Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.mft
File: AuKPnUYFERN7IUeII6e0gzlWUhI.mft (raw, json)
Hash identifier: QfCd+fwH5KRhJhRaAhcSbvuLF19BsyDUZjhSbOD7BTM=
Subject key identifier: 96:58:AB:77:42:4F:73:F9:91:12:49:FC:BF:3B:DB:2A:71:4D:65:D8
Authority key identifier: 02:E2:8F:9D:46:05:11:13:7B:21:47:88:23:A7:B4:83:39:56:52:12
Certificate issuer: /CN=A9147609/serialNumber=02E28F9D460511137B21478823A7B48339565212
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuKPnUYFERN7IUeII6e0gzlWUhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.mft
Manifest number: 1D48
Signing time: Fri 28 Mar 2025 16:55:38 +0000
Manifest this update: Fri 28 Mar 2025 16:55:36 +0000
Manifest next update: Fri 04 Apr 2025 16:55:36 +0000
Files and hashes: 1: AuKPnUYFERN7IUeII6e0gzlWUhI.crl (hash: CXtgAge+0AC4aH1HsKXasGm/N/aPogkJa5zMw+A9Mgo=)
2: 1268CB8C4E3E11EF891FC80CC4F9AE02.roa (hash: 4HGe1cjFbJfQFWJ6cnAj+BysIZgPQf+tvO/SplIzyq4=)
3: 65A7D4A0974A11EF961C4937C4F9AE02.roa (hash: uFUS3R+R9pN1ZCN/rpeAN2BidcZtMA7vUvv7YeQo5Tw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147609
Validity
Not Before: Mar 28 16:55:36 2025 GMT
Not After : Apr 4 16:55:36 2025 GMT
Subject: CN=67e6d489-f406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:88:04:30:3d:f6:ef:71:91:3d:71:d9:e9:ec:
c8:1d:bf:13:e1:68:50:2f:95:7f:b3:20:e3:83:d1:
df:a1:15:eb:ce:d5:2a:44:4e:e4:a2:93:3c:a1:2a:
51:55:6b:ec:8a:23:10:ed:00:1e:46:cd:0c:c8:5e:
ae:9a:e3:c5:bc:10:6e:00:30:a2:3d:e1:cb:ee:64:
5f:db:24:76:39:5f:89:07:68:7e:6c:46:92:a9:27:
ef:5d:2a:9e:29:0e:2c:61:db:1c:89:ac:17:cb:bb:
b6:09:bf:41:5c:db:80:50:f4:21:eb:54:d2:fc:94:
f0:7e:5d:3a:39:76:a7:e5:90:d0:d5:f3:45:62:37:
6d:a4:77:06:dc:66:e9:e7:b8:c1:a2:c1:c5:a4:d9:
48:f1:6a:71:39:53:d7:68:72:c5:56:4c:8b:2c:20:
f0:d1:92:dc:e0:19:d4:05:ca:3f:ae:fc:77:11:b9:
32:05:27:3a:93:b8:75:71:38:00:a2:6c:7a:d6:73:
ea:29:b6:9c:92:21:ed:f9:50:4c:ba:5a:d3:79:67:
2b:e3:28:f3:fc:54:0c:8c:f3:c6:36:17:0a:f1:e8:
31:f9:9f:af:51:fc:11:10:65:ac:6a:b9:f6:fd:f2:
84:c0:80:82:1c:fb:6a:77:f1:c3:39:55:66:9f:70:
c3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:58:AB:77:42:4F:73:F9:91:12:49:FC:BF:3B:DB:2A:71:4D:65:D8
X509v3 Authority Key Identifier:
keyid:02:E2:8F:9D:46:05:11:13:7B:21:47:88:23:A7:B4:83:39:56:52:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuKPnUYFERN7IUeII6e0gzlWUhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:b3:93:c0:f4:95:43:92:54:04:34:29:7d:57:cf:cb:e7:e7:
4b:7e:ba:0c:95:eb:34:44:1b:f0:7b:58:4a:6e:42:91:c3:66:
72:c4:a2:ad:f5:5f:a3:59:10:eb:f6:95:31:67:5e:ff:16:ee:
f4:e3:31:61:3f:92:b5:aa:21:91:72:63:19:30:56:de:36:74:
76:33:e1:41:ec:b1:14:66:22:4b:6d:ac:56:a3:c7:bd:a7:cb:
30:4e:5b:b1:2d:dc:20:a0:01:99:12:23:a0:27:73:a2:59:07:
6a:8c:12:ea:5b:95:75:0a:34:34:29:96:d1:34:8a:f9:c8:6f:
2d:49:1b:dd:6e:7a:7d:9d:96:0a:9e:b7:9a:37:ea:f8:8e:d3:
91:3c:99:3a:e6:bf:51:6c:2c:a9:fe:51:f4:44:34:55:e2:d2:
7e:db:e9:80:ab:2e:0e:48:8b:9b:33:c7:f9:78:aa:51:a9:88:
b9:9b:23:c1:6e:a6:db:bf:33:df:5e:44:b7:e3:36:d3:90:2f:
9e:1b:3a:62:7c:17:8d:81:62:7b:8e:dc:d0:34:ef:9a:11:54:
8a:11:24:eb:0f:b4:fc:15:70:cb:6b:26:02:4c:55:66:1e:48:
27:84:a0:c1:5f:77:7f:91:4a:f2:0a:22:08:a2:04:49:14:e8:
7b:ed:8e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:39 2025 by rpki-client