Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
File: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft (raw, json)
Hash identifier: iGz+a6sUpFvJaEJhH04Xlv4MsdzwaAPMCgVwqss0LUI=
Subject key identifier: C5:73:36:86:D9:01:80:E0:62:A6:33:95:25:6B:7A:9C:DC:9A:81:D2
Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Certificate serial: 0D07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
Manifest number: 0CC0
Signing time: Fri 28 Mar 2025 18:26:58 +0000
Manifest this update: Fri 28 Mar 2025 18:26:57 +0000
Manifest next update: Fri 04 Apr 2025 18:26:57 +0000
Files and hashes: 1: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl (hash: Tq9et5aiX26pDa+xctyFHtt4whwl0wWCy3VI6hwwTPQ=)
2: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (hash: FgvpUN85rtr+i1GuoDsaGwxZYbJ7H8djnKwJKhetLt8=)
3: C22B92AA081011EDBC3C4374C4F9AE02.roa (hash: OxkEmLMGkxV9qU2vxCISEVaV7VxznjkiRbOpszB8G5c=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3335 (0xd07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188F6D
Validity
Not Before: Mar 28 18:26:57 2025 GMT
Not After : Apr 4 18:26:57 2025 GMT
Subject: CN=67e6e9f1-c1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:83:eb:9a:3b:43:14:1b:e0:00:7f:b5:90:
94:e3:bf:b8:27:89:c4:9b:63:c4:c7:d0:70:46:8e:
4b:51:e3:50:51:c9:25:6e:2c:03:4a:63:b4:4d:eb:
60:bf:a4:3e:31:68:7d:d1:8d:4c:68:7a:62:37:14:
12:92:b8:3e:11:ed:b4:e9:13:6d:8d:60:2c:ad:17:
f6:68:50:ec:d6:4f:63:29:a1:66:8c:a0:ea:b8:c0:
be:f5:73:1d:00:2f:6d:0f:21:c3:ce:ec:9d:e3:59:
03:45:79:5c:7e:27:e3:4f:20:c6:ec:0b:65:26:7b:
63:12:e3:d8:e3:3a:3f:ab:21:12:e9:4f:6d:57:f6:
20:c8:39:5a:3b:da:8c:e5:43:b4:21:30:29:d5:f7:
ef:89:b2:df:9f:cf:fe:bb:11:e7:e5:d8:04:5e:6f:
7e:ef:84:b4:06:18:33:a1:53:14:29:04:90:2f:fd:
9d:5d:82:4c:cf:79:97:67:52:dc:8d:8a:83:ac:08:
f9:0a:93:57:3a:a8:e5:66:e8:23:e8:cc:5c:d9:e2:
f3:41:2c:59:ab:eb:05:32:9c:94:b3:70:8f:87:78:
2d:73:a1:10:c4:3c:82:29:22:ea:ac:99:75:87:63:
0d:69:58:6f:e9:b4:ea:1b:0f:7f:3f:d8:56:93:73:
d8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:73:36:86:D9:01:80:E0:62:A6:33:95:25:6B:7A:9C:DC:9A:81:D2
X509v3 Authority Key Identifier:
keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:1d:20:7d:1a:d3:77:57:b1:0f:57:96:a9:d3:2a:b8:dc:1f:
b4:9f:9d:84:70:9f:b9:71:c0:df:2a:99:c8:4a:d2:1c:07:36:
45:8b:5f:0f:3e:a2:31:8c:dd:67:8f:b9:a0:d7:a1:95:85:5d:
1d:af:52:53:3a:10:b3:50:b7:96:24:a3:f0:85:d6:56:4a:b8:
78:3c:2e:03:ff:4d:bc:7d:03:e4:34:10:52:fa:48:0a:56:99:
c2:84:7e:00:e0:69:e6:6a:75:42:19:b9:15:9a:70:0b:7f:b8:
57:92:32:cf:7d:83:bc:29:7b:7c:5e:3c:91:9f:43:62:44:64:
af:ab:84:6e:19:2e:e0:1c:64:3c:f2:2f:c2:36:2c:fd:71:bf:
f2:4b:9a:07:fb:8b:69:a3:05:c4:72:6c:c0:89:d0:c9:c2:84:
05:1f:fd:bc:ae:be:c7:a7:6c:f0:23:8d:11:54:c2:e2:ec:ef:
40:dc:61:cb:78:70:b5:dd:01:95:a0:9c:51:f4:66:c8:5b:68:
18:13:4f:6a:1a:f4:39:e1:d3:fe:89:5b:54:aa:a4:9a:59:50:
60:5c:1c:c0:1a:70:04:8e:32:57:29:ea:ff:29:df:44:c9:2b:
8a:21:23:4b:58:da:3f:7f:12:74:af:af:3a:c8:09:0e:51:9b:
77:ff:d7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:40:04 2025 by rpki-client