Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft
File: vNvXHXuijevFk59cynZuyp91YxA.mft (raw, json)
Hash identifier: 3/dRbW6F0mWW7KSQjmwL8/wTKAyEmKZy4S99YriHGvA=
Subject key identifier: 20:83:59:29:2E:D3:8A:1D:4F:04:6B:44:AE:2C:E3:C1:EE:86:0B:77
Authority key identifier: BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10
Certificate issuer: /CN=A9126285/serialNumber=BCDBD71D7BA28DEBC5939F5CCA766ECA9F756310
Certificate serial: 2716
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft
Manifest number: 26FF
Signing time: Fri 28 Mar 2025 15:45:18 +0000
Manifest this update: Fri 28 Mar 2025 15:45:18 +0000
Manifest next update: Fri 04 Apr 2025 15:45:18 +0000
Files and hashes: 1: vNvXHXuijevFk59cynZuyp91YxA.crl (hash: Y/bz6f0fVLyXUzv3oPJs7P3Pwijfem1qFBwE4FmJHN0=)
2: 962B0D98B14111E5A3B46B15C4F9AE02.roa (hash: 8T6+GpYGKPvpCT1aXj07WluTUhSqQG41Ny31YLC+lak=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10006 (0x2716)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126285
Validity
Not Before: Mar 28 15:45:18 2025 GMT
Not After : Apr 4 15:45:18 2025 GMT
Subject: CN=67e6c40e-a74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:72:b6:5b:f9:86:72:85:ab:8b:c7:b0:6c:
03:88:63:ff:a2:dd:71:f1:44:76:1e:3f:0d:08:ea:
73:c4:a3:4d:d1:20:f5:a7:a2:d4:5d:f4:de:22:c3:
07:60:89:3a:6d:d8:8a:c2:38:df:75:2f:e1:56:4c:
48:97:f9:55:05:f9:72:f8:a6:ad:ee:1d:c5:82:da:
e9:08:34:3f:0b:81:67:d6:69:8e:93:6e:ce:15:5e:
f6:8f:c4:77:c4:19:65:fa:21:6b:af:67:8d:7d:5a:
28:85:fe:2d:61:f2:28:e3:73:33:7f:29:0b:7a:93:
be:10:4b:1f:42:f9:07:1e:7c:85:2a:d9:22:30:85:
82:70:a8:10:43:5c:8c:bc:92:0c:8a:90:58:2a:c1:
25:3b:a3:29:fe:ea:05:0a:c6:d5:3b:5a:28:6f:d5:
a3:d8:8b:81:75:a4:31:65:63:b6:89:74:d0:ac:fd:
f3:63:34:8c:74:4e:c9:d5:1d:3a:4a:75:26:1a:61:
4b:5a:27:4e:32:e0:99:85:00:e6:9b:30:04:53:23:
e0:b1:fb:f0:1c:08:18:21:53:c2:b7:f4:34:c1:ff:
33:a4:23:5c:15:b0:d9:1b:06:61:08:c6:ed:01:c5:
a5:b7:12:77:c8:f8:5e:2d:05:b0:4c:b7:08:6f:14:
9f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:83:59:29:2E:D3:8A:1D:4F:04:6B:44:AE:2C:E3:C1:EE:86:0B:77
X509v3 Authority Key Identifier:
keyid:BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:5d:0e:da:5f:01:8c:41:32:90:26:d7:a9:3f:b5:7f:f7:a0:
30:63:fa:14:a3:00:2c:20:e3:27:2a:bb:c2:c6:4c:07:2b:b1:
64:20:21:57:e7:4a:8c:48:9e:9c:d2:10:bf:7d:73:fc:2f:3d:
50:e4:1f:8e:75:cf:58:44:75:83:1e:67:1f:d3:cc:c2:b4:f6:
84:c7:c9:9b:02:09:3a:5d:28:ea:de:fc:57:62:4a:9a:5a:be:
2b:d0:70:24:87:47:d6:27:4b:00:be:35:4e:0a:75:04:87:1b:
2f:4c:05:b2:8f:09:14:6a:ad:60:2b:4c:2e:3a:08:24:b8:fb:
48:94:70:a8:bd:36:23:06:67:7b:7d:32:63:39:1e:12:33:bd:
8a:b0:e7:ed:c5:fb:b0:c8:0d:8a:0d:0f:49:88:aa:86:aa:e9:
7c:30:62:41:e5:37:b1:7b:a7:16:a5:c1:62:44:ec:bf:f2:1d:
ed:9b:bf:85:7d:43:c0:f9:28:64:af:40:0e:bb:39:bb:9a:d7:
fc:35:74:17:2e:03:37:1a:65:62:db:1b:db:cb:a8:de:0f:d6:
37:59:65:c4:4a:3c:8e:37:d5:12:90:f5:a5:f0:ea:7a:12:4a:
3a:4b:84:19:7f:8a:fe:ca:9d:4f:1a:6e:27:c5:b4:ab:23:74:
56:cc:e4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:06 2025 by rpki-client