Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft
File: vYeFXLaB4jNZv-waNPGZK2ceXu4.mft (raw, json)
Hash identifier: HXxshUIc7Gl26hz1VgJXbhPdJk0buJxWIZdt3Xatwu4=
Subject key identifier: 7D:20:23:39:02:50:5A:37:6A:43:FB:EF:DD:78:4E:AB:2B:88:0E:F6
Authority key identifier: BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE
Certificate issuer: /CN=A9127726/serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE
Certificate serial: 34CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft
Manifest number: 3495
Signing time: Fri 28 Mar 2025 15:20:36 +0000
Manifest this update: Fri 28 Mar 2025 15:20:36 +0000
Manifest next update: Fri 04 Apr 2025 15:20:36 +0000
Files and hashes: 1: vYeFXLaB4jNZv-waNPGZK2ceXu4.crl (hash: silWD7UptbJDdUJi41gX35ABLUl0Y89ki8hGlkSbrn0=)
2: 264A19E27A3D11E99D212E62C4F9AE02.roa (hash: 7bZz6cCgHTC9658y3NzIZERen9rMtVW0xNd6+sDCh7A=)
3: AF976FA2023311ED945EBE12C4F9AE02.roa (hash: N04kVTLDjl3tqLVRBpBLoHcWt+k6YZVwq9yF1azC5Dw=)
4: 9D03023EA86E11EDABA1FA2AC4F9AE02.roa (hash: 4uQI4pUXnWzfYHdgbJNZzm+RMbPwp0sMW3SM9UXkSAA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13516 (0x34cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127726
Validity
Not Before: Mar 28 15:20:36 2025 GMT
Not After : Apr 4 15:20:36 2025 GMT
Subject: CN=67e6be44-dcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:c4:35:b2:b7:cd:ad:fe:0b:4e:ea:db:7c:
19:2e:74:9d:34:2f:c4:18:9c:95:ad:2f:e3:b6:dd:
44:3d:a8:73:5e:31:6c:de:52:c9:56:68:cf:20:d7:
ed:13:44:4c:91:02:d8:91:ba:73:73:dd:68:89:0a:
6e:fe:8e:c3:45:d4:14:72:1c:21:c9:80:36:df:8c:
c4:7f:5e:bb:0b:8e:aa:76:da:9b:1b:60:60:3d:c5:
ad:bb:0b:1d:29:ba:d3:40:8a:84:a0:7c:ee:31:6f:
cb:bb:d7:85:1d:37:ab:3c:b1:96:fc:6c:e2:66:af:
a8:c7:d1:28:fa:b2:62:11:98:a4:94:48:1b:a3:a2:
8c:1f:e9:16:e8:1d:1c:c8:b8:c0:24:3b:af:ad:b7:
0b:f1:42:60:84:2b:4b:e4:b0:d9:92:3f:27:a8:84:
e4:cc:68:0b:d5:8a:d2:54:2d:18:a4:40:a5:4c:ec:
66:10:89:75:7b:5f:50:7d:33:54:41:52:0b:8e:c9:
e9:30:92:6e:68:da:f7:24:5b:ef:b6:e2:98:a4:c9:
45:22:90:81:d9:a0:55:32:92:86:06:c7:7f:cb:4b:
f1:2d:ba:6c:d1:00:a7:1b:f4:8e:31:66:cd:03:85:
91:8e:5c:5b:e4:1c:29:42:34:a5:aa:a5:40:91:83:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:20:23:39:02:50:5A:37:6A:43:FB:EF:DD:78:4E:AB:2B:88:0E:F6
X509v3 Authority Key Identifier:
keyid:BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:30:b0:09:f1:4f:fb:12:9c:50:3f:dc:08:e3:7e:10:b3:15:
93:de:e6:21:cb:48:cd:08:89:06:85:7a:a6:c8:57:77:e1:03:
df:bd:96:e1:e4:46:45:38:f7:d6:bc:5c:72:ef:9b:4d:39:8a:
43:9d:77:0a:cc:35:5c:88:21:18:6e:09:ec:2c:96:6a:f5:e5:
50:42:f8:5d:f7:65:0b:38:1e:94:14:11:02:3e:fe:d9:bc:ef:
f8:0a:2a:14:02:0c:65:09:63:4f:16:a9:db:80:6e:f6:9b:2c:
73:e5:f4:e7:76:9e:22:71:5f:25:03:ae:63:e9:46:bc:80:ba:
cd:ff:6c:98:f4:ec:5d:a4:1e:60:80:da:e7:16:98:3d:3b:cb:
6f:e8:8b:93:3b:11:0d:88:a2:2a:cb:61:5f:9c:b9:0a:17:69:
4b:b9:59:e2:a7:4f:e3:c4:6d:d6:93:b0:89:b0:41:eb:73:f6:
4a:e3:87:51:43:1a:d3:0d:e7:c4:0f:6a:31:67:c3:c2:ed:92:
69:2f:03:fe:7a:cb:0e:3b:9c:69:5f:2c:3a:1a:30:41:c9:6b:
7d:5f:09:7e:7b:99:21:05:80:8e:38:9d:33:d7:37:38:a8:00:
f6:48:c1:e3:66:79:84:35:74:f7:b9:e1:07:f9:3c:da:ab:7a:
01:75:87:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:34 2025 by rpki-client