Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft
File: ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft (raw, json)
Hash identifier: zhcqFCAmjq8uD58iOj1eJNCXD2bXos/SEwtBirnuPAc=
Subject key identifier: 77:D5:79:E5:3B:52:B5:0A:13:86:32:53:F0:82:AF:89:7E:6D:BF:47
Authority key identifier: 66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C
Certificate issuer: /CN=A91E923A/serialNumber=6638A604260FCCF2E9D8B20C1792ECA15DC76D5C
Certificate serial: 012C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft
Manifest number: 0DCD
Signing time: Fri 28 Mar 2025 18:18:57 +0000
Manifest this update: Fri 28 Mar 2025 18:18:57 +0000
Manifest next update: Fri 04 Apr 2025 18:18:57 +0000
Files and hashes: 1: ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl (hash: blHr1OPT4ITglivBcQtPQHiVJH1eCumAbkN+GZjC9jo=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E923A
Validity
Not Before: Mar 28 18:18:57 2025 GMT
Not After : Apr 4 18:18:57 2025 GMT
Subject: CN=67e6e811-24d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:a8:70:d5:5a:bf:9d:75:e1:4b:80:7e:11:
47:75:a0:8a:18:c5:1d:b3:49:2d:10:c7:38:b2:57:
12:6b:68:33:ea:d8:bd:f9:60:90:60:6b:0a:1b:a0:
65:aa:c3:03:ea:81:00:7f:7a:2f:9a:0b:05:34:35:
46:c9:06:d0:4b:1c:85:bb:d9:56:e6:e0:40:1d:24:
7a:21:af:95:c5:10:6d:35:37:c9:c5:66:fa:71:00:
b0:1a:77:64:33:8d:86:70:8a:d4:82:a5:46:e7:2c:
7a:db:00:fd:38:35:41:27:1b:a7:b6:6e:53:46:29:
31:81:f1:12:7b:af:eb:fd:0b:e2:92:1d:fa:5e:8d:
05:ae:5d:cb:d0:0c:e7:25:bb:2e:6f:24:d5:35:7e:
04:d6:88:3c:9b:7c:b0:4c:51:a4:29:0a:db:4e:3b:
bb:fb:d7:8b:ba:52:b9:d0:13:eb:74:bd:bb:21:5e:
13:ef:22:d5:d6:9b:4e:34:a6:66:f8:b1:e1:36:a7:
61:26:c9:20:06:7e:8a:b3:b5:fa:2d:6a:0c:c2:5b:
32:8c:56:7d:48:7b:a1:38:d9:5f:c0:dd:d9:47:42:
be:c9:5a:ef:3c:e9:9b:95:c6:30:d3:3a:87:a3:63:
a3:38:89:c7:b1:bf:93:4b:6e:a0:26:1c:5b:16:32:
b1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D5:79:E5:3B:52:B5:0A:13:86:32:53:F0:82:AF:89:7E:6D:BF:47
X509v3 Authority Key Identifier:
keyid:66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:b7:74:c8:cb:19:e1:60:4f:7f:49:be:c9:39:13:1e:99:26:
9d:04:bd:43:74:6a:5f:c4:ba:bf:e7:31:c3:31:e1:d1:cf:46:
49:77:14:b7:de:f1:8a:6c:a6:07:4d:5d:a7:7b:42:64:23:17:
0b:75:1d:47:d3:a4:30:7b:80:46:50:f0:49:60:fa:c0:51:e5:
33:19:1f:da:98:91:0d:9e:4c:17:c0:78:a4:ba:91:41:96:0c:
dd:1a:fe:61:5b:b7:89:e5:24:35:7d:79:a7:06:ad:60:ae:44:
d4:f7:4b:95:4f:18:c4:be:35:da:fe:e5:78:b1:c4:27:de:3d:
6a:4f:96:65:fa:39:8e:85:71:35:bf:ca:93:09:fe:48:67:2c:
61:a1:c6:61:e3:04:e2:9e:67:51:fb:04:20:d1:cc:32:38:36:
ff:67:76:4a:8c:2d:f1:83:ad:83:94:4f:6b:88:c5:e5:19:ea:
3c:84:43:11:17:6f:64:c7:83:a8:3a:a9:50:d9:8d:00:f2:6a:
a2:a0:55:df:38:5a:0b:15:70:d1:c4:f4:df:95:ef:f2:fb:92:
27:21:b3:ef:68:f4:e8:d4:aa:94:3a:59:97:f6:b3:bd:65:f4:
0d:33:c9:d9:56:f1:85:c0:0c:b9:2b:3d:57:ac:cc:21:60:5b:
8a:d5:9d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:51 2025 by rpki-client