Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
File: u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft (raw, json)
Hash identifier: qB6YJxbJQJoynLciMAOmiHRV51hKYgBzmx1AUrYK31g=
Subject key identifier: C4:29:A3:B9:6F:74:CB:DC:AF:F0:9E:E2:27:0C:E7:B9:6E:F8:D4:05
Authority key identifier: BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1
Certificate issuer: /CN=A919B824/serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1
Certificate serial: 08E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
Manifest number: 08E3
Signing time: Fri 28 Mar 2025 20:39:43 +0000
Manifest this update: Fri 28 Mar 2025 20:39:43 +0000
Manifest next update: Fri 04 Apr 2025 20:39:43 +0000
Files and hashes: 1: u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl (hash: U2Yy3FukgGiWsvsud7njG0x+XZNzk2s68MSLyAWM8kM=)
2: EEC7D1CAA6C911EA8079FD17C4F9AE02.roa (hash: ggnDaBNF34HQg+n5+et1BdldDeh00Zq26oas41hsO6w=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2280 (0x8e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B824
Validity
Not Before: Mar 28 20:39:43 2025 GMT
Not After : Apr 4 20:39:43 2025 GMT
Subject: CN=67e7090f-3158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b6:18:55:c2:9b:1b:88:df:6f:ff:71:4c:fb:
3a:b6:cb:01:45:8e:2e:bd:2c:56:60:92:e8:8a:75:
98:4d:32:ba:4c:25:d2:70:53:86:b3:b7:f1:54:52:
10:2c:d9:3e:25:02:38:96:26:c4:2b:ae:db:8a:ba:
9a:4e:f8:5f:55:33:44:ec:1a:22:76:83:f7:24:74:
9a:50:07:21:b8:3e:8b:f5:fc:18:cc:39:86:41:f8:
41:c6:a9:25:19:6d:36:15:cc:fc:36:dc:97:b3:39:
22:3b:74:f4:0a:63:8f:50:3d:5f:a6:e9:2b:f5:94:
9d:c9:77:28:bf:69:49:11:e5:51:32:a2:72:b3:d7:
f0:7b:e4:1c:24:a5:fd:5b:83:35:a0:1e:83:e9:5d:
78:12:80:0a:c2:dc:c8:89:e2:e1:52:98:d3:e3:37:
f2:ba:34:a0:59:c4:85:a6:1e:94:44:95:78:19:1b:
a5:c5:70:b9:46:31:54:4c:f0:61:74:51:51:cf:26:
f4:0a:65:ff:98:46:ab:98:7d:3a:40:04:bb:49:69:
a0:fe:a5:45:08:02:37:46:b4:b4:2a:4e:a0:ef:c4:
57:4e:46:c3:f7:b6:26:da:31:7c:04:05:5f:75:20:
0d:3f:b4:dc:04:32:03:f0:eb:5a:23:ac:3d:10:03:
ae:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:29:A3:B9:6F:74:CB:DC:AF:F0:9E:E2:27:0C:E7:B9:6E:F8:D4:05
X509v3 Authority Key Identifier:
keyid:BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:c1:3f:67:0b:14:43:da:2b:f2:f8:c8:ca:47:ff:9a:fb:62:
da:c0:d2:90:7c:9d:2e:12:d7:8a:fb:41:59:5e:10:8a:19:3e:
cd:d5:27:0c:ed:70:a9:a1:fd:d3:30:8a:d4:94:1d:18:5d:de:
15:1f:fa:9c:43:b4:f3:2c:4b:6b:60:a8:fc:45:8c:77:89:17:
90:ea:95:6b:9d:53:7a:8f:a1:5a:5a:22:73:7c:4e:e4:0e:c2:
ee:55:d2:03:30:73:4f:e1:37:9b:7a:d1:2c:52:cd:5d:c0:ac:
f2:f3:80:37:4a:42:82:08:b7:3e:d1:ac:04:2a:7d:e6:a5:ef:
41:04:9b:e9:b8:09:c5:a5:9f:38:74:a2:5f:7d:70:e0:bf:c0:
a8:eb:a1:07:ee:a3:d6:1a:56:66:1a:9c:d8:b3:a4:7a:d8:e2:
73:e3:83:4f:c5:e4:ca:3a:55:ab:64:a4:e6:3f:bd:50:b3:6f:
58:2a:10:7c:0c:71:be:01:21:df:cb:3a:df:dc:f6:68:f7:3c:
e4:99:8c:d5:cf:bf:9b:5f:15:c6:22:eb:2c:5c:7c:54:d6:9f:
30:c5:52:18:26:6d:37:b0:4a:5f:a6:7e:7d:e5:63:df:27:62:
c1:b6:4c:60:b2:03:b4:82:35:34:78:ff:b4:f7:f1:ff:bc:de:
cf:d2:de:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:41 2025 by rpki-client