Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft
File: 5xSoFJfIF3hoy7TNszjD72zp6VM.mft (raw, json)
Hash identifier: AZQT5izexGo9Ii4UIhN3sNJztKfHBFrXti7b4JbgaT0=
Subject key identifier: 2A:08:EB:30:CA:A4:46:BA:07:9B:BF:C6:DC:59:34:92:20:C0:ED:23
Authority key identifier: E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53
Certificate issuer: /CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953
Certificate serial: 0A2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft
Manifest number: 0A22
Signing time: Fri 28 Mar 2025 20:02:00 +0000
Manifest this update: Fri 28 Mar 2025 20:02:00 +0000
Manifest next update: Fri 04 Apr 2025 20:02:00 +0000
Files and hashes: 1: 5xSoFJfIF3hoy7TNszjD72zp6VM.crl (hash: BZOOLXKOiSq7e1M+VuCYoMm6HgR3bHEGdAm6MWs2t4w=)
2: 9085F6C0B78911EFB9994180C4F9AE02.roa (hash: KPuYYAQ14XpM20WTZh+zfqEqRXqFeAhCtZEHNEUGMw8=)
3: CDD96B60B78911EF9BD3EF80C4F9AE02.roa (hash: sDoqH+F903pEZfTL5CZCahrin5P/dPEPc5OIr03Af9w=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2603 (0xa2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172C8D
Validity
Not Before: Mar 28 20:02:00 2025 GMT
Not After : Apr 4 20:02:00 2025 GMT
Subject: CN=67e70038-2735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1a:75:b2:13:eb:cd:25:97:00:fc:0e:9e:61:
78:a5:5d:7b:35:89:da:f8:f1:87:1b:6c:f9:24:63:
f4:30:c9:bb:a3:1e:d3:d0:fe:12:48:d7:5a:c4:4f:
fc:95:64:44:f0:86:6b:04:1c:12:14:90:4c:b3:76:
4e:8b:26:e7:91:87:c6:51:a1:aa:41:6d:65:04:5c:
26:09:11:74:bf:5f:da:45:1b:d7:93:65:0e:64:6b:
71:12:50:1a:f5:82:01:5f:9b:fa:2c:22:15:83:29:
79:ab:a8:30:4a:ce:0e:3b:92:77:c6:8f:c0:53:b9:
6b:07:c7:b7:8e:0d:df:e7:68:ed:27:f0:76:83:ee:
2e:12:60:4a:8e:66:86:e5:7f:74:dd:38:89:44:1e:
ea:63:03:46:3d:16:61:f7:25:7b:2f:b1:0d:9e:c7:
7b:b1:80:e3:52:94:ca:f8:ab:4c:af:fe:ce:eb:c4:
7a:ee:df:cf:a4:25:05:9e:fc:13:3e:03:c5:4a:21:
56:01:ab:cb:68:6d:51:e4:76:f4:87:55:d0:ff:75:
c2:30:a4:2e:6c:fc:c4:90:e4:ef:ad:8d:2b:60:e8:
57:09:8b:22:ba:f0:74:be:66:4c:4d:25:e8:6c:cd:
d7:4a:a6:2d:8e:e1:b8:8e:d9:b2:5f:6d:6d:2e:ac:
16:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:08:EB:30:CA:A4:46:BA:07:9B:BF:C6:DC:59:34:92:20:C0:ED:23
X509v3 Authority Key Identifier:
keyid:E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:33:3d:b3:15:54:ed:bf:66:86:15:40:98:ef:f2:ba:61:14:
e2:77:09:93:6e:bf:83:aa:59:e5:37:3f:1a:db:d8:e6:d6:c5:
ac:7b:b9:03:3b:55:df:e4:bb:61:dc:b9:f4:6f:88:2d:30:57:
09:81:13:b1:c1:2a:5f:54:cd:ac:17:86:a1:73:86:55:03:da:
1d:2d:bc:13:07:2c:82:f3:d3:23:4a:14:a4:2d:2f:3a:9b:86:
74:a3:9c:72:16:72:20:8e:64:ec:83:f0:6d:e0:90:fd:ac:6b:
aa:7a:42:08:51:db:e3:0a:cb:08:8a:a1:92:5e:9d:93:ff:30:
c1:c1:40:16:2e:44:50:c7:87:9c:78:24:44:fd:04:cb:ec:a1:
91:85:55:36:a2:7b:f1:5c:86:59:bb:c7:64:59:be:67:62:d5:
72:d3:7a:4b:d4:01:1a:89:43:ea:91:99:f1:60:39:95:79:1b:
3e:08:f2:45:02:f2:86:d6:4f:81:38:49:16:8e:48:ad:ca:20:
2f:c0:0f:17:35:49:56:48:cc:46:e9:9a:95:05:f3:2d:ab:21:
8c:cb:19:04:1e:08:ec:bc:bf:8e:d9:d4:48:39:ee:0e:d4:91:
62:64:a1:cb:38:ca:15:d0:16:c6:a3:bf:77:2d:fd:93:9f:5b:
8d:1b:6e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:30:05 2025 by rpki-client