Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft
File: dQVeDYzbFO-fBPi5XayLiclozd0.mft (raw, json)
Hash identifier: Kxyf0t/tT6z7gn8GKTOrIq53/e0Ezr1G9ClQM4P0eeA=
Subject key identifier: 76:BF:97:33:5D:F7:A8:B1:CA:A5:47:2A:91:93:65:77:76:DA:0C:F6
Authority key identifier: 75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD
Certificate issuer: /CN=A912C4DB/serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD
Certificate serial: 0C26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft
Manifest number: 0C1A
Signing time: Fri 28 Mar 2025 18:46:06 +0000
Manifest this update: Fri 28 Mar 2025 18:46:06 +0000
Manifest next update: Fri 04 Apr 2025 18:46:06 +0000
Files and hashes: 1: dQVeDYzbFO-fBPi5XayLiclozd0.crl (hash: UUcbQwGnGTogqtAtr0okvl2IVcpsO6t1QDDtkmUdHIY=)
2: 3E0EDBC83E0111ECA3AF5462C4F9AE02.roa (hash: MeK9ET7gmT0HXM7WrsCFabf5Xt6ViCVNKTA3zZ5Z6Ss=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3110 (0xc26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C4DB
Validity
Not Before: Mar 28 18:46:06 2025 GMT
Not After : Apr 4 18:46:06 2025 GMT
Subject: CN=67e6ee6e-49fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:88:1d:c3:c9:9e:b9:5c:e9:ae:7d:24:73:
4a:68:26:b9:f1:a4:b4:b7:79:41:17:34:71:46:0c:
19:6d:1d:9c:0b:a2:ac:93:04:ca:e7:e2:41:48:02:
0b:41:53:a9:4d:c0:48:e6:df:1d:7a:af:31:7e:8c:
5c:1a:b7:2b:95:c5:f3:b1:ec:76:33:4b:21:d5:43:
52:96:42:24:55:8d:d0:5a:8c:d8:9d:f8:da:4c:3c:
86:8f:3e:15:a9:33:be:a0:f6:76:25:31:56:05:09:
86:93:ff:76:22:ed:eb:1b:05:93:ab:9d:16:a7:b9:
61:ec:25:fc:55:f2:68:37:9a:c0:d5:f6:af:0a:ea:
fc:0c:32:cf:e9:ab:09:ea:e1:ac:a4:25:e4:5c:a5:
7e:27:3b:45:e3:4e:a0:e7:a0:80:78:95:c1:85:09:
46:80:5f:f6:f3:6f:33:e5:c5:43:f5:a7:1b:3b:24:
42:20:11:ab:ee:59:e1:af:07:82:50:a2:69:6b:26:
9c:dd:bd:d3:13:f7:21:15:35:d5:02:53:de:47:13:
91:63:f0:43:fb:8f:9f:2c:6c:e1:52:fc:ee:9c:80:
74:59:65:4e:38:94:b8:57:ef:9e:18:e6:ef:d7:72:
c6:32:b3:42:1d:21:31:ef:03:a3:33:ca:b4:e0:21:
ce:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BF:97:33:5D:F7:A8:B1:CA:A5:47:2A:91:93:65:77:76:DA:0C:F6
X509v3 Authority Key Identifier:
keyid:75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1f:80:66:77:e8:3b:42:77:7f:a0:0c:12:57:5d:ff:b8:c4:
01:d6:5f:ee:4d:e0:a7:c3:3b:49:27:51:d6:77:97:27:95:d5:
ec:50:60:d8:65:cb:55:80:33:67:64:ac:75:74:ff:f0:86:f6:
4e:4b:18:ed:0c:f5:5a:bc:f9:7c:b8:54:50:be:64:d3:3e:13:
3a:4e:be:e4:98:38:ee:ca:7c:1a:92:71:96:20:20:06:96:ee:
7a:16:6f:3e:0b:2b:a5:5e:c9:fe:02:9c:cf:21:5a:3a:b1:e9:
b3:1d:48:cd:6f:db:5a:4c:dc:29:43:1d:9b:4f:c9:2e:4a:cd:
57:91:e7:40:a7:68:b6:38:41:76:aa:16:bd:74:44:ce:04:cf:
92:eb:ef:ae:9b:66:cf:1a:e8:15:6d:48:59:ba:b8:f0:c2:9f:
17:d8:53:5e:26:ae:5e:08:ad:da:56:8a:d4:8c:a6:0b:98:12:
83:43:3a:80:48:19:4b:fa:10:4a:37:03:b2:0d:7e:d7:ec:3a:
63:a7:73:9a:2d:1f:86:5f:4f:ed:87:0c:e6:78:f8:64:23:48:
b9:a7:43:2a:43:7e:11:8e:ab:1b:18:a8:1f:6a:35:77:12:72:
81:a3:e3:e8:10:c7:d2:3e:69:b2:7c:ab:37:e7:ac:ad:73:9f:
e8:b6:61:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:30:05 2025 by rpki-client