Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
File: ycx5T_y0zfLZ373rdjgJuH0tj1c.mft (raw, json)
Hash identifier: 0wEVrxoMbFcgppO3B6Y6uz3xIe9EV6LH+Q7I2ucdFsQ=
Subject key identifier: D5:BF:8E:6B:99:8B:B6:E9:D2:EC:81:FB:2F:9D:F2:37:97:53:6A:70
Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57
Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
Certificate serial: 24D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
Manifest number: 24B9
Signing time: Fri 28 Mar 2025 15:51:35 +0000
Manifest this update: Fri 28 Mar 2025 15:51:34 +0000
Manifest next update: Fri 04 Apr 2025 15:51:34 +0000
Files and hashes: 1: ycx5T_y0zfLZ373rdjgJuH0tj1c.crl (hash: ph3IybXJU7hoUzANYFJXYY2SkXXRTmIbPowkjUdtmYw=)
2: 297BC4140D4611E794585E2FC4F9AE02.roa (hash: yJwIYH0HnsFs9Iy2kQBVrjVIvfYou5TYh0Yox/p0ekY=)
3: 04CC562A444E11E88204061CC4F9AE02.roa (hash: bQ3KvLtmzclqglCfQCTMWY9jEZJ/oqjU8/5vFJyfH5U=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9428 (0x24d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147456
Validity
Not Before: Mar 28 15:51:34 2025 GMT
Not After : Apr 4 15:51:34 2025 GMT
Subject: CN=67e6c587-8467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:a0:bb:b7:63:33:e6:2d:ee:5e:da:8d:56:
26:b4:3c:9e:4f:5d:30:15:74:04:0d:ab:33:11:6b:
e8:ff:0f:c8:79:bf:2c:24:1c:ee:7b:af:2b:57:ef:
92:68:9b:37:f6:7c:b0:11:ef:e4:b2:a2:51:9c:86:
a5:05:67:5e:40:50:b8:07:b9:07:6e:85:3a:a4:ff:
72:1e:64:0c:99:5d:0d:5f:8a:4e:c9:c0:a5:ec:aa:
45:8f:d6:c3:bf:d4:7b:30:8c:e7:23:0d:5d:ca:51:
da:c7:71:94:f5:d4:8a:22:ee:27:54:f2:53:b9:29:
c1:bb:7d:02:12:be:0e:c0:95:60:80:6b:cd:f1:66:
68:ae:aa:14:8d:7c:d4:a9:3b:11:e4:70:82:67:5f:
00:20:2c:cf:8b:de:1f:26:75:e5:85:08:75:a3:3f:
80:c6:ff:1d:c4:65:a0:89:ac:e6:39:90:47:70:de:
76:2a:c8:0e:ec:8e:1a:f9:0d:f5:f6:c9:65:3c:3b:
b2:f8:04:0d:9e:96:7d:91:d9:fb:dd:a7:86:0c:56:
5d:9d:6a:24:99:08:e4:cc:81:db:44:3e:c4:f3:24:
9f:64:4e:37:fd:8d:7a:86:aa:e3:56:20:82:df:c8:
59:ab:96:38:4c:ed:4a:61:42:9f:98:91:f6:0a:8d:
11:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BF:8E:6B:99:8B:B6:E9:D2:EC:81:FB:2F:9D:F2:37:97:53:6A:70
X509v3 Authority Key Identifier:
keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:c3:06:1a:2e:a2:2b:2d:d6:dd:28:4e:85:5e:ab:c9:e7:d9:
ce:32:b5:79:1c:75:ee:cd:b4:c7:2a:bb:06:47:95:10:9f:a9:
55:e3:7c:93:05:5a:7d:b2:5d:c5:1c:3b:82:f2:eb:49:9e:51:
56:37:d8:00:1a:3c:eb:b1:ed:c2:3c:ac:ca:ef:6a:7d:e1:b5:
6b:89:a1:8a:64:7b:19:b8:03:99:f4:5e:05:5b:c0:82:f5:e4:
e1:71:34:68:b5:e8:06:c2:a3:4a:21:e9:77:0f:e9:be:8f:2e:
0f:a3:00:33:7a:e3:9b:f1:bb:9d:40:05:d2:28:8c:01:82:00:
d8:7b:b9:dd:6d:75:0e:c7:a7:e4:85:19:1b:77:3c:ed:34:c5:
62:0e:10:ad:59:05:5a:94:91:05:f9:7d:7b:90:89:3b:4a:30:
30:a6:87:87:b0:af:00:7f:0c:0a:e9:87:5d:5e:ed:48:d7:14:
eb:24:06:3b:6d:18:8e:40:1b:58:00:18:72:f1:cc:b3:99:2b:
83:f5:a5:24:e7:71:43:62:3f:54:14:a7:32:29:b3:d9:1c:fe:
31:ea:bf:9c:73:ce:c9:8a:93:da:ca:8a:f3:86:2f:56:de:af:
6a:8e:02:64:13:a9:b1:82:36:20:85:ab:5e:22:b5:2a:1c:cb:
83:26:fd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:35:59 2025 by rpki-client