Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
File: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft (raw, json)
Hash identifier: S0D1iiJrgSI73FEkMrK/q/dp/mHNFGb7jyu+VnKe72w=
Subject key identifier: B9:79:68:6B:E4:31:0A:F3:A5:22:24:66:03:C4:73:6D:09:8D:23:8F
Authority key identifier: 2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B
Certificate issuer: /CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
Certificate serial: 0A6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
Manifest number: 0A57
Signing time: Fri 28 Mar 2025 19:52:33 +0000
Manifest this update: Fri 28 Mar 2025 19:52:33 +0000
Manifest next update: Fri 04 Apr 2025 19:52:33 +0000
Files and hashes: 1: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl (hash: LS4gV3PPUChkjHBd7YmuX+FYdxV/DibZpw6hgKzmIMA=)
2: 5ABD5A320D7A11EB9D346C48C4F9AE02.roa (hash: 5TpXg41XhGRSVvUHK5XRVEgpyHLz9AA+kgJTUOprqi0=)
3: 5977CEE60D7A11EB9D346C48C4F9AE02.roa (hash: TRrnPYrOalEPWz9T5KXn22gUrdAbwDlWLGBn2HbQ6ag=)
4: 5A15EA040D7A11EB9D346C48C4F9AE02.roa (hash: 2Lal6Hihil8XYkgrg/1JrJLddglMRFIWSjh8Zg5doPM=)
5: 9A6A637EF48C11EBBDF92914C4F9AE02.roa (hash: 29WR9bK+1J7teRj22ZLgNx6ODw6+LHNBzuwuJrvhB0E=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2667 (0xa6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165456
Validity
Not Before: Mar 28 19:52:33 2025 GMT
Not After : Apr 4 19:52:33 2025 GMT
Subject: CN=67e6fe01-fcf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5d:97:41:d8:ad:96:67:54:45:92:a5:e4:82:
ac:c3:73:34:d3:4f:03:95:e1:ea:05:47:a6:3a:79:
3d:4f:dd:43:dd:0f:99:04:23:3f:ba:ac:31:ce:d1:
fc:bd:8f:de:a5:f4:85:0f:52:b6:54:55:c5:35:11:
de:e1:f6:f6:9a:d0:0e:2e:73:1b:73:4b:32:a4:9e:
18:3f:4c:ec:ab:78:71:d6:b4:7c:c0:46:25:20:35:
6a:fd:d9:69:d5:a7:54:d4:f3:92:99:c4:cb:b7:da:
94:fd:94:87:37:a9:1f:9a:63:2c:6f:37:c4:4f:69:
13:86:f9:97:ed:5b:e2:6e:2a:bd:6f:97:58:c5:14:
40:ad:4d:e9:c8:2f:e5:51:e8:01:e5:0f:5f:2f:e9:
02:ba:d6:16:8e:5c:44:0f:1a:7e:e8:cb:10:4a:69:
1a:02:4e:b7:7b:71:f5:76:16:6b:ce:8e:7d:5c:fc:
b0:11:3d:36:9e:43:b0:e1:81:56:78:ee:89:f3:20:
cf:0b:1a:19:a8:12:6f:0b:4c:52:f6:63:28:b3:84:
aa:ca:c0:a3:05:4a:1d:5f:61:e2:1d:2c:bb:c4:22:
9a:24:2e:6c:85:c4:c4:c9:8a:d9:46:5e:46:4c:f1:
4f:f1:6e:9c:1e:6e:6f:c4:6e:24:9d:ec:69:b9:c4:
fd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:79:68:6B:E4:31:0A:F3:A5:22:24:66:03:C4:73:6D:09:8D:23:8F
X509v3 Authority Key Identifier:
keyid:2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:5d:13:32:d4:e6:d7:32:6e:7e:26:11:7b:c0:1b:6a:ad:39:
1d:b0:06:fc:4d:a0:ed:4b:f5:b6:56:72:d8:55:4b:3d:0c:78:
ea:62:35:09:d4:86:81:14:37:c0:53:36:09:8b:22:e3:60:3e:
f2:db:27:14:61:03:e9:56:03:0d:e7:fc:8a:54:29:70:a5:c2:
ec:cf:22:00:0e:44:9a:c0:36:67:a3:a0:be:65:3c:89:e8:e6:
09:f9:3f:a3:46:2f:35:9d:be:11:71:1b:7e:1b:a3:cc:4f:7d:
68:c2:ff:97:83:05:9f:d4:3a:0f:c8:ad:7b:62:8e:c2:36:43:
d9:0a:fd:a7:0a:6e:15:06:f3:fa:18:b6:3a:0a:e0:80:0b:be:
a8:d3:47:7a:9e:9c:00:a3:68:34:6d:57:cd:71:b4:26:f8:a3:
a5:24:da:b3:20:31:75:65:b2:35:42:81:99:7c:61:b7:bc:24:
3c:15:04:c2:30:e2:63:bc:5a:7d:4b:fd:5b:d1:98:2b:58:37:
29:6f:3a:c4:be:c1:eb:b2:87:ad:74:b3:a0:1d:88:6f:89:32:
c0:91:f8:9f:34:5c:9e:6d:08:c8:a4:0a:a4:7d:72:af:e4:0f:
5f:ac:1d:08:9a:a2:4e:a7:33:1d:2c:fc:81:15:3b:82:0e:ff:
dd:b2:91:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:40:06 2025 by rpki-client