Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft
File: n9G-cXTisFCTO8GixenIZUcWBfI.mft (raw, json)
Hash identifier: d/irgn2onqlV1awn2/pg5MkpVWGRJf9uHqVwwN3N0Ak=
Subject key identifier: B4:35:AD:2C:7F:27:75:66:06:03:43:95:44:62:2F:AA:85:2D:F9:BE
Authority key identifier: 9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2
Certificate issuer: /CN=A9189599/serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2
Certificate serial: 074D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft
Manifest number: 0748
Signing time: Fri 28 Mar 2025 21:55:57 +0000
Manifest this update: Fri 28 Mar 2025 21:55:57 +0000
Manifest next update: Fri 04 Apr 2025 21:55:57 +0000
Files and hashes: 1: n9G-cXTisFCTO8GixenIZUcWBfI.crl (hash: MW7gajn90uMzqTVZjbnvwoIRLevaJDmPXvdB5fS8V/U=)
2: 1C9AC81A1B5411EB99C9EE6DC4F9AE02.roa (hash: sPnbljaDBmWrfqdfFlvNku+IoDBHr9vsXcs9cIAu9pY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1869 (0x74d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189599
Validity
Not Before: Mar 28 21:55:57 2025 GMT
Not After : Apr 4 21:55:57 2025 GMT
Subject: CN=67e71aed-236a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a1:26:9f:e8:ca:7a:5f:f0:fa:40:87:87:b7:
fa:62:ff:63:a6:c9:c8:08:57:ed:64:6d:31:a9:3e:
5d:73:99:97:54:f5:2e:14:cc:77:36:13:b6:64:9a:
ab:1a:8c:4a:8f:80:0f:f5:16:60:22:79:c4:97:c8:
19:74:ee:5c:dd:8f:73:7b:30:d1:f5:92:4b:a7:a2:
f9:a2:97:fc:0f:08:83:85:70:4f:de:6f:47:ed:8e:
c1:4f:12:05:8f:28:73:ed:fd:83:04:aa:92:79:85:
03:2c:c3:91:31:9e:9b:00:0c:bc:4c:4e:f8:93:ea:
cc:2b:13:27:04:58:a4:b3:fb:49:5e:ac:88:92:35:
63:d8:0c:56:b4:28:b7:d7:ef:15:f7:3b:f0:50:9a:
25:78:ee:09:b6:fe:b3:a0:89:ec:84:12:f0:3d:48:
5f:4d:a3:83:81:bf:39:77:74:18:e3:55:99:19:6f:
ce:da:03:13:a9:b6:48:7c:7f:c1:72:c4:df:db:1f:
0f:a2:af:97:1a:86:05:c6:dd:73:f1:7b:74:d5:92:
b7:23:6d:92:20:b8:e3:c3:c0:e7:3e:01:96:a1:25:
15:06:95:da:a5:19:cf:55:8b:01:cd:31:87:f5:11:
96:8c:66:e6:5b:8c:ec:5c:ba:37:aa:05:55:b4:b6:
ce:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:35:AD:2C:7F:27:75:66:06:03:43:95:44:62:2F:AA:85:2D:F9:BE
X509v3 Authority Key Identifier:
keyid:9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:88:4a:7c:7a:67:4a:bf:17:96:c0:90:6f:4a:2e:f4:85:f5:
a4:4d:a5:3f:99:ff:5e:6f:ea:39:14:c8:b7:05:da:c0:76:ab:
c0:30:42:35:28:69:3f:9d:e9:97:35:26:0a:5a:03:eb:33:c1:
c4:e9:83:88:e8:b3:c4:94:83:c5:2a:f1:b6:9e:79:2b:a9:5a:
ed:da:5c:36:87:86:0a:1f:82:3a:b3:bc:a1:fb:f3:d8:d2:a3:
d7:da:29:72:14:a0:6a:f8:a0:e6:04:fd:78:f8:e1:ad:5d:ac:
26:23:77:36:5e:89:1d:32:d3:75:a4:6c:21:b8:51:79:f0:37:
62:aa:db:e6:81:50:54:53:a1:84:6a:82:6a:76:56:18:a7:f5:
8d:f8:a3:83:64:9b:4c:6e:44:1e:23:94:a4:b0:88:6b:08:ac:
d6:bc:c8:27:47:35:c8:9f:2d:a4:f9:a0:fa:5c:53:67:c5:c7:
17:e5:5c:4e:38:94:37:7c:cf:27:e1:d6:66:aa:b6:84:72:96:
c2:c8:1e:63:3b:69:96:43:28:e2:e3:e0:ad:e9:78:45:16:45:
07:78:93:8d:de:35:06:28:02:5c:6d:e2:de:1b:30:f2:e9:b7:
5c:cd:82:f1:19:20:05:72:43:fd:f6:d4:4d:43:80:41:65:2d:
0b:67:dc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:18 2025 by rpki-client