Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
File: rBnGa8SzHOuTC6auDW63R7EKtgY.mft (raw, json)
Hash identifier: eO/asRZnIDE3aCtfu4Fvnx6Uy8ZNRQZq0uaZ4H4Pz2U=
Subject key identifier: E7:41:C9:08:0F:C3:9D:13:D5:FE:10:B1:5C:B1:93:A5:3A:CB:55:54
Authority key identifier: AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06
Certificate issuer: /CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606
Certificate serial: 346B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
Manifest number: 346B
Signing time: Fri 28 Mar 2025 14:41:13 +0000
Manifest this update: Fri 28 Mar 2025 14:41:13 +0000
Manifest next update: Fri 04 Apr 2025 14:41:13 +0000
Files and hashes: 1: rBnGa8SzHOuTC6auDW63R7EKtgY.crl (hash: YrUtiCJI6S+bhRWQIUOzp4aTvHPL3z/g4NuvH05uX18=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13419 (0x346b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141E28
Validity
Not Before: Mar 28 14:41:13 2025 GMT
Not After : Apr 4 14:41:13 2025 GMT
Subject: CN=67e6b509-0085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:92:d1:5e:61:37:13:ae:9f:5b:e1:c3:b8:47:
db:bf:ec:48:7d:4f:8a:2b:7b:8c:3b:b0:15:ec:17:
b9:f8:d3:f4:a4:68:d6:93:cf:f8:d7:47:3d:90:52:
c1:fc:a2:ee:e7:db:6d:de:9d:31:20:02:c1:db:30:
5f:47:89:85:a5:cc:f4:e1:a8:73:9d:c6:89:27:74:
64:1d:68:53:c8:75:bc:29:5f:fb:02:db:49:cc:37:
b2:7f:6b:1d:b0:d8:ca:7c:e9:4d:2b:bc:e8:c2:1c:
2e:b8:16:ee:dd:a9:e1:43:0b:d4:89:58:b1:e1:4f:
d4:16:13:a9:32:10:cf:28:b8:06:c2:87:fa:3c:dc:
56:f8:81:c3:24:ca:49:68:33:6e:89:e5:1f:de:96:
56:29:32:7f:93:1e:8f:1f:08:ed:d9:fb:18:9d:21:
d6:d0:fd:99:25:62:48:11:ee:89:ba:df:4b:35:fd:
42:d5:82:5d:e2:b4:64:ec:1b:90:0c:48:80:b4:19:
90:aa:54:d0:9b:4d:84:fa:80:96:0e:af:b2:0f:e3:
1b:e5:ac:7c:3f:6e:d0:d7:29:49:5f:a0:a2:25:f6:
cb:6b:34:29:e9:bd:f4:17:89:e0:98:be:83:a2:8c:
54:c6:4a:fb:0a:f9:a8:cd:ee:6d:8c:1d:50:30:c9:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:41:C9:08:0F:C3:9D:13:D5:FE:10:B1:5C:B1:93:A5:3A:CB:55:54
X509v3 Authority Key Identifier:
keyid:AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:34:d4:d7:79:03:33:4e:3e:74:e4:5d:59:1d:d0:d8:27:63:
08:fd:0d:12:fb:80:51:41:e7:fd:37:d7:09:17:ca:72:c5:74:
9b:22:68:68:41:9c:2f:1b:22:d0:f3:cf:12:0f:35:e7:e7:ff:
a8:03:44:ba:6d:92:0f:6a:e6:c8:5f:ac:d1:bb:00:78:64:f1:
d4:34:f4:8e:d9:43:ca:b3:89:f1:42:ab:5f:96:61:b5:15:5b:
e7:59:fc:0f:23:a0:54:1e:06:35:c0:0f:cb:79:10:99:22:a0:
c3:e1:45:d5:d2:79:73:22:83:6a:3d:d2:f4:9c:da:59:db:0d:
b5:98:8a:97:58:ab:4f:22:2e:2b:9c:12:d2:14:8c:33:ce:d8:
79:cd:09:0b:3e:0c:ab:0c:ec:2a:8c:fd:6a:27:80:28:d5:2c:
14:68:b8:5c:ff:c9:f8:df:4f:3b:5f:84:7b:29:87:c6:45:31:
59:a8:5c:ca:15:a0:78:b8:6c:73:63:41:20:b5:87:72:4e:62:
ff:a5:02:eb:63:13:d0:20:c4:f9:7c:c7:39:c7:52:7f:20:55:
83:9f:de:6c:fd:ca:8f:2f:e1:79:e8:66:f7:7b:2a:16:e1:9e:
c1:49:c1:99:91:c4:e3:1e:54:ae:1b:89:fa:d5:41:8e:bc:e2:
70:c7:43:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:02 2025 by rpki-client