Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
File: XCJQF8zJYrDnOQswzwpWIvfN-u0.mft (raw, json)
Hash identifier: UzoIiJYQyFjhch3B8SkEVuQJAVmG2q/suE0yP+/Ga8A=
Subject key identifier: 5C:D3:3C:5A:AB:28:2D:AB:7B:0C:56:3F:5A:9D:CC:D1:03:49:CA:4C
Authority key identifier: 5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED
Certificate issuer: /CN=A9154330/serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED
Certificate serial: 1292
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
Manifest number: 1290
Signing time: Fri 28 Mar 2025 17:11:57 +0000
Manifest this update: Fri 28 Mar 2025 17:11:57 +0000
Manifest next update: Fri 04 Apr 2025 17:11:57 +0000
Files and hashes: 1: XCJQF8zJYrDnOQswzwpWIvfN-u0.crl (hash: KXoA3o9XM/EudM6LKQ58Zk8zE+XqUXpjI8E8aNdCdIg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4754 (0x1292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154330
Validity
Not Before: Mar 28 17:11:57 2025 GMT
Not After : Apr 4 17:11:57 2025 GMT
Subject: CN=67e6d85d-d8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:82:52:1b:01:02:81:13:4d:5d:ed:68:1e:
29:14:a6:b3:ce:be:8e:6e:78:72:90:bc:43:95:1a:
30:80:7b:a0:d5:ba:04:4a:84:ef:9e:27:5b:f4:89:
9b:56:95:af:f8:8b:d0:90:73:94:bd:3a:d3:aa:17:
aa:f3:e8:55:25:3c:7b:61:3c:52:18:95:7f:e4:5b:
ac:28:56:2d:a5:fa:8f:ca:59:d6:0d:d4:7d:ae:e1:
2c:e0:1e:82:f8:54:39:bc:59:d8:b5:af:b0:23:06:
70:ac:51:6e:13:89:1d:50:31:3e:46:2a:3d:04:40:
c3:2e:ea:b4:d9:3a:d5:1e:26:5e:e3:1f:47:76:13:
1f:47:68:97:5f:b9:fb:79:41:21:c2:a0:fa:53:6f:
82:61:93:c1:8c:4d:66:7d:2c:e1:df:3d:20:04:20:
f6:a6:a8:fb:d2:ea:b2:1c:ec:98:ac:62:fe:3b:f7:
c0:58:c3:81:80:f2:b6:0b:0d:22:55:38:9e:32:05:
e2:06:80:a1:53:2d:e0:38:d9:56:ab:f4:1e:73:0e:
42:08:82:d0:55:89:e0:c1:91:2d:b0:a5:b3:66:5d:
2b:3e:1b:f8:58:71:f9:fc:49:92:91:33:31:24:01:
74:16:e2:64:9c:07:1a:6f:7f:f6:ea:70:95:56:72:
58:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D3:3C:5A:AB:28:2D:AB:7B:0C:56:3F:5A:9D:CC:D1:03:49:CA:4C
X509v3 Authority Key Identifier:
keyid:5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:72:a5:1a:90:22:83:dd:7c:44:97:31:b2:e5:06:57:fb:46:
40:ba:84:9a:6b:34:f2:6b:37:c2:f9:41:b7:d3:20:b2:03:0e:
c2:3a:83:ba:1d:77:e2:b4:45:ed:0a:07:a3:f7:2a:e4:d0:9c:
4b:e1:4c:75:69:83:91:25:26:d1:eb:91:c6:5e:cd:4e:c9:25:
e5:76:af:0b:22:41:66:61:1b:99:7e:60:b8:d0:a6:3e:fc:60:
2f:61:5c:d9:ab:c9:24:4b:ca:95:77:5e:24:bd:dc:5f:98:c2:
97:b0:0d:ae:bc:df:3c:22:b9:fc:b8:ad:4a:7d:c0:9f:4f:d4:
d2:0f:50:03:1d:8f:d9:20:88:36:b2:00:2a:20:e2:46:09:f8:
f2:1c:6e:3a:34:a7:4c:31:7f:0a:6f:20:bd:be:17:95:2d:4c:
3c:04:7d:b0:84:07:95:75:5c:05:d5:f5:47:07:06:34:de:5f:
d3:26:a8:3c:01:35:ed:f8:5f:e6:26:f8:b6:a9:e4:af:9e:88:
29:50:7d:82:f9:c8:e7:13:de:c4:82:8b:8a:2c:a6:6b:e6:18:
eb:8a:57:c1:17:5f:4f:76:c3:69:15:72:38:45:a9:d5:29:69:
3d:fd:75:f3:47:08:d9:87:1f:ef:a3:ff:dd:77:24:cf:18:0f:
93:71:76:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:59 2025 by rpki-client