Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
File: nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json)
Hash identifier: lqhu1L9IqOAWx2QFkGJ67CcVyqy3+14QQrteWEU2nj4=
Subject key identifier: 95:34:69:21:53:13:ED:73:0F:AD:CC:A7:27:B5:10:53:26:44:7E:AD
Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Certificate serial: 1DD8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
Manifest number: 1DCA
Signing time: Fri 28 Mar 2025 16:12:50 +0000
Manifest this update: Fri 28 Mar 2025 16:12:50 +0000
Manifest next update: Fri 04 Apr 2025 16:12:50 +0000
Files and hashes: 1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: IT7qtAn899lTpqJFfocLKXUGrSydcy1VvRnECDRZUuU=)
2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: k9wr3qZcJ76UlwuVZn3FECVmsL3FOhLSrWOZD7INceU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7640 (0x1dd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134AD7
Validity
Not Before: Mar 28 16:12:50 2025 GMT
Not After : Apr 4 16:12:50 2025 GMT
Subject: CN=67e6ca82-770c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d3:b3:37:5f:70:a8:d0:68:67:9b:5d:3f:6f:
7f:b0:72:71:55:e6:38:b6:d9:c4:e4:70:85:b0:da:
bf:0c:39:34:7f:ba:c5:8a:5d:5a:e6:c4:80:38:27:
93:7e:f8:ed:88:b7:2f:92:55:1c:4d:d5:3e:73:1e:
72:72:a7:9d:59:f4:1c:03:06:90:36:1e:7a:66:59:
f5:81:05:b5:da:8e:c8:4f:6b:f0:a4:80:68:91:1c:
61:98:b5:33:de:14:ce:3b:fa:66:36:22:46:be:ec:
48:6b:d8:19:b4:c8:c4:d5:5f:14:da:45:a5:a1:9b:
1a:b7:1d:27:f4:a9:5f:73:c0:93:a0:6d:d8:9b:c5:
6c:10:d2:a5:cd:51:01:1e:ba:c4:a1:c5:92:bc:dc:
52:96:0e:ca:fe:49:45:92:67:b0:ed:da:36:13:40:
57:3a:03:7d:cc:32:67:f5:b4:ba:6f:9d:3d:62:2f:
b5:60:f0:dc:8c:ef:b3:91:8a:a8:14:fb:98:9f:2b:
e1:be:82:0f:b1:8a:b3:bc:85:05:20:3f:ec:8f:2a:
4d:e6:9e:4e:0c:c6:25:06:2f:6e:20:34:56:af:a2:
a7:ab:29:7f:ea:3f:b3:22:40:f7:8c:ef:44:ad:e9:
62:af:2e:7d:3e:9a:ae:08:1d:97:e5:5a:b8:c0:08:
09:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:34:69:21:53:13:ED:73:0F:AD:CC:A7:27:B5:10:53:26:44:7E:AD
X509v3 Authority Key Identifier:
keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a0:05:2c:8c:9c:92:ca:37:ad:6b:d9:b6:da:d7:37:b4:3d:
58:f9:93:f9:3f:81:15:c6:1e:d2:d1:55:35:5f:57:d0:fc:ef:
c0:57:06:2a:fb:fc:27:6b:58:67:1d:96:13:fe:d8:ac:47:38:
b5:13:e6:53:32:a0:2c:1d:87:b0:11:5b:28:6f:46:44:20:da:
58:fd:26:fd:d6:54:14:c8:9e:06:3e:ee:ad:e9:11:d1:bb:43:
86:98:0f:ee:56:4e:e0:e0:d6:3d:ff:55:26:a7:5d:46:9e:f4:
b8:1b:60:10:7c:f7:1a:02:e2:04:be:a1:bc:3b:a5:3a:96:c6:
11:4b:30:8d:d7:b2:35:d5:b4:36:d2:b9:3c:66:a1:6d:6c:dc:
f3:1e:c2:8e:e4:7f:a3:99:d0:e4:03:e9:3e:3f:0a:e1:75:dd:
32:1f:4b:e9:2e:d6:67:8b:78:42:be:c5:df:5f:d4:25:ce:74:
7b:9b:6c:00:10:f0:f4:fa:23:ab:1c:b0:ef:0c:1f:77:d4:01:
d0:5e:fc:54:1d:51:ac:91:e4:8d:40:90:65:0c:90:6a:c1:86:
a9:40:e4:9e:36:8a:c7:0c:39:a0:85:ca:b5:4b:75:7c:ae:59:
33:e6:cb:b9:e1:bb:57:3b:ac:e9:e6:b0:48:72:65:38:a9:53:
05:44:7d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:44 2025 by rpki-client