Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft
File: oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft (raw, json)
Hash identifier: DQ3+ENgHx0gJntMIMxaeo4V1ZIFR8Jj3okbliWZsP+0=
Subject key identifier: 48:15:E6:16:CA:38:8F:DD:A8:E5:F5:85:7C:D0:C3:53:AA:54:8D:44
Authority key identifier: A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2
Certificate issuer: /CN=A9138B72/serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2
Certificate serial: 092E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft
Manifest number: 0926
Signing time: Fri 28 Mar 2025 20:34:11 +0000
Manifest this update: Fri 28 Mar 2025 20:34:11 +0000
Manifest next update: Fri 04 Apr 2025 20:34:11 +0000
Files and hashes: 1: oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl (hash: sP90MOjD8tOD4PllwX3USLOpBa85JOBxDcDc0c2hPCQ=)
2: 311647C0896C11EBA85B0747C4F9AE02.roa (hash: X3WvsIakOYYYh6qQ/CNrPJ4rysF4m1jhkYS0mLUaZBA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2350 (0x92e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138B72
Validity
Not Before: Mar 28 20:34:11 2025 GMT
Not After : Apr 4 20:34:11 2025 GMT
Subject: CN=67e707c3-69cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:a7:21:1b:3b:bc:de:1f:af:58:fd:f8:89:
6a:2d:53:8a:4a:aa:12:46:f7:2d:dc:95:5c:fa:33:
52:29:7d:7f:ae:97:61:57:41:82:75:de:67:7e:46:
e8:e5:07:15:26:d1:d2:38:99:4d:53:1c:cb:5f:23:
e4:70:60:78:4e:d5:cb:57:e7:fb:e6:2e:19:12:13:
c4:94:16:51:d6:e5:d7:6c:5f:25:0d:8b:7a:3d:d6:
f5:2a:ab:62:08:9b:3d:7e:83:77:97:b5:ef:c1:2f:
6b:e1:59:43:fd:5a:e1:9e:d1:95:38:82:e7:24:6e:
3b:fe:76:43:51:84:6c:ec:c8:2d:ad:66:eb:a5:16:
f4:76:cc:41:29:58:c6:e7:1b:34:2d:55:7d:86:2b:
ed:64:55:50:31:58:71:f7:ea:4b:f9:ca:ab:f1:40:
11:cd:3f:2b:b0:67:a8:48:8c:92:88:2f:e6:e2:b1:
83:ea:dc:4d:25:1b:f1:c2:89:b2:75:1d:a9:9a:47:
f5:89:31:10:60:4e:94:7a:41:64:61:62:82:a7:23:
71:9b:4f:12:5d:e5:4b:93:f9:e9:0b:40:06:49:1e:
2d:f4:0d:66:17:9a:9a:c9:00:86:4f:cb:e2:cc:c8:
47:38:1c:82:88:c2:90:d7:8c:a0:61:13:79:6f:8e:
02:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:15:E6:16:CA:38:8F:DD:A8:E5:F5:85:7C:D0:C3:53:AA:54:8D:44
X509v3 Authority Key Identifier:
keyid:A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:be:41:22:63:f2:ee:86:3b:43:aa:b6:47:e5:15:96:47:64:
70:91:69:5a:e8:2b:3c:eb:0b:71:f9:5f:ef:74:70:12:14:1e:
3d:69:5d:97:60:04:78:68:af:a9:45:24:28:00:2c:56:11:b7:
5e:b0:b2:6d:f2:b7:19:4b:d9:fb:bd:0b:e1:0a:6f:d2:f8:03:
b6:d8:52:20:44:c2:b8:b8:65:c3:69:7a:a2:14:fe:21:ee:f4:
d0:97:65:81:b7:86:46:3b:c8:c4:17:c7:4d:65:e5:bb:48:6d:
aa:ea:b5:ab:9f:91:d6:5a:70:bb:a8:29:12:42:ae:f7:34:5f:
1b:d1:a1:a3:a7:79:55:22:6d:f0:27:9c:33:f2:ac:4a:dd:70:
7f:f1:db:32:8d:97:9e:d6:5d:00:5d:21:68:8e:8c:58:ff:2d:
a2:37:61:9d:54:42:c8:ce:a9:e8:49:37:b3:97:02:69:f2:5f:
df:3b:b2:ed:f5:39:3c:ea:29:5e:a5:29:cc:53:a9:b8:0a:49:
c2:6c:80:4a:34:46:6a:ba:93:2b:eb:85:4c:99:ff:11:fb:b1:
6e:3f:0c:9e:c6:74:4e:34:24:e7:9e:b8:65:c1:a4:49:2b:aa:
9d:da:f8:e3:be:a3:74:25:5e:7c:6b:06:91:ab:ed:c2:2b:4c:
dd:c7:01:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:07 2025 by rpki-client