Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft
File: Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft (raw, json)
Hash identifier: PAphVospWEfn7jsZMR8VPU8cIUuSqggc8WpiyLOS8Uc=
Subject key identifier: A9:FF:36:DB:14:FA:AA:19:41:CC:F0:42:13:6D:9D:67:46:10:57:27
Authority key identifier: 66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E
Certificate issuer: /CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E
Certificate serial: 2420
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft
Manifest number: 2402
Signing time: Fri 28 Mar 2025 15:53:55 +0000
Manifest this update: Fri 28 Mar 2025 15:53:55 +0000
Manifest next update: Fri 04 Apr 2025 15:53:55 +0000
Files and hashes: 1: Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl (hash: z1JtmShn6igFMdcZpu6B6j4xbiOEdPbn9LSfwm4Mmko=)
2: 9A20324CDD6011EB9935406BC4F9AE02.roa (hash: crjIi9A4daWBIMavWgwdrvqfs6rboASaaFeiLlhaj3I=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9248 (0x2420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121B73
Validity
Not Before: Mar 28 15:53:55 2025 GMT
Not After : Apr 4 15:53:55 2025 GMT
Subject: CN=67e6c613-6459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:b4:fd:eb:df:a6:c0:5e:76:20:9d:11:02:
9e:53:3e:4e:cf:85:88:06:16:08:d0:44:dc:7d:4f:
0e:26:19:46:31:23:a7:19:65:27:09:ce:8f:f7:b9:
22:b4:fa:e0:19:88:96:d4:b2:16:6a:d1:ff:77:10:
c1:7f:ee:e2:50:c2:26:3f:cc:a5:e7:08:62:1d:7d:
0c:0e:50:69:95:3a:0c:aa:30:53:1e:72:b7:48:4d:
d2:6b:67:a0:3c:69:5b:32:f1:40:22:24:b6:72:6a:
08:59:df:27:c7:b8:40:07:2f:45:15:e4:72:c2:0c:
ef:52:43:a5:f1:3e:ac:e2:f8:45:d4:58:5e:d0:50:
3e:24:e5:c0:63:35:6c:a3:0e:f1:8b:71:37:ce:5a:
b4:a3:eb:3b:67:a2:a6:94:f5:19:0d:6a:40:a5:70:
27:b9:09:33:f8:21:51:08:03:97:28:8b:0b:5b:4c:
e8:57:ed:41:c4:8f:a8:c5:4f:76:31:4a:ea:e1:67:
1a:df:0f:33:07:b3:d7:20:2d:af:01:7c:9c:d7:7d:
50:0e:fb:e8:3e:74:91:1b:38:6a:49:57:df:76:13:
f9:f1:95:f3:8d:a7:a9:b8:66:b7:73:d4:1e:a8:d5:
ab:c1:50:fe:a2:19:6d:ef:36:cb:61:a1:d8:8b:fc:
41:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FF:36:DB:14:FA:AA:19:41:CC:F0:42:13:6D:9D:67:46:10:57:27
X509v3 Authority Key Identifier:
keyid:66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:65:8a:31:7c:e6:4c:c5:98:d0:fe:dd:fc:a6:0d:59:dd:bb:
6a:12:20:39:d2:31:c5:7c:d1:d4:d1:d4:57:7a:c4:8c:8a:13:
c3:11:77:f6:30:1a:d8:7e:7c:d8:c8:40:2a:c9:1f:84:c9:7d:
95:4b:27:20:a6:6b:46:2d:1f:5b:97:c8:97:b0:56:01:e3:f7:
8f:53:71:64:21:3d:91:12:4b:1a:02:3e:1b:99:15:fd:c7:ce:
55:3a:52:49:92:89:c1:25:9f:5e:48:f3:06:9d:99:1a:77:08:
38:ce:c8:95:80:b7:8e:1c:99:a6:19:11:e0:5e:77:12:04:0b:
5a:94:5b:b9:40:7d:2d:0a:75:37:e5:de:99:a8:b9:3b:d0:6f:
2e:a0:70:cc:eb:8a:a4:6a:10:78:7e:76:11:20:9c:c0:93:50:
b3:88:51:e5:7a:3d:23:9c:61:df:9f:31:65:41:00:19:25:db:
c5:28:72:e3:a3:1d:56:46:7d:1d:e1:1b:d1:e8:c0:e8:32:40:
40:36:40:b4:d7:c9:40:6a:cb:ec:46:a3:a6:ed:54:ec:1d:cd:
44:6b:29:77:63:70:84:ea:61:20:5f:fa:82:3a:bc:80:ad:a6:
19:26:3a:e4:bd:75:e0:e2:45:b2:dc:61:48:99:af:a0:4b:28:
bf:b1:6e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:40:14 2025 by rpki-client