Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.mft
File: blskgROGqkqC2B9yxd0kmShvv9Q.mft (raw, json)
Hash identifier: bArlAeVYCgrTV6T1D9C8QnlaFeV3mAdlYQjkip2/vbM=
Subject key identifier: 8E:01:FA:2A:E4:8C:43:54:34:4A:D2:8E:09:43:4F:30:E1:3A:09:06
Authority key identifier: 6E:5B:24:81:13:86:AA:4A:82:D8:1F:72:C5:DD:24:99:28:6F:BF:D4
Certificate issuer: /CN=A9175251/serialNumber=6E5B24811386AA4A82D81F72C5DD2499286FBFD4
Certificate serial: 06C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/blskgROGqkqC2B9yxd0kmShvv9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.mft
Manifest number: 06BE
Signing time: Fri 28 Mar 2025 22:23:14 +0000
Manifest this update: Fri 28 Mar 2025 22:23:13 +0000
Manifest next update: Fri 04 Apr 2025 22:23:13 +0000
Files and hashes: 1: blskgROGqkqC2B9yxd0kmShvv9Q.crl (hash: WJv7Vpfn0lkbykzNZigwE3JzLnJCrrZ0XSmNGiIWXiQ=)
2: 3B9F9ED8FE9811EC9965A444C4F9AE02.roa (hash: ouFtzZYfiljlKOGtN7Lx+V8FqeIl/9AyXBh/466AOWs=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1735 (0x6c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175251
Validity
Not Before: Mar 28 22:23:13 2025 GMT
Not After : Apr 4 22:23:13 2025 GMT
Subject: CN=67e72151-5fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:de:fa:d7:45:26:a9:63:c5:b1:6a:a1:8a:
9f:77:7d:d9:fa:51:e2:d2:1c:5a:01:f3:52:a2:70:
ae:63:59:23:ec:0b:8d:f2:36:9d:bb:65:8c:b0:4e:
e1:d1:d9:2f:2f:87:91:05:92:20:50:15:f0:71:b5:
45:32:03:21:29:7b:f3:26:0c:6b:86:e2:c0:16:5c:
9c:d1:b7:ae:07:53:30:5b:79:10:8c:63:0a:ca:a8:
30:f7:8d:0f:35:d7:8a:32:f8:22:ff:64:50:2d:d9:
a6:5b:52:90:ad:80:e4:0c:07:a5:59:87:92:cc:ca:
20:1b:9e:53:da:e1:2d:34:10:89:8e:ec:2c:3b:d4:
82:ff:af:be:04:f1:1a:09:68:99:0c:cf:7e:ee:47:
66:98:d1:cf:0b:da:d1:6b:06:31:b7:4e:4f:23:09:
6c:3f:87:68:27:92:82:9e:2a:56:5c:78:10:c7:7b:
6c:71:ee:3c:2d:24:d0:81:cb:ff:d5:22:ed:a6:04:
ef:72:32:70:e5:5f:c9:5c:a6:9f:11:31:ee:62:33:
7a:6a:27:e4:a4:ec:4f:01:80:9e:4e:35:fc:71:57:
25:67:94:ca:60:cc:ab:dc:eb:d7:a1:ff:7d:c2:71:
31:e3:76:a6:47:d9:c0:3e:e4:73:0a:da:41:e2:ec:
44:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:01:FA:2A:E4:8C:43:54:34:4A:D2:8E:09:43:4F:30:E1:3A:09:06
X509v3 Authority Key Identifier:
keyid:6E:5B:24:81:13:86:AA:4A:82:D8:1F:72:C5:DD:24:99:28:6F:BF:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/blskgROGqkqC2B9yxd0kmShvv9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:66:f4:7a:3c:65:9b:48:ef:65:36:18:e7:d7:1c:27:6e:e1:
2b:11:14:ac:5b:2b:80:c3:07:fe:ef:15:09:1a:4c:56:d1:a8:
eb:48:d7:c9:2e:72:31:ef:c7:60:11:b9:11:73:5a:82:d2:78:
31:ee:ea:ef:f0:83:8f:31:0f:62:f1:a1:7c:38:9d:c0:c5:d1:
01:c3:68:d8:0d:03:84:c8:21:82:f0:51:e9:a8:1f:f0:44:73:
97:cc:76:1d:2f:b1:d2:f9:83:20:cb:b2:b1:90:e9:aa:da:0a:
40:8d:c6:ea:79:f7:46:aa:f6:84:d8:13:9b:ee:08:3e:84:23:
53:d8:34:fd:88:0c:7a:d0:e8:91:97:1a:be:2c:9c:f5:71:1b:
31:6b:c7:4b:d7:1f:64:51:7e:f0:53:2a:6b:a2:91:8a:e3:2e:
ae:83:96:c0:16:f9:a4:c3:7e:d8:46:4b:84:e0:2e:1a:a7:34:
55:fe:b6:05:37:ed:3c:f2:56:a7:33:31:2e:9d:ca:a8:e3:54:
89:0f:f6:c6:37:63:5a:b1:7f:5b:28:62:f9:cb:4d:76:90:96:
86:9a:e8:bb:5b:41:04:6d:aa:f5:30:68:49:95:53:2f:ee:fc:
22:26:99:19:8e:94:08:2d:b8:56:5a:42:58:e2:c0:a9:6e:2f:
bd:cc:12:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:25:00 2025 by rpki-client