Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft
File: y7aOmQU8HeJHirvi3_KrzsDRsUg.mft (raw, json)
Hash identifier: PIEeqsYckcXKkDCWgNz3S7HE0qAASx1mx3aKP/Ffww4=
Subject key identifier: 16:5E:D1:62:DD:55:08:20:18:14:A3:E5:9A:75:AA:4E:BB:68:CE:EE
Authority key identifier: CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48
Certificate issuer: /CN=A9149905/serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148
Certificate serial: 346F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft
Manifest number: 3469
Signing time: Fri 28 Mar 2025 15:01:29 +0000
Manifest this update: Fri 28 Mar 2025 15:01:29 +0000
Manifest next update: Fri 04 Apr 2025 15:01:29 +0000
Files and hashes: 1: y7aOmQU8HeJHirvi3_KrzsDRsUg.crl (hash: 2NTLo+HsIh4TClUzEtS5m9hGBJiNZpdi1vuhXwVQtJQ=)
2: A6D6CA7E022C11EBAC47A831C4F9AE02.roa (hash: w/zPMK06vnyoVLL/BGNp77uAUStxaD44YXARWWRfkvk=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13423 (0x346f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149905
Validity
Not Before: Mar 28 15:01:29 2025 GMT
Not After : Apr 4 15:01:29 2025 GMT
Subject: CN=67e6b9c9-d7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0a:33:28:94:db:88:80:93:7b:fc:54:66:be:
f7:54:ca:b2:a1:2d:5c:4d:99:b3:36:ae:db:01:dc:
6c:0a:ef:05:07:95:43:ac:d2:76:50:cd:91:5a:88:
c2:43:da:42:83:d8:9a:9e:5d:a4:85:a1:fd:e2:1d:
20:ed:c5:98:99:d3:7a:f9:40:95:80:f1:86:55:70:
a8:62:c1:15:46:24:e7:15:37:24:bb:43:42:57:ec:
6f:a8:6b:d5:f3:f5:18:0a:86:53:10:49:f0:07:97:
06:97:7b:0b:27:3e:53:3b:a0:3f:d6:b1:2f:03:bc:
70:8a:cf:41:67:c7:37:be:ae:8b:aa:aa:76:13:b9:
f5:f1:cf:83:67:d5:b2:d9:9f:b3:57:fb:38:82:9b:
4c:f0:70:6e:5e:e5:e0:51:b5:26:c0:1e:f6:d3:ab:
b3:7b:04:5f:34:26:ba:b2:b2:bb:99:46:e1:1d:5d:
31:7a:c7:4c:9a:03:91:7a:f2:f2:83:93:22:de:07:
d6:4d:70:e5:8d:91:5f:08:36:be:49:bf:38:b3:ce:
7b:57:5f:c3:3d:25:98:2c:3c:2f:1d:a2:79:96:2f:
33:02:c0:71:c6:a1:62:cd:bf:59:c5:0e:98:bb:3d:
8f:65:ce:59:ad:74:ed:1c:df:04:f8:56:73:0a:f2:
1e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5E:D1:62:DD:55:08:20:18:14:A3:E5:9A:75:AA:4E:BB:68:CE:EE
X509v3 Authority Key Identifier:
keyid:CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:73:e9:8c:82:6e:4a:64:13:bf:d7:14:a1:0b:a2:c4:10:4f:
b5:d9:19:0e:bf:35:23:15:87:16:8d:66:3d:47:be:4b:af:5d:
49:db:41:ee:a1:fe:24:0c:30:81:34:e8:c2:12:6a:8b:e1:18:
19:63:e8:d0:0c:00:41:49:f1:cd:14:4e:0b:b3:ad:f3:74:5c:
9a:40:f3:b6:d6:6e:63:40:9c:1c:2d:c6:da:97:0f:5e:63:98:
f8:04:75:e0:e3:2a:73:00:e1:e4:0d:a8:4f:08:53:7e:2c:7e:
e6:f0:71:7d:3e:45:45:af:c3:01:e5:67:60:0a:14:31:1a:dd:
2b:61:f1:28:64:e5:1a:26:af:10:be:94:a2:0d:03:2b:b5:fb:
72:05:e8:f5:7b:b5:29:b5:f3:78:86:2d:4b:1b:a7:d0:bc:28:
90:93:ec:07:64:bd:86:2e:89:bf:32:9b:1b:09:d3:45:5f:c8:
0b:8f:da:b0:06:b0:03:a9:5c:65:ce:88:21:b9:2e:96:50:ed:
44:a4:98:2d:1b:5b:58:fa:5c:aa:5e:2f:64:bf:21:38:b4:a9:
c4:e5:d1:33:7e:90:94:fd:14:ca:eb:48:28:83:9e:81:82:01:
15:8c:52:9b:e2:aa:ac:09:0e:49:e9:fa:9b:1c:e9:b4:62:04:
94:05:f5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:26 2025 by rpki-client