Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft
File: mIulA6dlHjJofEyW9u3hh8c9BDg.mft (raw, json)
Hash identifier: 5iPOo57gjeV5hrwsOdz/wobw1smQzFVBPu4wMcaXmNM=
Subject key identifier: 6A:AA:73:83:64:2E:05:E6:4A:6F:C0:12:F8:6C:BA:D5:90:E5:EE:F1
Authority key identifier: 98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38
Certificate issuer: /CN=A91E923A/serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438
Certificate serial: 0CB6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft
Manifest number: 0DCC
Signing time: Fri 28 Mar 2025 18:18:55 +0000
Manifest this update: Fri 28 Mar 2025 18:18:54 +0000
Manifest next update: Fri 04 Apr 2025 18:18:54 +0000
Files and hashes: 1: mIulA6dlHjJofEyW9u3hh8c9BDg.crl (hash: JAR2bKxDwU6g5cLQMhwdW/MQT7kSYUuRwfN1cU6BlcY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3254 (0xcb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E923A
Validity
Not Before: Mar 28 18:18:54 2025 GMT
Not After : Apr 4 18:18:54 2025 GMT
Subject: CN=67e6e80f-88c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9e:bc:fd:ae:03:f7:f7:1c:3c:3a:f2:fa:f4:
2c:34:25:ce:a5:99:f8:f0:ba:bf:29:11:bc:a6:24:
45:12:81:d6:21:54:c0:82:99:e9:62:d3:32:a1:3b:
d5:a0:ff:b0:2f:24:79:73:7c:99:42:c8:1d:34:79:
85:40:d1:16:c5:3e:38:2b:13:d4:40:df:de:3b:b9:
6a:6a:5a:45:f9:ee:7f:93:c0:16:3c:61:eb:9b:39:
ab:df:1f:37:6d:57:79:33:f2:4b:ee:06:4e:6f:25:
65:31:db:b6:50:02:87:80:1b:13:28:57:c9:50:df:
78:35:17:5b:a6:1f:32:45:0f:0b:af:97:0d:8c:1b:
95:08:b1:45:1e:a1:e1:6d:54:5a:5f:93:fd:1f:3f:
72:3c:48:18:a6:ed:bc:6d:53:92:94:51:63:f9:32:
bd:9c:a2:f2:8c:ea:15:24:e6:39:96:6d:32:0f:0c:
4c:b7:2a:d1:a8:ad:6a:35:7c:02:dc:8c:ce:bb:bd:
26:c1:8e:76:11:e5:56:8c:81:80:84:69:05:fe:23:
ce:3b:71:53:dc:c2:26:90:97:79:6c:78:d7:6a:a5:
32:9b:00:fb:ce:ac:24:da:eb:24:90:a3:ba:eb:0d:
8f:d6:78:4b:f8:a0:0d:36:46:06:67:64:22:ae:b9:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AA:73:83:64:2E:05:E6:4A:6F:C0:12:F8:6C:BA:D5:90:E5:EE:F1
X509v3 Authority Key Identifier:
keyid:98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f9:cb:11:a1:d9:4c:45:9e:fd:49:eb:94:76:70:5b:c8:63:
64:e9:d0:cf:08:24:35:2e:31:1a:b5:1c:fa:52:95:8b:ed:04:
79:5d:e3:7d:4a:ac:d1:ac:fb:c0:2e:92:8d:c8:b2:f3:94:65:
5a:5d:e1:24:73:bc:86:96:b4:68:7d:dc:1a:27:47:00:80:e4:
4d:87:22:f3:d3:09:fb:0a:5f:97:eb:d6:f3:59:98:32:5c:0d:
4f:9e:f2:b3:21:ac:fd:8f:87:31:86:0f:90:d7:9f:67:85:ae:
2a:ab:91:88:a8:99:b6:7b:80:5e:59:94:95:92:96:a7:54:0b:
f1:1c:fe:be:b7:c4:35:77:db:df:3a:7e:1d:e6:22:c3:6a:ce:
2a:a6:b9:24:1d:25:e9:ab:57:a7:6d:f0:0a:7b:83:06:17:8c:
be:60:c0:df:0e:41:fb:b5:1d:3f:cc:df:74:e8:11:9d:3f:d9:
57:51:4f:9a:25:f5:65:b2:d6:b0:cf:c2:34:0c:82:1d:7d:0e:
dd:a3:9a:04:b8:74:d6:d8:87:00:d3:50:06:76:3c:79:a0:ec:
f9:18:23:85:4a:70:04:80:45:fb:64:3d:92:27:56:02:3f:a6:
85:5d:d4:bb:f9:32:91:4c:b4:3d:35:93:a8:a1:c6:f9:ed:65:
50:f4:0c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:11:11 2025 by rpki-client