Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
File: neMlQlgPqEMWU4o96yhx6CVW97g.mft (raw, json)
Hash identifier: PLIL6bQA3Hhf4yFkUKylmGUFrSc05luwUGWo6taQtYU=
Subject key identifier: 2E:4F:B8:81:E7:A3:9C:84:26:FD:94:A6:84:30:38:A4:0F:CE:03:76
Authority key identifier: 9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8
Certificate issuer: /CN=A91B42CA/serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8
Certificate serial: 0671
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
Manifest number: 5223
Signing time: Fri 28 Mar 2025 15:10:09 +0000
Manifest this update: Fri 28 Mar 2025 15:10:09 +0000
Manifest next update: Fri 04 Apr 2025 15:10:09 +0000
Files and hashes: 1: neMlQlgPqEMWU4o96yhx6CVW97g.crl (hash: l8JSO+YTlJU6Lj7HxO3KJZ3xdK4bD/FR7aHTRZ4+54M=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1649 (0x671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B42CA
Validity
Not Before: Mar 28 15:10:09 2025 GMT
Not After : Apr 4 15:10:09 2025 GMT
Subject: CN=67e6bbd1-b13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:c4:fd:3a:cf:5e:b9:21:1d:a6:b8:52:f9:
6b:3d:b5:cd:cc:bb:5a:bd:70:76:c3:ad:d5:72:f7:
a2:1c:7a:f8:54:b0:d5:ef:c5:5d:ae:da:04:66:ff:
4a:1b:62:f1:ae:33:9c:07:9a:22:a5:dd:32:9e:35:
6d:63:be:7c:d5:66:12:e1:b1:a5:3e:e4:4e:a7:8b:
4f:95:1a:2b:97:25:cc:1c:40:45:3d:bc:0d:c0:01:
7b:06:e7:3d:4e:d6:12:0a:c4:30:04:9a:5c:71:61:
62:7f:86:55:d9:c6:45:ea:7f:aa:0b:de:b0:1b:b8:
e1:e3:f9:9a:80:b3:51:03:5b:e6:1d:e8:23:73:12:
0c:ab:67:16:4c:43:7d:fa:03:b8:1d:48:d4:f3:60:
2d:29:4f:14:35:58:cc:d4:7c:03:b6:00:7d:76:a2:
2b:44:b8:d6:77:cd:68:11:ad:9e:8e:3e:41:5c:15:
2b:72:5f:d8:19:1a:d2:bc:72:a5:c5:00:28:3b:97:
59:fa:03:95:bb:de:a3:10:e2:71:d2:04:e3:a9:ed:
b8:72:36:0e:f6:2a:23:85:5c:02:aa:52:15:a2:4b:
5b:49:df:35:f7:68:d6:ed:a0:bb:ae:d6:dd:b5:88:
ca:30:2d:6c:b9:d6:63:fe:e8:0b:1d:74:82:4e:ce:
68:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4F:B8:81:E7:A3:9C:84:26:FD:94:A6:84:30:38:A4:0F:CE:03:76
X509v3 Authority Key Identifier:
keyid:9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:08:c0:d1:27:30:d5:65:3d:df:52:27:8e:e8:db:f1:3b:28:
e4:8e:66:4e:1f:5a:05:0b:7b:ec:63:0b:c4:0b:c2:fd:54:31:
3e:e3:c1:d5:35:16:45:7e:2a:6b:98:d4:76:7f:60:cc:dc:36:
52:7a:26:c8:da:82:02:dc:91:7f:29:ea:a6:65:c6:76:a4:1b:
69:c5:08:8a:00:34:95:31:b5:35:b6:6b:70:05:42:72:70:e8:
c5:45:01:5a:e1:b7:4a:e7:79:d1:2a:f6:2e:ce:e0:d9:43:46:
c9:9c:9e:35:09:41:79:f3:f2:97:63:49:89:7a:8b:2f:f9:ae:
fe:56:5d:14:eb:9d:37:7a:d0:29:2c:93:c8:49:f1:0e:84:24:
02:8b:d3:91:f6:7f:12:25:09:47:5f:e0:fc:3d:0e:fc:3a:17:
e0:e1:51:13:0b:db:f0:f9:f4:25:01:74:b5:09:12:03:a4:e0:
29:ca:12:c7:f7:2c:a3:75:d0:a0:16:19:a4:c2:5e:c6:fb:86:
b9:5e:74:1d:62:4c:ee:fe:41:46:d1:83:f0:61:a5:42:4e:59:
45:72:ee:ec:0b:81:61:15:5e:12:f7:11:24:14:b6:ae:7e:e9:
3c:c0:22:a2:08:27:3b:03:cc:bc:01:dd:94:ad:ef:5a:95:4c:
80:06:2a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:35:54 2025 by rpki-client