Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft
File: eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft (raw, json)
Hash identifier: m8lRZo4OvJvcRxtZepbmKdkMEnr76LFo7NRGBQDk+Qg=
Subject key identifier: C3:84:6F:11:E2:3B:B2:7E:52:C7:B2:DF:90:8A:8D:DC:FA:B5:CB:1B
Authority key identifier: 78:A9:92:67:D7:EE:F1:27:F5:FB:45:24:F7:9C:59:AF:0A:BB:C1:F4
Certificate issuer: /CN=A9163824/serialNumber=78A99267D7EEF127F5FB4524F79C59AF0ABBC1F4
Certificate serial: 25E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft
Manifest number: 2CBE
Signing time: Fri 28 Mar 2025 15:47:55 +0000
Manifest this update: Fri 28 Mar 2025 15:47:55 +0000
Manifest next update: Fri 04 Apr 2025 15:47:55 +0000
Files and hashes: 1: eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl (hash: jM+1UuNMLi0bb1/N9qaYMcM5qywi3pbqWejvDdO0o8o=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9700 (0x25e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163824
Validity
Not Before: Mar 28 15:47:55 2025 GMT
Not After : Apr 4 15:47:55 2025 GMT
Subject: CN=67e6c4ab-9d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:74:60:5b:d4:fd:61:13:63:2d:45:ff:cb:
6b:43:2e:ab:a4:0a:ed:f8:5f:0a:9f:37:a9:e4:58:
15:9f:9b:58:28:69:04:a6:d4:cf:03:41:7a:e6:fa:
a4:58:fb:25:ff:72:a8:a4:c7:2b:8a:00:64:b6:0f:
7f:96:cd:b6:9a:7f:3c:a3:25:74:95:c4:7f:0b:b3:
a9:93:e8:0e:76:58:dd:6a:cb:94:17:04:5b:97:27:
b2:8d:ff:3d:7b:c4:4d:73:01:7d:f5:40:53:d0:6f:
88:1a:49:22:85:78:3e:01:3b:35:99:53:6b:18:e0:
2a:ce:3a:5f:ad:da:c0:d0:9a:0d:a6:27:22:86:03:
ff:58:f1:48:d2:e4:da:10:0f:8b:d5:1c:6e:98:d2:
32:53:34:b2:9e:ce:c6:35:cb:7c:5f:cb:a4:21:34:
50:63:63:97:a2:ae:25:5e:d1:ea:52:bd:ff:1d:2e:
78:b2:f5:b7:82:1d:5c:34:67:15:b5:67:59:d8:c3:
50:ee:da:10:45:6f:5d:65:ed:db:12:67:c1:d0:7a:
26:fd:ea:ea:59:35:16:48:bb:8a:d2:a2:d8:a3:47:
67:f7:25:7b:ab:3c:31:b5:69:1f:1f:e1:10:bb:f2:
96:57:72:9c:03:7b:4f:ac:e5:03:8a:35:f2:82:83:
00:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:84:6F:11:E2:3B:B2:7E:52:C7:B2:DF:90:8A:8D:DC:FA:B5:CB:1B
X509v3 Authority Key Identifier:
keyid:78:A9:92:67:D7:EE:F1:27:F5:FB:45:24:F7:9C:59:AF:0A:BB:C1:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e0:ff:c7:b6:ae:6c:dc:32:f6:26:3a:22:90:47:9d:26:e2:
95:b4:fa:8c:79:a0:1e:9e:58:17:f3:d2:ad:15:fd:bc:71:6e:
3f:ef:69:75:8e:1a:97:c6:83:3d:7b:8d:83:83:ec:d6:88:7a:
5e:2c:37:23:bf:2a:54:a1:21:ce:8b:04:ec:66:6e:35:37:f2:
eb:7c:ea:78:52:a0:ee:70:35:db:17:7c:a3:d5:e4:3f:63:fc:
b2:6a:7a:66:78:9e:cc:df:bd:c9:97:03:99:d0:14:cc:1b:0f:
8a:c1:21:12:70:fb:e9:30:ff:05:34:2e:4a:f0:16:30:30:02:
07:c9:89:b7:e3:47:9e:80:24:e2:ec:93:13:10:ce:6c:18:5a:
8b:2c:66:2d:60:ad:37:e7:6c:6b:ae:52:f1:b1:9f:22:13:cb:
3e:e5:2b:92:cb:f4:eb:81:16:63:94:59:55:b2:86:12:9d:dc:
27:1e:07:1b:ed:58:36:41:03:ab:af:c9:16:bd:c3:7f:ea:92:
3a:bf:e5:fa:30:5f:13:0a:bc:82:66:53:c6:99:7f:cc:32:d8:
b8:74:0e:29:ca:9e:fd:7a:03:71:e2:12:49:7c:d1:1c:37:87:
f2:77:db:19:11:98:3d:14:5a:e8:72:de:30:63:f5:31:ba:3f:
fe:94:e8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:53 2025 by rpki-client