Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft
File: UHRCEm0jxuW-SuMZdJsnbhcum1w.mft (raw, json)
Hash identifier: HVM1aHNZW/PePAd2YgMnwf6bw/1qRw3TAEA37HyKLZo=
Subject key identifier: 46:9C:6C:37:92:ED:06:FC:F7:CA:B9:C4:28:83:9D:F6:75:B6:DD:27
Authority key identifier: 50:74:42:12:6D:23:C6:E5:BE:4A:E3:19:74:9B:27:6E:17:2E:9B:5C
Certificate issuer: /CN=A91790ED/serialNumber=507442126D23C6E5BE4AE319749B276E172E9B5C
Certificate serial: 0E2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHRCEm0jxuW-SuMZdJsnbhcum1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft
Manifest number: 0E2B
Signing time: Fri 28 Mar 2025 17:52:10 +0000
Manifest this update: Fri 28 Mar 2025 17:52:09 +0000
Manifest next update: Fri 04 Apr 2025 17:52:09 +0000
Files and hashes: 1: UHRCEm0jxuW-SuMZdJsnbhcum1w.crl (hash: XBQOma8ERGJd4CeUyBqjFL/HzIepOu7anm24RU/2YL0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3627 (0xe2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91790ED
Validity
Not Before: Mar 28 17:52:09 2025 GMT
Not After : Apr 4 17:52:09 2025 GMT
Subject: CN=67e6e1c9-7161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:86:cc:58:8f:22:7e:c0:e4:d5:17:d3:aa:
28:c0:2c:84:20:60:f1:e0:41:2c:a6:19:95:22:68:
6c:8f:ae:b9:cb:bb:65:90:7a:81:b5:0a:81:2f:9b:
50:2e:c6:88:2c:fd:1a:06:28:c8:fe:e1:60:9f:3f:
f2:df:38:87:c5:b1:bb:2e:c7:70:3c:42:59:4d:1d:
69:ad:eb:4e:bb:5f:d0:36:a0:f7:f4:e5:5d:54:fe:
8b:1d:85:8a:a3:5c:57:ad:ba:c7:96:c9:ca:ac:30:
38:d6:5f:68:15:87:8f:06:c9:eb:53:05:40:c8:19:
34:26:8f:af:cf:fd:39:be:b8:d3:c7:57:b7:cd:b8:
27:1b:a1:9d:9f:63:69:f4:85:43:12:6d:29:de:d5:
e7:97:45:66:f2:f4:6e:6e:39:56:9f:40:0a:04:69:
21:79:90:92:96:7a:1b:d8:da:2d:49:33:58:84:f9:
c0:82:0f:ab:f5:0d:98:29:c2:be:8f:c8:5d:77:2d:
14:2c:58:35:66:c3:8d:02:e9:b9:07:c3:2e:70:76:
d3:fe:cc:f4:b0:f6:13:c7:7a:bf:63:a0:67:de:cf:
a3:99:0d:02:79:39:17:e1:95:9d:e1:ff:a2:93:44:
7b:8e:7b:43:89:3f:1a:04:ec:38:d8:0e:cd:13:1d:
c5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9C:6C:37:92:ED:06:FC:F7:CA:B9:C4:28:83:9D:F6:75:B6:DD:27
X509v3 Authority Key Identifier:
keyid:50:74:42:12:6D:23:C6:E5:BE:4A:E3:19:74:9B:27:6E:17:2E:9B:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHRCEm0jxuW-SuMZdJsnbhcum1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6e:fa:b6:d0:56:6a:d1:f1:86:ca:24:44:2c:7b:1e:de:b6:
8f:f6:32:26:48:75:4e:b2:65:74:14:28:37:54:c8:f9:fd:67:
fb:95:2a:69:10:03:08:33:94:da:f3:ee:92:88:bc:eb:e5:80:
0f:32:2c:02:fa:8e:e3:64:54:69:39:2d:5f:dc:c4:1c:9c:25:
a4:ed:1b:50:de:d2:33:8a:e4:e0:9b:03:87:52:97:8b:68:aa:
a8:5d:ea:1c:19:0b:16:56:f5:2a:59:af:40:95:ef:6e:1c:39:
52:42:53:21:0d:b0:43:2e:88:fa:38:fe:08:49:85:b0:64:83:
8a:5a:48:7f:a0:39:6b:1e:c8:aa:8d:8c:89:c5:ac:7a:d9:71:
ba:99:e1:6a:e8:5f:60:b4:6a:8e:92:2f:b6:3c:3c:7c:ae:4e:
d9:6a:91:50:4d:e1:5a:14:e6:31:45:24:1c:38:56:5b:b6:34:
1a:6b:8f:09:bf:35:11:3f:0d:5d:6e:5a:4c:80:4d:7a:d0:da:
c7:da:a2:1f:2a:2a:8c:eb:19:3d:ec:cb:d0:af:d5:1e:76:9b:
b0:58:0e:45:09:32:22:d1:b1:d8:de:d5:dc:fe:4c:00:db:ea:
65:fb:16:9e:69:c7:c1:75:5e:5e:35:a8:84:b9:30:05:5a:af:
8e:db:9e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:14 2025 by rpki-client