
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
File: 9DRcMU1uvt60X-B1X4_-rPNjy4o.mft (raw, json)
Hash identifier: k1fcSfKZ/Hr4cWQ1hexZgdw1SpIklOo6aPtRErYUExo=
Subject key identifier: 20:04:F9:B8:FB:29:A0:87:B9:9F:B3:A7:AF:B9:C7:05:4F:05:B2:3F
Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A
Certificate issuer: /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A
Certificate serial: 0CA0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
Manifest number: 0C84
Signing time: Fri 28 Mar 2025 18:29:28 +0000
Manifest this update: Fri 28 Mar 2025 18:29:27 +0000
Manifest next update: Fri 04 Apr 2025 18:29:27 +0000
Files and hashes: 1: 9DRcMU1uvt60X-B1X4_-rPNjy4o.crl (hash: pFIdbzn9C3AXDV1z7U4u4m9VqAVwme27xYVGoHuPoG4=)
2: B4B32D509EDD11EC85676D09C4F9AE02.roa (hash: HUKn8TCAiBNnvKqCcCok66Nsu0wRIivvDnUfIyEmyBw=)
3: 2477AFC6D56511EDB2407741C4F9AE02.roa (hash: +UszTokGWITuaKodHVqtXowS/kPpAyLOoDwxxniGhh8=)
4: B36E1C029EDD11EC85676D09C4F9AE02.roa (hash: va4jKyvaWBHSOXW9lhNLFk3dXPhiBg3Z1DqKqXpZves=)
5: B5EA3B509EDD11EC85676D09C4F9AE02.roa (hash: PI+4io6zs54SvjfIWW1YmDzNzGjU5q2yfd6LaVWJgGw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3232 (0xca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158D75
Validity
Not Before: Mar 28 18:29:27 2025 GMT
Not After : Apr 4 18:29:27 2025 GMT
Subject: CN=67e6ea88-f80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:05:26:36:15:bd:ea:d5:be:5a:f8:22:bf:99:
47:dd:89:61:4e:0b:05:21:0e:fa:cc:0a:b7:50:be:
ea:5e:49:27:f6:84:9e:14:2a:01:2a:d8:d0:d6:71:
fe:0b:70:c4:19:dd:63:bf:dd:12:27:b1:28:07:35:
39:d8:b1:36:a5:63:d7:ba:28:ef:4e:e9:a1:e4:9a:
d6:b6:76:69:6a:db:91:f4:52:29:7f:34:8e:eb:c6:
70:08:ad:12:f9:3e:57:a4:e8:68:ed:30:a9:77:5e:
67:cf:ff:5c:44:b5:1a:2b:c2:7f:40:4b:23:f9:20:
b2:51:00:b2:42:ee:97:03:30:3d:35:e0:50:5a:25:
6f:f6:99:41:a7:91:55:d8:b5:29:65:cb:2e:08:a1:
bb:ed:3f:27:93:0d:58:21:a3:56:10:58:be:73:66:
41:0c:ae:24:4b:88:26:a2:aa:30:68:da:9b:64:b2:
41:3c:d1:02:3c:44:8f:f2:44:d7:5b:b7:3c:58:02:
0d:21:9b:ad:0c:aa:76:b7:67:42:fe:00:16:6a:e7:
81:ae:8b:b6:84:25:f7:d7:20:5b:c3:0d:aa:57:08:
69:fc:82:1a:96:5b:d2:43:3d:f7:84:a7:6b:1a:7d:
87:98:03:bf:54:d5:cc:ec:d0:6e:f9:c7:9a:f0:7b:
98:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:04:F9:B8:FB:29:A0:87:B9:9F:B3:A7:AF:B9:C7:05:4F:05:B2:3F
X509v3 Authority Key Identifier:
keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fb:e7:0c:81:63:c5:5a:32:da:00:b9:2d:62:ae:37:32:9f:
c5:c7:50:af:a3:bf:97:5e:e8:d5:f8:08:53:04:23:78:7b:68:
11:fc:b9:d0:2a:a9:49:09:26:a3:b0:e3:c8:e8:9a:7b:71:17:
03:4e:be:ed:df:71:83:b3:aa:45:35:cd:c8:8f:75:b0:90:95:
f4:33:20:d0:e6:73:45:b3:11:38:0a:b6:75:a9:c8:ba:04:8e:
4d:ec:43:10:74:da:e5:5d:3b:d1:3e:1c:07:86:87:71:90:43:
ca:fe:28:92:6b:08:9c:da:13:ad:f4:5d:d3:48:02:0a:db:cb:
3d:42:89:9d:ae:e9:1c:2a:25:fa:06:84:b7:f3:27:de:e2:ed:
3c:c1:46:7f:77:37:28:5a:d0:f7:6b:54:87:2b:b6:92:0c:55:
26:86:34:43:a9:68:0b:79:60:73:b3:d3:a5:f4:38:2d:63:0d:
0b:81:29:95:14:b0:e7:84:27:5b:96:53:1f:98:6b:0f:46:7f:
57:38:67:15:58:c9:7a:d4:43:76:c5:eb:ed:e0:c8:dd:cc:e2:
7e:40:0b:48:f6:50:28:ce:47:d4:f2:e9:14:2c:e1:a1:8b:5f:
3e:15:43:f6:2c:c4:9d:94:15:c1:9d:d8:00:82:cf:9a:05:71:
b1:62:69:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:48:05 2025 by rpki-client