Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
File: UG14DtF5dIDxUlE0f8KEQ9culQc.mft (raw, json)
Hash identifier: AXXisr+kVoO592E1HskLBKpQQlvn1lUV3tfUmRW1LPo=
Subject key identifier: 3F:DA:BB:76:C4:0A:7D:CA:6B:66:7C:07:A2:67:D4:00:A5:96:83:E0
Authority key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07
Certificate issuer: /CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507
Certificate serial: 0BC9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
Manifest number: 0BAA
Signing time: Fri 28 Mar 2025 19:11:28 +0000
Manifest this update: Fri 28 Mar 2025 19:11:27 +0000
Manifest next update: Fri 04 Apr 2025 19:11:27 +0000
Files and hashes: 1: UG14DtF5dIDxUlE0f8KEQ9culQc.crl (hash: Cwmhu/DGl+ouCC37/K8FNoKk/eKfpFP7JYi9tmg4d5w=)
2: E5B6117E2BC611EAB1456E4CC4F9AE02.roa (hash: 8xiW94BgUeQq9ZYVRmXYA3GrrXRDCnXkWRMC2enXdlY=)
3: FB2EC05CA3B111EE92169F16C4F9AE02.roa (hash: ZnbBQLWijX811JvZiE0GpFPKxpLE1gcXnN9dflC4yH4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3017 (0xbc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EB0C
Validity
Not Before: Mar 28 19:11:27 2025 GMT
Not After : Apr 4 19:11:27 2025 GMT
Subject: CN=67e6f460-5fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:e4:01:26:ff:c0:3a:7a:a3:3c:52:9e:bf:
fb:52:12:42:51:94:be:01:d2:9d:62:f8:b5:25:96:
a5:f6:87:f4:c6:f8:b9:e4:ab:c9:c5:c4:36:d9:9a:
78:aa:95:d8:21:9d:51:7e:df:0b:c1:e2:08:13:47:
69:43:83:11:f4:40:39:5c:4e:95:d6:bb:29:79:7f:
8b:a9:73:21:a3:1c:c0:68:86:ba:5c:97:29:95:14:
a3:53:8a:14:fb:85:19:66:76:59:d6:82:08:45:0e:
01:e4:3b:a6:aa:06:08:43:c0:a8:fe:24:30:ca:f2:
8e:3e:95:84:86:f1:90:a7:95:46:c2:84:35:1f:36:
79:6a:56:05:13:11:b0:9d:a6:1e:60:5e:ed:f7:15:
dc:ba:6d:64:9a:29:d4:3e:b0:b3:7f:09:e0:62:e6:
d7:7e:6b:b0:14:62:96:d8:e9:4b:73:b2:8a:fb:92:
6d:c6:02:40:1a:ea:8b:88:33:c3:09:3a:2f:c1:0d:
39:f6:2e:b3:35:2c:81:6d:d4:95:6c:3f:e5:19:1a:
2d:c8:a7:2c:17:13:07:37:06:34:89:2a:d1:c6:73:
32:ce:3a:09:f7:e4:54:52:cc:2a:c9:b8:eb:b7:ca:
20:5e:36:41:5e:dd:30:28:1b:0b:44:a6:93:8d:b3:
59:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DA:BB:76:C4:0A:7D:CA:6B:66:7C:07:A2:67:D4:00:A5:96:83:E0
X509v3 Authority Key Identifier:
keyid:50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:5f:84:6c:4f:83:33:35:ad:a8:72:d7:68:18:b0:7b:dc:46:
f0:3b:cd:90:b8:d7:d0:a8:22:21:db:90:d1:e1:a4:19:81:f6:
3c:ad:25:bd:d7:27:da:e8:69:34:c0:59:18:5e:82:bc:7e:18:
e5:10:49:b1:51:fb:91:fa:43:c5:f1:64:07:3d:25:96:f4:49:
96:a7:26:bd:27:18:7b:dc:c6:f0:16:5e:60:2b:ec:74:9c:96:
61:69:df:d5:1a:7f:3d:05:ef:34:e2:64:52:95:48:39:65:99:
12:a8:b2:97:95:08:77:e4:ee:68:c1:81:79:78:80:21:20:45:
55:01:99:43:59:b2:64:c6:b5:cf:09:05:c2:bc:cb:12:f0:d6:
33:46:97:c7:1f:59:88:a8:ee:e3:6f:ce:72:bb:fe:f4:da:01:
2a:8b:ee:c7:58:3e:b5:be:2d:96:fe:3b:92:d7:c9:d7:29:54:
9b:d9:15:c7:86:f6:ab:28:83:0a:f2:27:3c:9b:67:11:06:12:
b1:c2:94:00:d4:4b:57:a4:bc:4c:f8:f8:6b:de:e6:ab:8d:34:
ff:6c:46:66:9b:b0:25:c2:63:a2:15:e1:71:5e:f5:43:a2:f5:
c3:b8:c5:72:7a:38:a6:37:8f:7c:ff:76:26:e4:a9:85:ad:04:
b0:bb:e3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:56 2025 by rpki-client