Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
File: D6nlM-haGDwUUwAIqLliP4VtXes.mft (raw, json)
Hash identifier: Z/mghjMojX8MqmkXkZC/131O12Ug1Z1nM/mj16gCW00=
Subject key identifier: 14:24:F4:FE:90:8C:CD:D8:14:A9:1D:BC:A5:1C:FF:21:77:B5:7B:9E
Authority key identifier: 0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB
Certificate issuer: /CN=A9160455/serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
Certificate serial: 0C09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
Manifest number: 0BF2
Signing time: Fri 28 Mar 2025 18:57:44 +0000
Manifest this update: Fri 28 Mar 2025 18:57:44 +0000
Manifest next update: Fri 04 Apr 2025 18:57:43 +0000
Files and hashes: 1: D6nlM-haGDwUUwAIqLliP4VtXes.crl (hash: y/D6JdmuB00wYkE+QCmeiAOuHNY8S69qVNkFa5MBwik=)
2: 49E515C2C0F211EEA14E0122C4F9AE02.roa (hash: hANV6ERnDblIoU8kPVg1/VC/XygDNvVoYUOvd3sESZc=)
3: AADE9E9C5B9511EEA8190143C4F9AE02.roa (hash: FO7phPYzfDla6aPOyvXALwSuyaWj8a9hgRlX/QWvNY4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3081 (0xc09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160455
Validity
Not Before: Mar 28 18:57:44 2025 GMT
Not After : Apr 4 18:57:43 2025 GMT
Subject: CN=67e6f128-3d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cd:83:6c:46:39:15:ff:f7:e9:3d:a1:64:5c:
10:11:e3:f6:7c:92:f5:69:42:36:ea:64:7c:01:ab:
51:5a:ec:17:dc:94:f0:74:7f:8b:17:7b:5a:cb:6e:
35:21:0e:af:73:c0:eb:7b:6e:b7:80:1a:77:7d:b4:
23:48:30:2d:f5:5d:6b:67:ff:2f:4c:bb:5f:c0:31:
c0:c6:d5:45:c1:29:f9:ca:14:b3:5b:57:6f:9a:78:
45:8d:3a:be:6e:8c:7f:fb:45:02:a3:bb:6d:43:f7:
41:78:2f:6d:f5:2c:33:f3:ec:66:08:5e:0b:9e:23:
49:85:6b:10:12:f4:5b:60:e1:d3:65:98:19:c3:19:
91:f9:21:e4:34:7c:69:4a:82:53:35:93:55:fb:2d:
74:77:f5:11:d0:67:87:7c:94:a9:0c:d1:92:71:df:
90:fa:87:b8:8a:73:8b:b8:fd:b8:fb:d0:e3:49:b0:
b4:63:f3:15:6b:a4:48:a3:d4:9d:96:13:71:6f:24:
63:a8:c8:f8:ed:74:56:42:53:9b:9f:05:6b:56:5a:
63:19:f8:04:fb:0f:d7:71:df:94:22:57:8e:de:79:
02:b4:a3:07:04:52:74:be:fd:a4:e1:0d:33:bf:2a:
2b:0b:a9:62:ba:66:88:2f:cd:5a:f6:e7:ad:ef:69:
a5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:24:F4:FE:90:8C:CD:D8:14:A9:1D:BC:A5:1C:FF:21:77:B5:7B:9E
X509v3 Authority Key Identifier:
keyid:0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:b5:37:c2:c8:ea:53:20:28:51:01:6b:1d:fd:3b:09:dd:8b:
f7:11:b7:f1:e0:a0:ab:f8:8a:8a:94:6b:f2:0e:d6:68:13:07:
96:64:a8:a9:7f:d1:9a:e6:7d:86:c2:89:55:21:1c:22:eb:92:
ae:bd:33:a6:b3:72:33:90:20:05:1d:55:aa:16:91:d3:92:89:
05:24:ff:95:91:96:fe:83:56:b7:0a:ad:dd:f4:9d:d3:b0:23:
f2:1f:7a:1e:45:59:ba:17:7a:7e:70:16:6a:85:61:30:5b:2e:
8d:ad:91:a3:9e:a0:c8:ae:dc:bc:f2:25:ed:27:ad:57:15:7b:
02:ae:6b:a0:ab:12:6b:e0:20:2e:ca:42:6d:ea:4c:82:2b:90:
d8:ba:c9:2b:44:4f:ea:a3:87:fd:5e:29:3b:f8:1d:cc:ed:a9:
a0:c2:72:e8:74:89:fa:6d:24:6f:2c:65:c5:af:c9:8c:67:ef:
38:5f:44:e3:8f:80:9d:19:3b:92:99:53:a6:0a:67:eb:28:43:
0a:4a:a4:4e:69:d9:f3:61:94:07:68:40:fe:93:21:70:be:c6:
8e:cb:d5:93:d7:9d:2a:d6:c9:59:d5:79:bf:2f:50:95:f1:37:
40:50:77:5c:ae:2d:05:70:56:f5:99:d0:0e:c9:9d:d1:1f:e0:
64:31:fb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:49 2025 by rpki-client