Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
File: DYxttID--Lv1xosdQ5bdhfWTwUY.mft (raw, json)
Hash identifier: srNpRAl6Gf1NER/Mbs/7b2MaYI9j638WKBtXk6XG1Ts=
Subject key identifier: 95:2E:07:05:16:C3:92:39:AB:71:9B:EE:15:23:1F:94:AC:D0:7E:B3
Authority key identifier: 0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46
Certificate issuer: /CN=A9150A44/serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146
Certificate serial: 1125
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
Manifest number: 111D
Signing time: Fri 28 Mar 2025 17:23:34 +0000
Manifest this update: Fri 28 Mar 2025 17:23:34 +0000
Manifest next update: Fri 04 Apr 2025 17:23:33 +0000
Files and hashes: 1: DYxttID--Lv1xosdQ5bdhfWTwUY.crl (hash: htoZ3qgXdoGavI5938p1GUXwikPLkXIJHknJM9iXR98=)
2: 9F3D07940A3D11E9A4A5D873C4F9AE02.roa (hash: gFAOXeGkc2eCk0nFhSOjgbpqiUaf2WF1/qXSm8cRYI4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4389 (0x1125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150A44
Validity
Not Before: Mar 28 17:23:34 2025 GMT
Not After : Apr 4 17:23:33 2025 GMT
Subject: CN=67e6db16-e59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:dc:9d:8e:e4:5c:af:64:d7:95:12:07:78:
bc:c0:58:6c:26:88:63:98:49:72:3e:87:55:7a:8d:
10:eb:ae:9c:e3:a7:8c:7b:52:fd:92:a9:94:31:3b:
84:5e:cd:36:2d:3c:c7:68:f1:db:20:a1:5c:5a:6b:
21:b5:8b:ad:b3:64:ba:6c:c2:52:8f:d0:03:62:b2:
88:94:56:49:79:0a:83:3f:b7:60:ce:9a:87:24:f0:
95:d4:92:46:59:ab:d0:9a:84:03:15:f0:5d:13:3e:
1b:f7:58:21:b3:96:6f:53:54:0a:d8:a1:80:b9:8c:
8f:f2:5a:61:24:39:c4:a0:4f:09:56:f8:4e:15:ad:
8c:ab:9d:ff:c3:6d:f2:28:4d:6e:6a:f9:24:d5:08:
a5:ee:52:a8:c1:34:cd:32:0f:3c:ac:ce:2a:c7:2c:
29:76:a6:4d:ae:a3:af:bb:1f:08:53:36:19:a0:88:
11:45:88:72:96:87:bd:31:a9:d6:53:a3:0b:30:10:
9d:ef:af:b2:0f:28:57:c6:ca:4e:a1:be:83:d8:b7:
30:e5:b1:1b:08:a2:e2:b9:38:85:59:3b:20:24:32:
82:9f:16:f9:02:82:34:c1:94:92:8a:08:d4:24:28:
50:4d:6e:43:9b:0f:ab:28:ff:82:e6:21:39:16:46:
3f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2E:07:05:16:C3:92:39:AB:71:9B:EE:15:23:1F:94:AC:D0:7E:B3
X509v3 Authority Key Identifier:
keyid:0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:94:af:a0:b5:7a:ba:c2:ab:b2:29:62:4e:27:44:4a:5a:2e:
2e:34:dc:18:de:a8:a7:60:91:d2:47:30:28:cb:6c:a5:58:b9:
a9:75:db:85:fa:2b:5e:e5:d0:63:7d:2d:ba:73:17:f5:64:51:
e3:73:8c:fa:b4:3b:f3:98:d7:f1:cc:18:b1:ad:f0:b3:7a:88:
f9:6b:6a:a5:35:f7:ea:91:80:cd:e8:ad:e1:4b:50:5d:c8:ef:
ae:21:69:ba:2c:ba:2f:3e:e7:7c:40:7a:48:ba:4b:d6:c6:e7:
c4:cc:7f:5f:50:5b:89:19:4e:2f:3d:4f:84:30:08:8f:02:d8:
01:55:fc:00:8a:25:ff:81:4d:9c:fc:33:8c:fb:36:a1:91:38:
62:e2:03:f4:8e:f3:95:0d:4f:88:c1:1b:5c:2d:99:b4:b2:d5:
fd:9d:a9:4c:e1:48:29:ef:b9:4b:47:a8:d6:e1:af:61:3d:8e:
29:e1:35:6a:3e:84:74:50:b0:c1:29:a8:44:b5:26:e6:dd:06:
86:98:38:95:18:c2:cd:dd:61:80:36:51:6b:3d:9c:ad:05:08:
12:f5:91:2b:0a:92:b1:f9:96:27:ae:65:c2:b6:18:ac:62:ee:
22:53:58:e9:67:ca:09:b2:d0:dd:f4:54:0e:5c:64:eb:ea:21:
78:d1:29:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:22:12 2025 by rpki-client