Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
File: oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft (raw, json)
Hash identifier: eHK9eTnN3AkLIE8MVpYj2ySwX/YxrFKxCAdCCYXspBo=
Subject key identifier: 82:8E:1E:32:F4:D4:17:AC:F2:C6:FF:91:F0:0E:07:1B:BD:14:A4:CC
Authority key identifier: A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96
Certificate issuer: /CN=A91E0267/serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396
Certificate serial: 3468
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
Manifest number: 3465
Signing time: Fri 28 Mar 2025 14:56:56 +0000
Manifest this update: Fri 28 Mar 2025 14:56:56 +0000
Manifest next update: Fri 04 Apr 2025 14:56:56 +0000
Files and hashes: 1: oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl (hash: cGc+d+NNGbLeczx4GJUxHez+t1axFfXu8Db+xo02JPk=)
2: 77C9E89A3CDC11EEBFA0475EC4F9AE02.roa (hash: As2LymjqIDH0cOS124NvImUruw0ZeoIg/jht9yiAhvI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13416 (0x3468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0267
Validity
Not Before: Mar 28 14:56:56 2025 GMT
Not After : Apr 4 14:56:56 2025 GMT
Subject: CN=67e6b8b8-6085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:e7:65:67:39:7c:ed:ae:35:97:4e:49:b1:
f9:be:d6:f2:2e:92:12:63:38:3b:17:3f:0b:2f:02:
2a:4e:4f:f2:94:aa:a2:b9:10:05:73:03:a0:b2:c6:
4b:6a:c1:72:0c:94:38:28:94:5e:5a:87:77:82:96:
64:c5:34:74:be:1c:0a:18:7b:02:a3:13:34:4e:ff:
6d:47:67:67:68:67:56:3b:1b:32:5e:44:72:98:0f:
da:b4:b3:dd:bc:6f:d4:82:55:a8:e9:3a:e4:d4:80:
07:1d:7c:59:86:fe:f4:7e:ac:f9:d4:0a:4d:0f:a2:
07:75:8b:98:1e:c5:12:38:b4:a3:d0:0e:86:1e:05:
3c:1e:d7:0f:f4:07:cd:f9:c5:99:6a:be:7a:c5:28:
07:eb:74:4c:59:7e:2c:d5:6b:37:1f:d8:7b:a4:21:
1a:25:c3:fb:cb:62:06:90:5a:cb:d7:da:67:f4:c1:
93:18:43:06:af:d5:74:34:6a:d1:16:fb:6e:d9:a4:
ff:7a:4d:45:f3:87:c1:39:b3:d0:95:e3:4a:2f:06:
7a:ef:39:d7:b1:42:bc:6a:47:a4:be:cf:8e:ab:37:
2c:bc:46:e1:92:1d:69:3a:45:86:63:7e:ca:44:e5:
98:c6:75:ed:0f:41:9e:56:12:3f:df:fe:0d:8f:36:
dc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8E:1E:32:F4:D4:17:AC:F2:C6:FF:91:F0:0E:07:1B:BD:14:A4:CC
X509v3 Authority Key Identifier:
keyid:A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:20:4e:c8:55:a6:27:2a:5c:d6:be:27:ec:ca:cf:24:1f:21:
f6:e9:35:ae:d8:d5:d0:74:7e:97:d5:68:0d:73:ad:67:7d:d2:
69:85:2a:8d:87:1a:57:d7:9a:76:c2:6a:44:b3:ee:bd:5e:78:
0c:a2:d7:0a:f1:ce:15:c8:0c:c2:71:24:d2:db:76:cf:89:5f:
96:5e:80:e4:fb:e7:65:79:e5:b7:f4:55:ab:cb:94:ef:b0:60:
9f:e2:a8:c1:7e:17:08:17:3b:80:32:7a:a4:2f:28:6f:86:1e:
d6:c8:2f:c0:d1:f3:34:37:46:49:13:85:3e:e4:fa:ec:04:77:
2a:94:00:57:13:99:00:74:a4:b4:4d:2c:a3:fe:1c:36:7a:dc:
6b:9e:65:d7:94:6c:b1:f4:7c:79:0a:e4:33:85:6d:ce:94:a2:
58:50:c9:77:4d:40:62:51:c3:2f:52:c4:e2:f5:eb:30:3a:c2:
7e:e9:26:8d:14:8e:e1:48:5b:74:9b:27:96:3d:b7:8b:ce:bb:
da:f7:51:f8:c1:02:27:86:56:16:6d:95:44:39:d8:48:ae:60:
3c:07:48:3e:21:db:0f:c3:fa:bb:67:fa:01:24:10:3a:a0:4d:
28:47:f6:2c:f6:ae:40:83:5f:fe:49:4b:05:ea:3a:0d:3a:3a:
6c:fa:fa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:20 2025 by rpki-client