Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft
File: Ed9s5Nq5aE7fbPXgPf3shvFc174.mft (raw, json)
Hash identifier: 6gxAzVleBIXh24dgMVnW+InY6EE/6ICMgceaGB8h188=
Subject key identifier: E2:26:1A:16:5A:E6:16:5C:58:A8:B3:8C:32:A7:1C:DD:F9:D5:81:05
Authority key identifier: 11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE
Certificate issuer: /CN=A9165DEE/serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE
Certificate serial: 0ABF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft
Manifest number: 0AB7
Signing time: Fri 28 Mar 2025 19:41:33 +0000
Manifest this update: Fri 28 Mar 2025 19:41:32 +0000
Manifest next update: Fri 04 Apr 2025 19:41:32 +0000
Files and hashes: 1: Ed9s5Nq5aE7fbPXgPf3shvFc174.crl (hash: JGeJgokmjiuxtDnCovOeydcj2wCv/IZlFpF9TCNSLXw=)
2: C66770F24B9111EA9A72503CC4F9AE02.roa (hash: xL/igmGv/tHvkJn5yKoATONH6AHHS5dqWF72gorDIBI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2751 (0xabf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165DEE
Validity
Not Before: Mar 28 19:41:32 2025 GMT
Not After : Apr 4 19:41:32 2025 GMT
Subject: CN=67e6fb6d-cedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:d3:29:77:a7:b2:96:78:d1:6f:80:c3:54:
6a:5c:3f:e6:65:17:82:99:d2:e7:08:6d:51:bb:be:
52:71:a8:95:f7:11:6b:e6:d2:a5:7d:4a:5c:ce:49:
7f:79:9a:61:9e:e7:f4:1e:d6:cd:e8:37:ca:f1:0a:
e6:8f:bc:6d:77:88:a7:97:f3:a1:4e:88:06:7d:af:
19:f8:b8:5e:5a:92:59:bd:62:fa:0e:b3:0e:94:b3:
b0:9e:f6:d6:34:4a:4e:eb:4c:ae:d5:2e:c9:6b:b1:
ad:3f:d9:6b:43:d2:91:eb:d2:36:67:24:51:67:91:
e7:c2:23:87:86:8a:83:ae:b5:0c:31:f3:38:65:b6:
10:a2:7b:14:17:6c:4e:fb:bd:24:1a:0f:93:da:bd:
dd:22:f3:94:7f:a6:a0:cb:55:81:7f:dd:59:49:42:
22:2f:e8:b0:52:09:8d:5a:bc:6b:17:37:bd:fd:62:
90:bb:58:bd:1c:ae:24:4d:44:a5:e4:5f:f1:21:f0:
44:7d:c8:74:ad:29:e1:c7:dc:85:33:3c:e8:4f:5f:
91:64:0f:39:20:fa:1b:cd:07:1a:8b:5f:31:96:7a:
90:ee:85:96:73:2c:a6:5b:88:9f:b3:88:78:e1:f0:
bb:0c:e9:fa:82:65:44:ee:2e:fa:05:61:62:7c:9e:
59:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:26:1A:16:5A:E6:16:5C:58:A8:B3:8C:32:A7:1C:DD:F9:D5:81:05
X509v3 Authority Key Identifier:
keyid:11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:87:ad:ce:d0:f9:bf:66:ad:84:24:b7:04:0b:db:d6:d9:72:
f4:88:57:24:78:ad:38:40:55:9f:57:7f:ed:87:b4:fe:f3:6a:
3b:d8:ba:82:db:91:d9:81:a6:e5:d6:88:9d:aa:74:65:a8:3e:
4d:0c:7f:42:ce:08:04:ee:14:27:a9:e7:cf:85:53:d4:25:01:
d1:ac:60:8b:05:83:8f:fa:2f:52:e8:d9:c2:5a:2c:24:73:23:
eb:2a:72:99:1a:f8:d0:c8:5a:ad:be:6a:a0:cd:d6:56:ea:4e:
2b:c9:da:53:29:c4:9c:f1:3f:ff:3d:1d:dc:59:73:3a:50:7a:
8c:16:2e:14:02:68:ed:12:43:81:13:fb:00:e0:c4:2a:e2:47:
7a:a4:e0:39:fe:7d:81:26:54:52:3f:3b:42:08:ac:95:43:95:
4c:d6:e4:22:81:ef:0f:18:d5:0f:a5:a8:9c:44:a7:78:8c:f6:
fb:cc:8f:e5:61:7f:12:ab:65:eb:49:7e:cc:69:b1:96:0b:df:
6c:53:5f:49:a9:3a:2a:34:4a:fd:cd:3a:67:0d:50:e3:b0:a8:
fe:b3:5f:5e:c7:bf:29:04:1f:c8:eb:d8:ca:1b:e1:25:03:5f:
df:94:59:49:29:f1:ea:2d:46:91:93:d6:ba:f5:57:3f:be:8c:
ff:d7:6d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:22:15 2025 by rpki-client