Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
File: Ty_T8AtY8TSpqOPn3ajY0grANSc.mft (raw, json)
Hash identifier: 2+rEpclL3Ha4S4Gvtap/e8ZnLkuwU3zvgqrjgeD82IU=
Subject key identifier: C5:5F:D8:F4:FD:CA:A5:74:82:C8:79:2D:16:90:58:3F:3A:59:A2:11
Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
Certificate issuer: /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Certificate serial: 34E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
Manifest number: 34A7
Signing time: Fri 28 Mar 2025 14:16:52 +0000
Manifest this update: Fri 28 Mar 2025 14:16:51 +0000
Manifest next update: Fri 04 Apr 2025 14:16:51 +0000
Files and hashes: 1: Ty_T8AtY8TSpqOPn3ajY0grANSc.crl (hash: kfkb4gO75DVfTf1rhKIavnOjUHtuYtlg+c9S/QRrWIM=)
2: 5D81654A561E11E7A4FFF329C4F9AE02.roa (hash: lNgj4TvSe3KKVyyrTSvIWXZ/d+PVLLALfHGvhjBEEiE=)
3: 3869DF8A1C6011EEAF58FB61C4F9AE02.roa (hash: nfzhFLP0jYKTq0z6wHGwsoz8GMYhYCaKTE6tTnCuKUk=)
4: B5885EF852D411EC8C8CE26CC4F9AE02.roa (hash: r9l8dniBLJAah6kBshgsvvbb8QtLGysiZozs08rVUnY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13543 (0x34e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174880
Validity
Not Before: Mar 28 14:16:51 2025 GMT
Not After : Apr 4 14:16:51 2025 GMT
Subject: CN=67e6af54-e3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c7:41:3e:5a:06:13:a4:a7:c2:46:b0:76:80:
d4:48:f6:e8:6e:b1:dd:a8:83:a9:cf:03:96:cc:1e:
d4:d0:3c:72:10:71:ab:39:7b:98:fc:90:94:ce:c8:
fc:6c:b5:2a:7e:5a:ad:26:52:99:1f:44:27:00:08:
19:9f:a3:56:d6:4c:eb:63:06:af:35:3e:d8:0f:d4:
5c:74:e8:d4:24:23:cd:10:44:ae:a8:28:39:eb:ed:
96:ac:e9:77:76:d8:fb:2b:d9:d5:a1:a0:93:33:58:
25:e6:a5:b4:9b:22:28:91:01:ab:9c:65:e5:cd:04:
95:ae:d9:92:f2:b9:d1:b4:23:b8:19:5b:ea:06:8a:
25:26:42:03:90:1b:52:2f:4f:54:bf:b4:5e:ea:51:
be:a4:56:d4:4a:1f:f7:d7:c6:11:2e:f0:d5:68:bd:
bc:d9:63:25:55:42:6f:a5:22:f0:f4:bb:b3:16:5e:
5f:19:27:7e:58:25:84:f7:49:0b:ca:36:bb:cd:ef:
d4:4a:ef:23:90:86:08:04:03:37:ff:90:22:6a:ab:
97:a6:31:c8:ec:e7:7b:fc:6d:3f:f9:8b:b9:7b:3e:
ba:83:be:d1:ab:b7:cc:47:eb:0e:89:1d:26:de:d7:
e7:7b:ab:99:5b:c5:10:8a:96:86:a6:0e:09:a5:19:
31:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5F:D8:F4:FD:CA:A5:74:82:C8:79:2D:16:90:58:3F:3A:59:A2:11
X509v3 Authority Key Identifier:
keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:50:f0:63:2e:0a:80:13:05:63:ee:0d:5d:04:5d:62:d4:59:
fd:8d:52:90:ad:0f:f8:ac:0c:98:f1:a2:7b:d3:79:40:79:f3:
b2:ee:64:7b:ba:56:5d:a7:b9:01:1b:84:b4:cd:f2:cc:ea:c1:
6c:77:4e:23:5e:ce:ff:de:5c:f9:7f:3c:35:29:14:29:33:69:
18:18:ea:88:61:38:14:7e:4c:84:4a:84:ba:42:b7:a5:15:e5:
df:9b:28:4c:0c:e8:76:12:d0:e3:95:99:1d:1f:51:92:c6:b7:
6e:4c:23:c6:ba:bb:15:46:99:7f:74:12:7e:db:c8:b9:d2:86:
71:f2:1e:3b:8f:8c:95:06:9a:17:50:2d:de:56:43:03:02:66:
af:65:d6:23:b9:d0:cb:d1:57:ea:76:0e:dd:ca:21:49:80:42:
3a:5c:96:41:67:61:30:64:ff:35:1e:54:58:0a:40:b2:54:8d:
84:97:03:e4:ac:20:c0:d6:a4:06:d7:f5:bb:0e:43:ed:67:4c:
60:b5:72:1f:70:a3:06:03:62:77:f4:4c:df:68:0a:cd:78:db:
f7:e2:b4:09:ef:31:ac:18:4b:d3:05:7a:22:56:c9:fa:d5:c5:
16:af:e8:29:69:ea:71:41:07:24:26:0c:df:d7:70:e2:67:ef:
22:de:14:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:48 2025 by rpki-client