Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
File: 0Q5D4Fk97x241_RMbxzRPnPC8jA.mft (raw, json)
Hash identifier: ijQTKxGr13YqRn905Hu9OY+6FUVMUPGdSo85QcYvTwM=
Subject key identifier: D1:D3:7B:96:4E:D1:DF:3D:DB:D6:F0:16:C8:84:A2:44:CA:04:78:3A
Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30
Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
Certificate serial: 0AEF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
Manifest number: 0AE2
Signing time: Fri 28 Mar 2025 19:34:52 +0000
Manifest this update: Fri 28 Mar 2025 19:34:51 +0000
Manifest next update: Fri 04 Apr 2025 19:34:51 +0000
Files and hashes: 1: 0Q5D4Fk97x241_RMbxzRPnPC8jA.crl (hash: YHuDrCO2fbNVezJlMv1PHiKNY8Idf8ITsNNVDE29hfw=)
2: A2DE5B44AE1C11EAA46DAF7FC4F9AE02.roa (hash: wBezilbHgFlLqA1qqUMQVDVzvkJDksyuC7XhtfdBEgk=)
3: 3FC1B85E431811EA84E68121C4F9AE02.roa (hash: kRXthgEAoGC/b23UrIEWTh9+gf3/yFfF1cVAtff2rTg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2799 (0xaef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91325DC
Validity
Not Before: Mar 28 19:34:51 2025 GMT
Not After : Apr 4 19:34:51 2025 GMT
Subject: CN=67e6f9db-a5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:19:5a:61:d6:23:58:99:ad:49:fc:c2:b8:89:
89:59:63:83:a2:3b:da:53:34:1e:a4:a9:76:d8:9f:
aa:c5:02:06:36:3f:67:1c:47:e4:8e:3d:1b:8b:3e:
dd:6e:2f:2a:fd:04:74:2d:9c:b8:f4:29:3e:47:65:
88:17:f2:c0:1a:8c:4a:41:7c:d8:08:d9:f3:4f:91:
49:77:8d:7a:30:e9:82:d1:f5:8f:08:23:d1:f9:22:
1e:5c:00:e8:da:3e:f8:b7:89:4e:f4:24:ec:bb:22:
05:0f:0f:ea:a2:1f:69:67:aa:8f:81:d1:e8:fa:7a:
e0:d8:e5:bf:ba:35:88:88:7b:48:bd:48:e2:96:c6:
6d:25:94:83:a6:8f:32:b2:8b:09:ac:4a:28:ce:92:
59:66:95:09:13:66:5b:08:72:83:da:d8:0c:ff:76:
d3:53:02:53:b3:8b:8c:01:ee:0c:6c:12:ac:dd:75:
b3:d3:83:a3:00:a8:ee:cc:5c:c7:b6:5a:e7:3d:23:
29:59:c0:0a:ae:8b:01:78:a1:23:e7:ca:17:7b:8d:
03:56:ad:08:05:0e:cd:3a:2e:09:33:6e:34:98:b4:
aa:ae:2d:c2:09:d0:2b:aa:1d:b3:74:f4:4d:72:f5:
ae:0c:f7:9d:c8:cb:21:1d:b6:a6:0c:44:61:51:fd:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D3:7B:96:4E:D1:DF:3D:DB:D6:F0:16:C8:84:A2:44:CA:04:78:3A
X509v3 Authority Key Identifier:
keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:75:fa:d3:8b:9b:1b:23:ef:78:21:ea:9f:27:c6:13:df:87:
8f:eb:e5:b1:3d:ae:01:db:4d:77:ab:df:b0:a5:31:a9:f9:89:
1a:0e:20:99:2e:71:8d:ca:20:59:f3:74:f3:16:14:01:d2:6c:
80:0c:42:51:f1:cb:c4:df:24:8d:a2:90:72:f8:8a:ab:50:15:
f6:92:6b:dc:b9:f5:89:15:fd:d7:5a:bc:c3:28:ba:08:ed:3f:
dc:0c:3f:a7:c4:e1:ad:34:1c:58:41:b5:e4:0e:d7:57:1b:bf:
8b:6b:8b:d3:72:f0:c5:dd:af:44:5f:af:e5:a1:5e:e6:fb:95:
ce:20:e4:77:7b:26:5f:c7:f6:60:19:da:3c:85:fd:c6:1f:e7:
3f:6e:8e:19:f0:f5:b6:25:e6:d3:98:d6:b9:1c:a6:63:07:dd:
0a:9e:9c:69:62:db:e8:9c:1d:7d:9e:bf:ba:5c:34:08:2e:0d:
78:c5:a4:cd:b6:e0:20:fb:49:9e:f6:6d:d0:b4:e8:6c:6e:c8:
df:8d:7d:ad:3c:92:7e:5d:ae:44:9c:27:b9:c9:cf:b7:a8:af:
df:b5:7e:f7:8a:76:54:69:80:7a:5c:a0:97:8c:55:3b:be:a4:
0a:f6:09:f6:b1:12:0d:ad:03:52:ad:31:21:63:dd:06:42:8a:
69:b1:ee:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:02 2025 by rpki-client