Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft
File: z-PzHk8zetOBIBvzOgGmhfsBal4.mft (raw, json)
Hash identifier: XnceoSnzaI6ZV0vQKjdT+rBcmGAm/oW+J0CzE38zUA0=
Subject key identifier: 5F:50:A3:83:89:0C:C3:98:CA:D2:CB:7B:D2:FE:D6:EA:7D:0A:2D:65
Authority key identifier: CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E
Certificate issuer: /CN=A9128E00/serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E
Certificate serial: 0CEA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft
Manifest number: 0CE2
Signing time: Fri 28 Mar 2025 18:15:38 +0000
Manifest this update: Fri 28 Mar 2025 18:15:37 +0000
Manifest next update: Fri 04 Apr 2025 18:15:37 +0000
Files and hashes: 1: z-PzHk8zetOBIBvzOgGmhfsBal4.crl (hash: ApWL+2WTgx8cJaR5IrJEEJOVUh9Yfi/tlE9zsKTyiCI=)
2: D23C5270E02111E9B4A3923FC4F9AE02.roa (hash: zkAhSZ57x5i2z1ecY4hViVs+riusX3XK2gSVsFUEBsM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3306 (0xcea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128E00
Validity
Not Before: Mar 28 18:15:37 2025 GMT
Not After : Apr 4 18:15:37 2025 GMT
Subject: CN=67e6e74a-fdc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:7a:7a:70:d8:04:c6:f2:d3:7b:63:f5:a6:
0a:ff:1b:8f:3d:b4:d4:97:b6:05:0a:4a:0f:a7:60:
c7:2c:86:84:f1:2d:dc:8b:df:c7:46:ee:e6:95:6e:
d0:ee:7a:a6:85:12:10:f4:be:e9:33:cc:8a:43:40:
5a:7b:5e:09:84:73:27:2c:47:ef:51:6e:e7:ba:02:
30:1e:f7:5a:bf:53:bf:b5:c9:23:cb:db:a5:01:0f:
2c:cf:b9:c2:e8:e0:fc:98:c5:1e:4b:60:2a:a4:1c:
09:2b:76:9d:bd:4a:8a:25:16:d0:40:57:46:75:c6:
0f:e2:95:58:cf:ad:cb:70:35:7c:5c:da:35:09:fd:
4c:d7:67:fb:d8:45:52:7f:70:b0:21:72:36:f9:e9:
f5:de:b8:85:c7:6e:1a:04:52:81:92:74:07:bf:ea:
47:6a:b4:30:3c:af:9b:04:c6:23:39:cc:cc:ed:68:
9a:1e:67:f6:72:17:71:e5:a1:85:12:23:9d:89:16:
18:b2:31:5d:a9:85:aa:39:53:26:df:af:13:aa:10:
74:82:91:8e:d5:3f:6c:da:85:76:ca:cd:84:8d:0f:
22:b0:63:99:26:a1:3a:53:7c:9f:61:ae:2c:68:3a:
a5:0e:d8:7d:19:ae:32:1e:49:5b:50:26:b9:02:bb:
a8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:50:A3:83:89:0C:C3:98:CA:D2:CB:7B:D2:FE:D6:EA:7D:0A:2D:65
X509v3 Authority Key Identifier:
keyid:CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:4f:6a:11:74:47:20:df:55:b7:ff:3e:42:6b:2a:cb:0e:a0:
dc:aa:cb:6e:e1:39:f2:64:e2:fa:bd:90:e3:a1:35:ac:81:94:
24:95:ae:b8:21:5d:0c:9f:94:81:5d:e2:29:61:05:d8:b2:3d:
62:e4:6f:8b:ed:e7:8a:1a:cd:4f:1f:97:c5:28:55:f8:9e:22:
6e:a7:1c:1f:c6:af:42:1d:95:b6:10:25:47:ff:92:35:92:fd:
b3:d4:74:4d:a4:1f:a8:0a:c8:04:0a:41:ab:6a:0f:fe:6e:34:
53:da:c4:6d:8a:b0:3e:70:d3:2e:33:db:56:41:12:1d:79:e6:
c5:24:9a:e0:ce:e1:b6:70:92:37:ad:f6:51:59:13:cb:71:bc:
9d:dd:0d:cc:35:50:b8:36:b4:cb:bd:7e:18:e9:23:d6:aa:dc:
f8:85:09:35:40:d6:71:39:7d:aa:4b:cf:23:c9:91:e4:14:1f:
ab:b9:b3:79:4a:90:ae:61:d2:90:bd:94:a9:23:4b:eb:ac:9e:
9c:75:75:16:49:cc:6e:fe:71:40:11:1c:7a:fd:2c:63:6f:78:
d1:10:04:7b:b4:eb:b0:6a:50:d3:72:32:8b:fa:86:e9:d0:49:
69:88:b0:09:94:4a:a4:b7:15:c3:6b:83:a2:7e:76:01:27:cd:
c3:af:b7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:11 2025 by rpki-client