Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
File: UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json)
Hash identifier: +040FWZAQSRTAFks51NIPCWltpVDdNyiVzMbSg70/+k=
Subject key identifier: BB:53:29:56:19:9A:70:DC:55:A3:0E:A9:93:15:AF:43:A0:67:73:A4
Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0
Certificate issuer: /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0
Certificate serial: 0A2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
Manifest number: 0A29
Signing time: Fri 28 Mar 2025 20:00:30 +0000
Manifest this update: Fri 28 Mar 2025 20:00:29 +0000
Manifest next update: Fri 04 Apr 2025 20:00:29 +0000
Files and hashes: 1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: IQ5VaiML4YQWnTM4dtpIa8KUUILBjVxKU5n4DnhXX94=)
2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: nyOJoLIDGp7/wafl1yH4CbKrruUiB3iOpUkQ72n7ZjM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2607 (0xa2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149DF2
Validity
Not Before: Mar 28 20:00:29 2025 GMT
Not After : Apr 4 20:00:29 2025 GMT
Subject: CN=67e6ffde-aace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:85:f6:70:c6:ec:c4:c7:15:cf:80:d4:66:25:
f1:12:8d:75:4c:93:52:38:fc:ca:4a:10:c5:63:cd:
94:4b:a7:50:d1:69:ce:e7:01:21:b8:41:3d:cc:9b:
db:0f:37:a8:13:21:ab:74:8b:3d:ee:8d:2e:a9:06:
0d:dc:95:57:d4:7f:b3:1f:68:c0:90:48:30:f4:2d:
c4:0f:00:99:52:28:fa:24:c0:d3:df:f4:e2:22:b6:
c6:41:40:9c:ed:f8:58:45:b7:5c:43:a5:d2:a4:0d:
19:3f:32:22:50:58:09:d2:e8:d3:59:18:0b:10:ac:
57:b4:c9:4c:6c:ec:a1:b4:36:23:a2:83:93:08:51:
8a:06:ad:dc:eb:5f:c1:0d:25:0b:b4:9d:26:3a:dc:
b5:c4:71:cf:ba:56:71:f7:c4:0f:03:ae:ac:2a:4e:
41:ba:ea:b9:72:c6:a0:69:72:1f:d8:d2:37:08:73:
c5:d2:c6:a1:b7:cb:d5:c4:9c:c4:0d:6c:69:ec:32:
b8:e5:54:7e:1d:0a:bb:da:8a:2c:63:95:f3:a8:ea:
03:f1:52:72:1a:0c:57:21:28:f9:d6:e0:54:f4:da:
60:d7:a0:27:1c:50:40:3b:e9:c7:68:fa:99:74:a2:
dd:5e:78:8e:8a:5e:d1:82:2b:b1:b8:39:9b:a8:c5:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:53:29:56:19:9A:70:DC:55:A3:0E:A9:93:15:AF:43:A0:67:73:A4
X509v3 Authority Key Identifier:
keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:72:11:93:cc:b5:2e:73:9b:43:8b:94:4a:22:22:18:17:db:
d5:4d:7c:cc:aa:38:c5:53:ee:06:a8:2d:07:ad:6f:71:e6:c6:
6c:db:42:0b:06:b0:77:b7:25:15:f3:8e:0d:d9:98:e8:3b:a7:
72:0b:3d:25:e2:60:eb:b7:00:33:0c:21:df:bd:d5:34:a5:37:
7a:10:f4:25:81:4d:02:60:fa:75:d3:e2:63:49:59:44:f1:5f:
15:57:99:bd:f8:76:66:fa:27:25:f5:f6:cd:08:5c:d8:cd:76:
60:26:b1:a9:d6:89:19:fc:29:e8:00:dc:96:f2:67:c3:77:bf:
30:04:f0:d5:1b:ed:84:f1:c4:6a:7d:80:34:21:76:4a:3e:df:
7d:95:fd:05:b0:57:74:0f:7f:2f:29:d3:40:b0:d3:2c:6a:f3:
bd:55:db:9c:58:e2:7d:1c:2b:a6:cd:50:38:d7:6d:52:67:0b:
bd:85:ba:28:65:24:8a:22:c6:0d:ff:dd:5c:26:95:13:77:53:
aa:8f:37:dd:4f:52:0b:90:85:31:8c:68:1b:c8:7c:78:b5:6a:
69:cf:b6:2d:ff:5e:9f:49:78:4b:c3:55:4d:56:99:4e:6c:5e:
af:f4:c5:dd:4d:7b:13:75:c3:72:66:ce:b8:7e:60:4c:36:7d:
69:a0:c6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:31 2025 by rpki-client