Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft
File: ulogxAaFivwlBqk1eGMWQUZSYJ0.mft (raw, json)
Hash identifier: wXyVfA3oYgq9nLMNA+G12aDLA6EGlsHxWvGZg3NOeAw=
Subject key identifier: 5D:84:86:75:24:60:10:D3:D7:E4:1E:AE:1E:11:15:EF:19:56:92:B4
Authority key identifier: BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D
Certificate issuer: /CN=A912C2D5/serialNumber=BA5A20C406858AFC2506A935786316414652609D
Certificate serial: 0A41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft
Manifest number: 0A3B
Signing time: Fri 28 Mar 2025 19:56:54 +0000
Manifest this update: Fri 28 Mar 2025 19:56:53 +0000
Manifest next update: Fri 04 Apr 2025 19:56:53 +0000
Files and hashes: 1: ulogxAaFivwlBqk1eGMWQUZSYJ0.crl (hash: fjbcwTMn5RqwNGIT2nUPKxZzRCrhbIsb3U8VYgQkFX4=)
2: BD63D19A650D11EA8FAFD931C4F9AE02.roa (hash: OYSrFAczlfKVSdgUfDN8+TnLYrywWcmrp5Q486bnheI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2625 (0xa41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2D5
Validity
Not Before: Mar 28 19:56:53 2025 GMT
Not After : Apr 4 19:56:53 2025 GMT
Subject: CN=67e6ff05-b784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:80:b6:d8:af:19:77:10:0d:e6:71:b4:a0:
b4:18:27:db:9a:c7:cf:08:01:a3:e2:78:7b:bc:2a:
f8:34:b0:a9:a5:5c:a6:19:51:71:47:ae:12:8b:73:
eb:3c:85:76:4d:d6:66:ff:d9:75:f7:ba:f6:5e:75:
7f:b4:d3:5f:54:72:dc:f9:74:81:52:07:f6:99:6f:
09:59:fc:bb:1e:36:de:82:2d:f6:eb:dc:1c:30:d4:
f8:9f:d1:24:28:b7:40:cf:64:f1:fd:19:05:16:d2:
ee:c1:fe:f1:50:df:7e:3e:36:20:d3:46:15:94:27:
18:30:00:36:77:44:32:b0:aa:65:2b:b4:1c:db:f3:
ed:b8:3d:5c:80:ff:0c:ba:d8:03:e1:61:69:e4:75:
ac:b2:1d:f7:ff:63:13:27:fb:97:40:ce:7e:a7:a1:
ee:55:03:dd:cb:6b:c0:fd:b5:48:38:57:62:ef:f8:
bf:f0:b6:12:8a:14:be:2d:f4:d2:cb:a1:ac:43:03:
3c:df:be:a5:59:f5:f0:50:ea:ec:b2:87:30:ed:8a:
11:05:21:23:2b:04:84:44:d1:cc:da:68:4c:6b:e2:
cb:a6:32:23:79:89:b0:df:5a:68:dc:62:27:c8:22:
10:a5:f1:ed:91:f9:f0:e9:f4:36:48:49:24:e2:88:
97:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:84:86:75:24:60:10:D3:D7:E4:1E:AE:1E:11:15:EF:19:56:92:B4
X509v3 Authority Key Identifier:
keyid:BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:ea:7e:fd:37:0c:32:57:e6:cc:8d:06:0d:83:f8:24:a8:bd:
6c:bc:cc:96:1f:ef:37:51:49:ba:da:2a:36:07:ad:14:b5:54:
a9:55:55:b8:4c:15:10:40:6f:27:73:91:2a:10:5a:89:13:b1:
c6:6d:d5:51:79:f3:47:37:23:b0:01:c1:4c:77:9a:09:84:46:
ff:c9:89:f8:cf:c4:65:08:2c:c3:1b:fd:b3:14:2b:02:a2:34:
9c:3a:51:1f:fa:93:cf:0d:fc:54:6a:db:f8:7b:04:e7:20:7b:
eb:02:4b:45:ef:f5:27:c7:ff:18:49:83:25:a6:57:98:6d:f4:
40:5f:15:17:fd:93:0a:2c:d5:17:a2:cb:55:8c:b5:f4:e8:87:
fd:50:bb:67:36:12:72:37:ce:5c:7a:5e:b0:31:c3:ef:fc:eb:
ce:84:2e:da:8a:ce:2c:b8:0a:21:0f:4e:c1:bc:ec:00:cf:2b:
39:bc:e3:a0:7f:e8:d9:16:27:e7:e2:aa:ca:87:18:3d:9b:fe:
4a:0e:00:e7:62:b2:8b:21:d0:45:c6:e3:68:a1:7b:f4:41:bf:
fa:dd:49:0d:40:7f:6f:94:ec:ab:b2:2b:2c:ca:40:a8:cd:ca:
06:7d:af:04:ce:0f:b3:6f:7e:7b:04:61:23:d7:e9:96:a4:78:
15:44:6d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:27 2025 by rpki-client