:7f:68:
cb:11:83:36:20:cd:2e:9d:f5:22:c2:9d:ae:f3:62:
d9:50:4e:38:4b:3e:91:a5:e1:11:a7:20:57:45:9a:
40:14:d2:33:44:44:cf:ae:ee:ae:15:e6:5f:81:79:
ad:82:93:9c:92:03:e4:a2:32:0e:61:dc:38:77:3c:
74:f6:b1:4b:3c:c7:88:0c:20:4c:5b:1a:c7:95:f1:
f7:0a:cc:5f:2a:91:71:0c:1c:59:92:26:0a:35:0f:
ef:49:93:01:11:e4:52:9f:34:13:90:2d:12:b3:57:
81:50:c0:06:93:5b:b4:7c:11:56:a5:62:f1:19:fc:
f3:c7:1f:0a:a3:ae:6b:58:86:21:a8:9e:a5:a8:db:
da:0a:eb:42:8c:a1:fe:17:2a:7e:1b:2f:f6:56:9d:
86:cb:3c:20:d6:03:07:12:2b:80:9a:20:17:53:e7:
ef:97:18:f6:2e:41:31:ec:00:85:95:a9:f8:8c:f6:
80:88:28:9e:3c:f8:70:a3:36:f4:16:c3:53:d5:89:
e2:10:8f:00:0e:62:ef:6c:39:fb:cf:0d:e9:02:d8:
28:12:93:90:cf:97:5d:05:54:35:71:4e:36:11:4b:
5f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5B:33:D1:AD:80:06:0C:7E:52:E2:CB:91:75:E2:F2:8F:54:BF:DE
X509v3 Authority Key Identifier:
keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6f:24:aa:6a:f1:c0:72:ba:df:7b:27:45:c2:c0:6e:2a:21:
b6:3f:4a:46:db:f1:78:4f:de:0d:e0:3f:1c:89:6a:93:b3:87:
8e:eb:77:48:9e:81:17:47:b1:27:e5:e8:56:f0:0f:31:23:1c:
9d:42:22:53:ec:2b:85:72:eb:7a:c1:fd:bd:6c:e1:e6:53:9a:
e7:b5:2b:f6:15:32:c7:e5:bd:24:62:d5:bf:37:bd:07:e2:b9:
10:fa:25:d8:45:3b:19:f5:14:d1:1d:03:46:a2:01:ff:90:33:
01:b1:4a:27:01:3b:a7:f4:9c:a4:85:46:bf:81:f3:33:06:89:
48:5d:fd:0e:78:14:50:5e:ea:85:e6:15:00:50:87:c8:f6:1f:
ea:4a:35:07:a0:f7:b7:5b:62:92:9e:86:a1:d3:67:1b:be:87:
c9:91:46:c5:ee:07:e1:3e:c9:97:74:0b:8e:35:4f:e1:ab:9d:
d2:c0:b7:59:c5:34:30:d6:13:2e:58:b6:db:d3:7c:ca:19:c2:
30:46:5f:4d:d5:bd:8d:df:03:03:61:32:ca:7f:98:a0:38:17:
9a:a3:3b:00:07:95:6a:57:bc:be:db:db:c1:3d:ca:f7:28:a1:
e5:d6:94:4a:c1:2d:69:2c:69:5c:e4:3d:3a:2c:75:23:c2:8d:
b1:b1:e1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:57 2025 by rpki-client