Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft
File: xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft (raw, json)
Hash identifier: twCog4jbSOjoHmVqiG/bddcd1sitRLT9t+raJkHbQNA=
Subject key identifier: AF:F1:A4:99:0D:D6:10:CF:D1:8B:59:CB:EF:9C:01:73:4C:08:C4:2D
Authority key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C
Certificate issuer: /CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C
Certificate serial: 22F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft
Manifest number: 22D9
Signing time: Fri 28 Mar 2025 15:56:13 +0000
Manifest this update: Fri 28 Mar 2025 15:56:12 +0000
Manifest next update: Fri 04 Apr 2025 15:56:12 +0000
Files and hashes: 1: xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl (hash: g+dXgXkNfHEf2t02jj1wYvBW+d0TsZBGKx1RgIS/VCU=)
2: DA37C95AB14511E5B83D2120C4F9AE02.roa (hash: 6e21k1t3PwcFuMYhxFKByN0N0S9Vi6EW4w95vWK0udo=)
3: CBF9AD5449E811E6BAF4525DC4F9AE02.roa (hash: w2d5iGO1DzNwRW9XaGG0C+Ss9EnEjj1pHZpwfJJ5U1I=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8946 (0x22f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127342
Validity
Not Before: Mar 28 15:56:12 2025 GMT
Not After : Apr 4 15:56:12 2025 GMT
Subject: CN=67e6c69d-7963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:c4:10:67:57:0d:04:bd:de:51:d4:7d:e3:
96:8e:e0:a4:0a:50:d4:07:53:77:bb:21:1f:1f:15:
ce:49:82:dc:04:98:a1:ab:a8:8c:8e:a7:7f:35:e1:
bf:2c:a4:9d:26:e4:38:4f:f2:c2:91:1f:0d:9d:fd:
d3:9c:7f:5b:9f:d8:a5:1b:b3:02:20:df:ef:eb:68:
46:46:cf:44:a8:d5:11:9e:00:f3:93:c9:a4:b6:00:
c3:d2:17:b2:e7:d9:c2:8f:fc:02:e0:e7:df:96:46:
3c:f2:a7:9e:71:da:02:28:03:32:cf:5a:9d:ef:4c:
17:df:a3:0c:25:31:0c:58:a9:49:3d:74:00:c3:50:
ff:3a:ff:eb:06:22:4e:54:cd:0a:48:a8:a2:fe:b0:
5e:de:5e:46:1e:37:fc:53:62:2f:82:9f:c1:bb:85:
5c:ca:fb:99:61:1e:fa:95:56:1e:68:cf:77:47:54:
22:8a:f2:ef:11:52:d9:7b:7b:09:52:8f:76:91:ed:
eb:51:18:e6:7f:c5:dc:1d:90:c0:4c:d4:1a:9b:bc:
c6:1b:eb:27:21:ed:61:bc:05:ca:b1:bc:a4:3b:7c:
a3:db:03:e8:69:41:f7:24:f7:0d:78:34:85:40:c9:
dd:9a:53:8e:02:98:03:d7:99:f7:28:c1:0f:4b:5e:
90:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F1:A4:99:0D:D6:10:CF:D1:8B:59:CB:EF:9C:01:73:4C:08:C4:2D
X509v3 Authority Key Identifier:
keyid:C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:f3:3a:70:3e:8c:da:a0:e6:9b:41:81:80:80:98:98:7e:44:
64:ba:0a:ca:62:35:06:9a:c0:79:33:9a:99:e2:f4:1a:e2:76:
ad:9a:dc:a8:22:be:26:64:5d:de:5d:1e:97:f9:cd:76:f2:61:
e5:6a:78:f6:0a:45:04:c9:80:90:dd:75:57:11:1f:71:69:cd:
9c:21:54:41:4a:73:81:73:ed:69:0c:f0:a6:f2:c7:16:52:05:
76:71:e5:f5:10:b4:58:e0:91:98:ae:e3:f6:44:bf:c9:62:62:
a5:8a:0a:70:f2:25:bc:f7:f3:62:c1:4f:a7:92:67:ad:94:bf:
1f:cd:da:ee:f0:2f:bf:d4:70:99:1e:eb:17:d9:3f:9a:1c:1a:
e5:c8:cd:42:78:27:ca:06:7b:9d:2f:db:ef:d0:87:bf:c3:03:
90:1a:17:c0:ad:71:54:17:09:47:ef:29:31:66:02:d3:bb:00:
7b:af:6e:5a:c1:0d:24:e3:68:0f:e8:d9:3d:9a:44:be:20:4a:
bf:ae:94:ff:af:6b:9c:b7:ab:a7:72:bf:79:54:56:93:20:b8:
61:b0:e6:c1:43:50:09:42:2c:31:99:26:43:96:b3:59:10:a3:
95:e9:1b:30:88:a1:86:bb:7d:35:dd:6d:ca:43:8b:77:20:40:
73:09:d9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:42 2025 by rpki-client