Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
File: BRxkf9n6kgFgZoaDhn19Oovl2cE.mft (raw, json)
Hash identifier: ECtU31Fckw+4twV52avMbe4qjS+QO49UTrBOLZ6UEEk=
Subject key identifier: 4D:F7:A0:FD:7E:0A:2F:D8:E5:CF:C2:03:ED:56:89:6B:80:7D:51:86
Authority key identifier: 05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1
Certificate issuer: /CN=A9176682/serialNumber=051C647FD9FA920160668683867D7D3A8BE5D9C1
Certificate serial: 3462
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
Manifest number: 3461
Signing time: Fri 28 Mar 2025 15:21:16 +0000
Manifest this update: Fri 28 Mar 2025 15:21:16 +0000
Manifest next update: Fri 04 Apr 2025 15:21:16 +0000
Files and hashes: 1: BRxkf9n6kgFgZoaDhn19Oovl2cE.crl (hash: AvZHHY/hctFqtXx7TA/wGXkvSiff4heDvD9mxg2ZvoA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13410 (0x3462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176682
Validity
Not Before: Mar 28 15:21:16 2025 GMT
Not After : Apr 4 15:21:16 2025 GMT
Subject: CN=67e6be6c-0892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:d7:27:59:22:90:aa:ee:42:dc:c9:14:a2:
7c:21:ad:2c:76:c7:d6:2c:ae:63:0f:70:08:5b:8c:
db:3f:b4:3a:80:b2:b1:fa:20:2b:1a:b7:9a:45:82:
29:63:b2:17:02:04:50:24:b8:1b:63:60:95:7c:97:
00:22:87:a2:fa:41:cf:e5:f1:c6:d7:47:32:d4:de:
67:e9:e1:65:03:85:d6:1a:e9:16:1d:45:0b:a1:e2:
65:59:b1:3b:e9:a4:19:72:81:c1:e8:94:3d:48:47:
3e:0d:6e:41:a9:5f:0f:27:d5:e5:33:f4:de:14:52:
35:14:92:ba:1b:95:34:90:d0:a1:f9:0b:a9:eb:ff:
d9:84:ca:f1:1e:fb:10:3b:ec:cf:51:38:f7:ca:1a:
02:58:93:78:a9:3c:ff:a4:9b:7a:b1:c2:c7:43:d1:
4d:4a:ea:42:70:ad:37:b9:05:a9:45:b9:7c:f3:e1:
e5:15:cc:8a:a3:3a:cd:56:cf:ef:f6:a2:b7:51:25:
f6:3c:f8:93:02:2c:53:59:90:74:06:9c:37:da:b4:
18:43:81:a7:5b:47:86:99:12:b2:93:db:8f:72:aa:
fd:a7:30:7f:04:ba:82:ce:d5:51:25:ca:bd:01:88:
41:44:8a:e9:8c:ec:58:8c:f2:f6:42:b1:1a:c6:5e:
14:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F7:A0:FD:7E:0A:2F:D8:E5:CF:C2:03:ED:56:89:6B:80:7D:51:86
X509v3 Authority Key Identifier:
keyid:05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:dc:66:8d:13:8e:d7:7b:40:48:20:55:fe:2d:d7:3e:01:25:
f9:d2:b4:3a:dd:58:36:67:b1:3b:a7:c3:ec:43:2c:fd:5b:14:
66:db:57:8a:3d:ca:43:48:65:17:d0:59:4b:fc:03:d2:72:53:
04:f9:c3:2c:de:72:06:44:85:dd:b2:13:8b:df:db:82:64:c3:
1c:3a:09:a9:60:9a:43:59:87:93:01:9d:9d:8e:cb:fb:6d:84:
7e:30:98:09:de:f9:07:fa:79:41:09:3b:d3:4f:01:59:a1:88:
63:b8:34:7a:12:4a:f8:4e:25:c2:fa:bb:38:30:3b:42:90:62:
b6:c6:ae:0d:e4:5e:f6:c1:44:3c:1f:58:80:a9:5d:5c:bd:49:
4d:6d:4c:c6:48:c5:d0:70:4a:29:78:89:32:53:ae:71:c1:bc:
07:dd:f1:35:e5:e7:24:0b:ea:8b:b8:82:ca:2f:86:69:52:7a:
71:dd:08:aa:0e:04:af:d4:ce:d8:72:b0:f9:ee:af:b1:4c:cd:
d7:53:b3:3c:cc:19:05:64:96:3a:47:fc:fb:53:44:06:2d:4c:
c4:c8:bc:04:c2:2f:5a:de:2c:a0:ff:01:8b:00:34:cf:92:58:
47:c2:b1:1e:83:4e:ea:b5:74:cf:95:79:1c:bd:aa:0f:83:bf:
c6:0a:4f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:35:56 2025 by rpki-client