Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft
File: M5IbTpqJQaWGu92a-LGIWo8iX6I.mft (raw, json)
Hash identifier: fkTvU8JrQOkXUxk8p9CNAhySVjtMYMHrM4DvXfjykos=
Subject key identifier: 48:A3:EC:01:27:CF:FE:55:C6:83:45:E7:4B:0E:6A:9E:88:08:2B:2B
Authority key identifier: 33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2
Certificate issuer: /CN=A9195A3A/serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2
Certificate serial: 3463
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft
Manifest number: 3463
Signing time: Fri 28 Mar 2025 15:07:11 +0000
Manifest this update: Fri 28 Mar 2025 15:07:10 +0000
Manifest next update: Fri 04 Apr 2025 15:07:10 +0000
Files and hashes: 1: M5IbTpqJQaWGu92a-LGIWo8iX6I.crl (hash: ds3TPFoa/y3jXYNCffQeDMROJCozwW7ABB0GcV6iWuA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13411 (0x3463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195A3A
Validity
Not Before: Mar 28 15:07:10 2025 GMT
Not After : Apr 4 15:07:10 2025 GMT
Subject: CN=67e6bb1e-3408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:4f:98:c6:f6:87:cd:1b:34:6b:5e:b0:5a:
12:0f:bc:f9:1c:57:8a:fb:73:e3:23:05:f1:08:d5:
4d:17:ed:f3:66:fb:80:81:5b:2e:72:f3:4b:3a:35:
ad:cd:28:3a:a7:bb:35:f8:c8:f4:5c:5f:99:bd:1b:
c4:63:ea:cb:2e:ff:2e:ab:80:d3:97:4d:e2:95:48:
1f:ce:23:88:c9:76:6e:bd:a5:d1:a3:44:87:7a:38:
11:6b:8a:ad:f2:d9:55:67:b8:b1:94:53:4d:ae:48:
7b:9e:2c:00:9a:b4:cd:2e:d6:47:9f:95:79:32:10:
92:e0:e6:4e:77:4b:37:d7:ad:6f:b9:6e:d7:14:cf:
aa:82:08:4b:cb:52:8f:e8:b2:2a:86:22:09:40:d4:
fd:78:65:94:b7:9e:39:44:81:2e:65:82:c6:9a:b1:
a6:ec:3d:39:46:b8:8e:e2:46:05:32:fa:c6:fd:67:
6c:c2:24:01:dc:7f:9f:f4:a2:a8:29:73:14:e4:85:
6c:fa:e7:d9:84:b7:d7:1a:7f:2f:65:9d:09:19:58:
f5:fa:d9:d4:f2:e4:38:2d:ac:96:2f:e8:fa:90:59:
8b:2a:25:d8:a3:c1:af:47:ca:9c:ea:61:bf:ea:9c:
b6:90:80:f6:09:b5:42:b2:17:0b:e3:08:97:da:32:
e8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A3:EC:01:27:CF:FE:55:C6:83:45:E7:4B:0E:6A:9E:88:08:2B:2B
X509v3 Authority Key Identifier:
keyid:33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:12:0f:35:a2:ad:dc:a1:ac:f3:ab:57:2c:f6:3d:e8:6d:b3:
62:0f:b7:99:5f:0c:d1:a4:7a:b4:ef:ef:da:86:a8:c7:d1:6a:
97:f0:ba:87:51:69:a3:fa:a2:a2:8f:17:3b:f5:02:d8:0f:78:
cc:1c:2f:87:d7:ce:e7:a4:50:d0:11:99:5f:cc:67:b4:6a:fb:
92:04:6b:c2:bd:de:28:dd:e2:df:73:c7:94:10:cc:48:44:d1:
9f:f1:de:b7:53:7d:bb:4b:b0:81:37:9a:af:6e:82:44:df:f5:
a9:96:1d:cc:f2:2c:9b:04:0b:73:8f:df:cc:9d:84:13:7e:37:
0b:16:20:14:e0:54:0c:32:4d:bf:c6:7c:ff:4e:e1:f4:9b:26:
98:cb:1e:08:41:e4:b0:57:d6:d8:43:24:ec:01:d5:6f:d7:4e:
13:c7:67:5d:83:35:4e:4d:8d:c9:3b:bc:1e:98:74:05:f1:31:
1c:87:c3:20:c9:fa:74:88:0b:4f:b6:e7:92:bb:69:6f:79:d9:
fa:30:ef:f5:e9:99:35:ed:1a:1b:0c:f4:20:d4:71:f5:40:cd:
06:10:0d:42:52:bf:42:58:a4:e6:87:5c:16:4c:39:a2:da:28:
4c:dc:e7:8c:b6:3c:cf:24:b8:be:80:07:ff:8e:62:83:ae:e2:
49:0c:ee:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:36 2025 by rpki-client