Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft
File: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft (raw, json)
Hash identifier: Y4nv8NXrMGl8PPC9TCJ8RHNUvrvKZ9M7N9hUFExvqKk=
Subject key identifier: A6:63:AF:DF:63:F8:4B:7A:D3:CF:50:48:BB:4E:42:3F:43:43:C7:FC
Authority key identifier: 26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46
Certificate issuer: /CN=A9161CEF/serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346
Certificate serial: 0AEA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft
Manifest number: 0AE0
Signing time: Fri 28 Mar 2025 19:36:28 +0000
Manifest this update: Fri 28 Mar 2025 19:36:28 +0000
Manifest next update: Fri 04 Apr 2025 19:36:28 +0000
Files and hashes: 1: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl (hash: aYLEucmQwsNleDOFOXhvd9Srlfr2F6kPDY5uzgzLcVU=)
2: FE836A62B19D11EC86ADF246C4F9AE02.roa (hash: QXqLhSGDZF+DtJ6p9go76wpNIwevUBavVoyccuwJbig=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2794 (0xaea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161CEF
Validity
Not Before: Mar 28 19:36:28 2025 GMT
Not After : Apr 4 19:36:28 2025 GMT
Subject: CN=67e6fa3c-13eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:8a:23:45:8b:63:0b:df:0e:77:a8:e5:d6:
12:57:27:d3:30:15:2d:bb:12:33:1d:fb:9a:c0:31:
72:74:e4:7d:99:61:2a:b4:7e:51:28:ca:b1:9a:c0:
52:e2:d7:4d:aa:a7:4d:14:c6:29:fe:57:dd:ea:4f:
88:ff:e7:31:fc:c6:ed:f0:9d:3e:bc:e9:5f:66:64:
48:05:31:2f:31:8c:e3:8d:64:8a:6e:05:61:e9:b8:
5c:c0:82:5d:c0:22:47:99:65:af:90:06:7a:c7:40:
90:a5:67:b5:33:2f:c8:a7:b2:cc:a2:f2:2f:8c:d6:
8a:26:92:03:52:4f:91:6d:73:22:1f:f2:50:ae:1f:
d4:50:1e:31:fd:fb:a4:24:cf:20:6d:8d:82:28:a5:
33:f2:98:19:fa:ad:a8:54:05:d8:47:e4:ae:88:54:
d7:34:31:8b:5b:80:a9:17:cb:b0:61:01:c7:3b:e7:
1f:36:b6:31:0b:9f:28:d0:5a:d4:d9:f5:67:67:30:
1c:06:c4:44:42:46:76:cb:61:ee:15:d6:81:c0:b4:
d8:48:bf:84:dd:0f:be:d3:f4:4e:11:30:36:bc:42:
f3:9f:bb:ce:1c:ae:97:6d:0c:fc:bc:8f:fe:e6:7d:
9d:57:7e:15:ef:d8:da:d6:f9:1f:31:e4:b9:6d:9f:
25:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:63:AF:DF:63:F8:4B:7A:D3:CF:50:48:BB:4E:42:3F:43:43:C7:FC
X509v3 Authority Key Identifier:
keyid:26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:4b:e9:81:70:02:b7:b9:31:47:a1:0c:d2:72:ed:20:61:78:
ce:26:df:3b:0c:39:59:d8:57:95:ec:30:27:b7:fd:f0:f2:ef:
6f:bd:47:fc:f6:53:19:44:08:49:33:71:49:13:03:97:f0:cd:
9e:cd:cb:48:e0:34:57:88:f3:5e:d0:35:7d:e0:8f:ff:17:dc:
13:ab:a6:b2:a5:1c:16:9b:fd:f8:b6:82:71:38:35:2c:6a:36:
b8:9b:aa:f0:c6:b7:1c:05:e2:9b:02:a1:ae:3f:ef:f8:cc:08:
ba:97:e1:ec:6c:ac:7c:7d:dd:f4:d7:f0:a1:a0:c8:d1:1d:6d:
2d:c8:94:24:f9:aa:b5:98:6a:c5:e3:60:50:53:99:3d:89:83:
84:3f:6e:89:a7:a5:59:b4:6e:fa:63:e8:90:c9:dc:eb:64:ae:
91:34:eb:77:39:4e:b7:2d:4f:95:bc:e6:42:4c:63:21:ff:0e:
6f:54:0a:ad:e0:b9:6b:91:8d:b5:10:a3:52:a0:b4:c1:aa:21:
e1:d2:50:d6:52:b4:3d:f2:12:5e:08:6f:a5:4b:cd:f9:82:d5:
80:42:22:5a:3e:d2:2c:a5:61:db:8a:c1:0f:ca:eb:6b:d5:f1:
e2:eb:bd:26:28:f3:ac:09:c5:46:33:98:46:88:c3:a8:54:62:
2e:f6:07:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:36:58 2025 by rpki-client