Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
File: Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft (raw, json)
Hash identifier: eBpjp6kjKRUyqw8lxlB4M58UC5kSuXQksABrlDJOu9I=
Subject key identifier: 43:F7:7F:4D:73:B6:30:C1:FD:FE:28:0A:43:CB:D1:AB:56:AD:11:13
Authority key identifier: 49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E
Certificate issuer: /CN=A9194EF2/serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E
Certificate serial: 0D2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
Manifest number: 0D25
Signing time: Fri 28 Mar 2025 18:10:37 +0000
Manifest this update: Fri 28 Mar 2025 18:10:37 +0000
Manifest next update: Fri 04 Apr 2025 18:10:37 +0000
Files and hashes: 1: Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl (hash: Vf0TazxudXO1b3+3aZvh3Iv33NWM205Vfn1RC3H/Zn8=)
2: 1214EE40D2BF11E9A7F4EF1FC4F9AE02.roa (hash: 3NvJFO+he2ACqNiLgD+llzSbjPgJVQ7hiMX5hEMIbGg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3372 (0xd2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194EF2
Validity
Not Before: Mar 28 18:10:37 2025 GMT
Not After : Apr 4 18:10:37 2025 GMT
Subject: CN=67e6e61d-cf45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:16:d4:97:36:c4:54:7d:db:28:ad:b3:2a:96:
eb:b6:4b:d4:1d:59:53:21:1f:4e:bc:48:f9:9b:69:
24:97:ab:78:a0:a1:7d:44:d2:81:e4:79:aa:fc:f7:
f6:60:21:81:c4:35:21:d7:0e:7c:7c:54:eb:b0:03:
40:45:7f:a2:b2:73:c8:01:f2:b6:d2:3d:29:7a:38:
62:1b:72:4f:7d:7c:13:11:cc:19:dd:15:f5:76:fb:
02:17:e6:b0:ca:a3:ba:de:b2:91:fb:66:e9:59:c4:
1f:bf:80:a3:db:62:32:dc:00:8e:78:95:62:c2:94:
00:cc:29:e5:f9:f0:06:90:f0:fd:9b:99:ec:b7:2b:
da:b6:1d:2f:56:12:34:13:76:e5:e4:42:6a:70:7e:
28:ed:9b:4a:c3:fd:83:82:46:71:f7:9f:09:65:37:
3a:d8:e5:d3:dc:a9:7b:e1:3e:1f:8f:c2:87:6c:4c:
d5:28:f0:ac:7e:29:7d:cb:00:5d:9c:de:18:96:12:
1b:57:6a:ab:c8:78:7d:fe:b2:f7:c5:8a:91:f4:dd:
2f:07:5d:3a:a5:14:f3:de:2f:4d:3c:38:3c:54:86:
3e:46:bf:f3:01:c5:a7:bf:b8:65:ef:dc:30:2b:e1:
66:e7:1e:b9:8a:7e:4e:93:2c:e3:ea:95:72:b5:be:
f8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F7:7F:4D:73:B6:30:C1:FD:FE:28:0A:43:CB:D1:AB:56:AD:11:13
X509v3 Authority Key Identifier:
keyid:49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ad:52:5a:18:da:8f:2d:03:ab:2b:8b:4e:2b:be:db:b3:91:
ad:9e:62:f0:40:ab:46:d2:b7:db:6f:1a:03:48:09:e9:c9:7f:
ac:7e:f9:96:03:87:2a:5e:53:24:aa:5e:50:94:82:01:fc:92:
34:48:d9:7c:04:88:a8:1a:33:69:70:dd:90:77:6a:2d:7b:b0:
25:e9:3d:b8:c2:02:6c:0b:36:26:4a:a2:65:7f:c6:1b:26:db:
78:5f:bd:49:70:05:56:e1:a7:e3:1c:d2:f7:78:78:e3:78:22:
c0:85:fe:74:d5:7c:7f:5d:46:60:12:25:f5:f2:3f:3e:61:da:
d9:d3:73:ff:e8:b9:3d:41:c2:ef:0c:5e:83:2e:bd:3e:d8:e8:
61:cd:e5:32:5e:ab:61:1e:f5:53:5b:c8:c8:b1:5c:0b:e8:35:
a7:8a:6c:9f:28:68:9e:65:9a:5b:79:aa:c8:bd:30:df:f6:ef:
26:54:ce:8e:7f:05:d7:51:57:d6:9d:8e:a0:f5:70:71:dc:aa:
2a:43:bb:3c:02:5e:12:76:a4:57:e5:99:66:4b:df:96:80:4d:
c5:cb:85:9c:e8:1e:af:e6:ed:1d:19:b7:60:e9:3b:3d:0d:1c:
7d:6f:01:a4:08:da:9e:cc:53:46:2a:f2:a3:28:08:3a:56:ec:
ac:0a:32:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:39 2025 by rpki-client