Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
File: q9Q1SGWcuydu-NNbghL4OOjOt18.mft (raw, json)
Hash identifier: ntWmQ1BObnMkSJTZ/yPKJ2MzVeCqywnSPBq+Y6yh0wI=
Subject key identifier: 97:EE:FD:54:D4:91:46:92:16:CA:90:E6:08:E6:FD:01:CF:32:E4:50
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Certificate issuer: /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial: 0A6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
Manifest number: 09E8
Signing time: Fri 28 Mar 2025 20:23:14 +0000
Manifest this update: Fri 28 Mar 2025 20:23:13 +0000
Manifest next update: Fri 04 Apr 2025 20:23:13 +0000
Files and hashes: 1: q9Q1SGWcuydu-NNbghL4OOjOt18.crl (hash: SwwExqLe8mEYNnm9odFIw8eMaE1x0KOIRhN0NP+FNcc=)
2: 690F19C87A0111ECA0BAAA6AC4F9AE02.roa (hash: eOflK2NC8wnqQQDOtn92wjxpOTzjNZbiaBcaMy1lgAg=)
3: C09E796C50EB11EB86E24A3DC4F9AE02.roa (hash: IKZDGcPoz2ZTyjAKxTlyXJlRj+UtVtLciBcR7qZTioA=)
4: 0B0485A250B811EBA8A3C670C4F9AE02.roa (hash: uJygWd52jCSDDQwzNFdfFy56jnQ/FexCJi3lv3fNL2E=)
5: 6580E03C79E511EC99DA1B51C4F9AE02.roa (hash: SiyXp8s8/hAXjY68zK9BtwMRoILRvuLxj/zVeKFswVk=)
6: ED4952AAEA5F11EE914FC26AC4F9AE02.roa (hash: Xeve6NkXZU1IXwo8IzcOdYST6NusVo4ExNoKnDZH5cA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2669 (0xa6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B1E
Validity
Not Before: Mar 28 20:23:13 2025 GMT
Not After : Apr 4 20:23:13 2025 GMT
Subject: CN=67e70531-d55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:ac:e6:ff:be:97:9c:cf:41:f8:c9:c8:a2:
9d:ce:38:a2:3d:b4:f4:32:93:c5:aa:f6:f2:14:de:
f1:4b:eb:35:34:24:6c:f3:24:10:a3:89:ba:9c:67:
ca:0b:3d:75:ba:aa:14:bd:89:09:fc:b0:1b:0a:8f:
9d:12:8e:51:5d:4d:e2:c2:27:84:bf:f1:99:2d:a5:
3c:d0:ce:43:3b:92:5a:f1:e1:c6:0b:99:bb:73:7d:
0c:f0:2b:4e:1f:a3:c8:d2:41:20:3e:13:dd:89:89:
7a:f4:f3:5d:c8:ef:86:5b:4b:7b:05:1d:ff:a9:31:
ae:77:62:ac:28:f4:87:c1:a5:21:2b:32:b2:46:9a:
7b:09:4b:54:c8:d3:86:90:c1:5c:4c:d6:1e:47:46:
ae:c6:68:e7:4c:f6:72:1a:fc:ab:37:91:26:08:03:
7d:18:e8:9c:17:37:5f:a9:1d:07:8b:8f:9f:69:83:
a4:5d:42:1e:f0:e4:cf:78:30:e7:82:b3:c8:be:01:
9f:1a:14:76:80:37:95:db:a8:91:64:49:74:f3:56:
03:79:f2:9b:be:8d:49:48:f9:9c:9e:61:4b:8d:7a:
17:72:d4:e0:63:41:be:87:c5:6e:da:2f:54:ab:d1:
00:80:04:38:92:38:1d:f2:60:6d:0e:56:e5:f1:d9:
f3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EE:FD:54:D4:91:46:92:16:CA:90:E6:08:E6:FD:01:CF:32:E4:50
X509v3 Authority Key Identifier:
keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f1:87:de:79:2c:ee:16:54:b9:ff:85:5b:3c:88:cf:f0:08:
ff:be:56:f8:21:4a:13:5b:3b:82:b1:f0:7c:5e:6f:9c:8e:b8:
b3:9c:bc:b1:da:18:4a:92:d6:10:dd:f0:5a:55:87:db:92:8f:
ad:ed:03:b8:9c:68:73:62:af:57:fe:84:d8:49:c0:51:be:13:
62:24:25:26:b8:ae:20:67:98:1e:8a:55:74:86:4c:2c:12:9e:
3c:e1:78:a7:79:fd:6e:73:dd:6f:94:d9:dd:af:ed:4f:cb:79:
00:2d:05:a0:14:e5:95:4f:f3:94:c4:d0:21:36:07:4c:d1:71:
6d:28:6c:9a:54:ed:60:4b:f2:98:42:f0:e4:c8:80:a2:67:eb:
06:4f:79:93:e1:29:c0:14:14:df:ce:98:21:37:d7:50:b5:dc:
ed:3e:3e:77:66:02:69:aa:a8:c8:49:99:7b:f6:23:9b:75:ae:
3e:57:0d:7c:5f:8d:61:d1:3f:f6:fc:c5:3b:e6:43:2c:6d:59:
f4:1a:bb:d8:e8:35:dd:06:ae:1c:41:c6:f3:6e:f6:f1:77:c5:
ad:b9:21:bd:d8:e7:88:fa:e0:a2:c8:34:49:0e:ab:50:93:63:
5c:ed:0a:c4:cb:58:1a:c0:ab:22:58:8c:e7:1d:9b:c2:0d:0c:
56:a5:9a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:26:59 2025 by rpki-client