Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft
File: sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json)
Hash identifier: JIRxSF4IXDxit9fIYOL2ZLO2yBWQ9nj8k2dr9J/hwUw=
Subject key identifier: 14:B8:56:61:FD:59:A9:53:35:A3:98:CE:8C:CA:7D:08:2F:17:6B:47
Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7
Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7
Certificate serial: 0CA4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft
Manifest number: 0C89
Signing time: Fri 28 Mar 2025 18:26:04 +0000
Manifest this update: Fri 28 Mar 2025 18:26:03 +0000
Manifest next update: Fri 04 Apr 2025 18:26:03 +0000
Files and hashes: 1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: eagkwfxB/ksx4qijbVo0x7IWBTwxLjj9YGF/g0r1o8k=)
2: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: deD58Mq8q6NtgDApD9PQKblyJ8paeLDH7pnimAn97yk=)
3: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: lJUGsid+q5Tbb8CevBMe/tVeDQTPxzcpikP5JaRu0mk=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3236 (0xca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150CF2
Validity
Not Before: Mar 28 18:26:03 2025 GMT
Not After : Apr 4 18:26:03 2025 GMT
Subject: CN=67e6e9bb-2b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:47:ee:7c:ba:ee:17:b0:2f:d7:1d:91:92:
14:96:e5:0f:d8:8b:23:84:8e:e7:81:6e:b5:e9:9a:
2d:d0:3c:46:04:f9:e1:06:2d:75:8a:70:34:54:1f:
5a:d0:b2:d9:80:50:a4:51:03:d8:62:3e:18:73:51:
72:35:95:3b:f8:a3:a7:50:bd:17:3d:f9:8e:92:73:
60:05:0f:3e:17:93:c1:44:e0:be:91:28:6c:04:91:
54:a4:5d:98:82:ab:44:23:a8:e3:63:fa:ea:7c:31:
a4:74:8c:5a:ca:da:5b:43:03:d1:ff:89:e2:1e:7b:
55:87:44:5d:87:53:a5:d6:12:af:7f:45:4d:08:4e:
61:5a:f0:6a:4e:a0:e8:4a:ed:a9:f4:a9:1d:96:a7:
12:56:5a:e5:d9:cc:84:1c:4a:04:2f:03:7e:d1:a2:
93:f6:7f:7c:42:60:53:67:84:c5:dc:83:1b:65:85:
a4:f5:fc:cd:d6:ea:9b:b8:65:80:91:ed:c0:c3:0f:
c9:49:55:02:87:1e:e5:b7:8a:f4:6f:62:26:f5:1d:
2f:65:42:10:81:81:ae:a3:97:eb:02:6f:e1:2b:b6:
8e:a5:6b:56:23:b9:80:c7:43:82:7a:db:ba:16:17:
d7:26:48:39:fc:93:7a:42:1e:80:a0:ee:cf:ee:c0:
53:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B8:56:61:FD:59:A9:53:35:A3:98:CE:8C:CA:7D:08:2F:17:6B:47
X509v3 Authority Key Identifier:
keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:3b:c7:0f:5d:ad:51:66:e6:d3:ac:77:cb:3c:90:02:4e:d9:
bc:20:44:6e:4b:52:22:b6:d7:9f:e1:89:0e:6e:26:4d:fc:42:
87:0d:4c:56:d1:94:92:e0:c1:bf:32:2a:54:c1:51:f8:e1:c6:
dd:59:51:0c:40:a1:12:1d:49:af:99:5a:8d:3e:d8:4d:ff:42:
73:bb:c5:d9:13:4b:5f:cf:d9:5d:00:d1:ee:17:c4:52:8e:a5:
8c:8b:c3:e5:58:ca:f4:86:3b:00:9a:fd:f6:5c:57:06:ac:3e:
89:0b:f9:22:b3:3e:f4:27:a8:72:00:7e:ae:72:70:46:8c:5f:
2f:90:d0:77:79:8d:50:c1:29:ad:ae:da:db:cd:69:dd:27:0a:
b8:e6:a3:01:cd:3d:70:7f:dd:24:61:e3:4d:2c:df:79:7b:d2:
37:d4:ca:3c:14:ea:12:8b:78:2e:85:8a:54:79:da:bf:48:c3:
8c:d1:a6:50:65:73:f0:ce:92:38:a4:86:3a:e1:6f:49:44:b3:
c1:61:4f:d6:2e:7b:6c:2e:49:61:c9:50:4e:94:85:02:43:3e:
af:c7:28:d0:2f:0b:af:d9:c9:50:c5:9b:60:ce:09:81:ae:b1:
30:a6:13:c9:74:f3:ed:c7:4e:60:09:38:0b:d1:9e:f5:a4:f3:
7a:08:e2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:29:54 2025 by rpki-client