Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
File: OYkRMAEE18WLMm5WZLPXmi1GRuA.mft (raw, json)
Hash identifier: ebuXb/rn+U3pZXzGNc2HdzlIKYMCjoOJ+nX5Ae2oiNE=
Subject key identifier: 7E:72:85:9A:D6:8D:5F:24:77:03:94:F7:9B:AD:A3:6F:9A:27:3B:EC
Authority key identifier: 39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0
Certificate issuer: /CN=A918F1C9/serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0
Certificate serial: 09E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
Manifest number: 09E7
Signing time: Fri 28 Mar 2025 20:15:57 +0000
Manifest this update: Fri 28 Mar 2025 20:15:57 +0000
Manifest next update: Fri 04 Apr 2025 20:15:57 +0000
Files and hashes: 1: OYkRMAEE18WLMm5WZLPXmi1GRuA.crl (hash: pgfgKRhoYaJa6wVDbojVBDycWRuTD8QltlhPpZkoLHU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2534 (0x9e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F1C9
Validity
Not Before: Mar 28 20:15:57 2025 GMT
Not After : Apr 4 20:15:57 2025 GMT
Subject: CN=67e7037d-19d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:31:82:05:3d:e9:24:38:bf:33:d4:6d:fb:
13:8a:46:8d:75:b4:eb:ba:5e:f1:55:96:bf:26:59:
31:c8:a7:05:30:ff:16:1a:e2:21:15:8e:fe:bd:e9:
f5:aa:c3:ad:d1:10:11:bf:b1:1b:95:6d:94:7c:2f:
46:0d:93:16:b5:07:9f:44:0c:ee:65:39:93:6c:a3:
49:10:f3:5d:bd:0d:53:93:b4:46:a1:a6:17:20:89:
04:19:b6:52:90:28:42:ff:07:a1:d1:ef:61:62:31:
bd:21:b0:38:9f:88:13:d4:74:06:a3:c3:20:5f:e1:
c8:2c:50:9e:02:dc:f2:a2:ec:40:b3:8a:6c:c6:8b:
c1:0b:78:6d:8d:a8:d0:a1:7d:fd:42:52:7f:05:e3:
a0:96:7c:53:92:d0:53:d1:33:0e:f7:2d:bd:2f:29:
0b:92:68:e6:81:71:7e:6a:f6:17:c4:99:3b:53:1a:
ee:9f:b0:6c:81:e1:37:f9:fc:7e:fe:68:91:5d:95:
a5:86:44:c0:13:87:91:36:a2:35:eb:5c:e0:3a:62:
24:5c:e2:91:02:1d:b9:2b:f7:eb:24:d3:8f:b5:cc:
02:f6:2a:74:e1:a3:c9:8a:a6:3d:b7:6a:81:d1:10:
9c:44:a9:00:3d:05:1b:d5:ff:2e:96:25:9c:00:cf:
4a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:72:85:9A:D6:8D:5F:24:77:03:94:F7:9B:AD:A3:6F:9A:27:3B:EC
X509v3 Authority Key Identifier:
keyid:39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:b9:9d:c1:64:6c:89:4c:2f:31:38:09:80:4d:b8:8e:a4:eb:
ad:45:9d:a6:27:e8:35:b2:b6:e6:6e:7d:9b:be:7f:6e:a6:87:
96:22:41:7c:8d:bd:9a:7f:50:45:6c:69:ed:49:26:bc:98:1d:
46:1f:e2:4b:c1:56:6b:09:fc:a4:08:59:c9:50:25:5e:22:ef:
2a:d2:c4:47:49:fd:69:36:45:c9:ba:ba:53:b1:de:82:16:56:
49:4e:a3:7f:fd:bd:85:dd:cb:cb:88:6f:2b:1e:8f:4a:af:98:
b3:4e:13:5d:2a:ea:d8:7e:71:96:3a:89:7d:18:cd:23:b9:05:
a4:9c:34:32:68:a2:9f:08:6e:11:49:bf:1e:cb:1f:78:50:19:
bc:f9:52:92:42:d5:27:e2:04:72:02:ba:a3:d4:6f:5a:08:df:
ba:33:5f:91:95:02:84:3c:fe:30:1e:4f:d2:97:ec:dc:9a:10:
30:5f:93:0b:7b:a9:9a:16:a7:f7:47:21:1b:9f:57:8c:fc:9b:
2a:56:f5:c3:fa:9b:9e:a5:39:ed:35:78:fc:95:c7:16:37:f8:
43:ea:82:aa:ef:7b:b1:06:ac:84:8e:0f:14:40:ea:42:ec:60:
b8:4d:92:46:67:03:9b:8b:c8:b9:f7:ee:60:ee:59:9a:a7:11:
a6:c9:39:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:05 2025 by rpki-client