Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
File: O9MC-nouhmpnmxtglttnRToDq4Y.mft (raw, json)
Hash identifier: 4ZCsVAg0fl1Cennasa5zWCsH0yI98rofSORVIs9W7Hw=
Subject key identifier: 2D:CC:E9:3D:82:A7:A1:54:B8:70:E2:53:B9:45:3F:56:BD:7B:31:93
Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86
Certificate issuer: /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86
Certificate serial: 0A0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
Manifest number: 09F9
Signing time: Fri 28 Mar 2025 20:07:26 +0000
Manifest this update: Fri 28 Mar 2025 20:07:26 +0000
Manifest next update: Fri 04 Apr 2025 20:07:26 +0000
Files and hashes: 1: O9MC-nouhmpnmxtglttnRToDq4Y.crl (hash: EYQN+tEnLtB3t9VlLh/fX+I018zmt3Bw43LUYJlMkUo=)
2: 0791DE6034A511ED9D82D13BC4F9AE02.roa (hash: juMQ71UzLGU0NVMfjPJ2FFyOOWRBZEQJenhZ2xiR7QE=)
3: 62512E2C73D311EABC99D63AC4F9AE02.roa (hash: DFYge5dHCEqKdjq6qJwiRBDOxqQ6gIZRO7JP5sPeXVk=)
4: 27323072FF0E11EFB014CB3CC4F9AE02.roa (hash: Fcw453Ezb9efQnwUieSmXg5daSqXlucP3XjYZWFxjYQ=)
5: 855AECF29B3A11EB9B73EB7BC4F9AE02.roa (hash: R3iQDjS1xmyA/Ti9pGMuv3ByraTjewOpXnxZ6reYInQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2575 (0xa0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7DCD
Validity
Not Before: Mar 28 20:07:26 2025 GMT
Not After : Apr 4 20:07:26 2025 GMT
Subject: CN=67e7017e-049f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b4:bb:0c:ac:98:17:18:0e:8c:f8:d2:c2:ac:
4e:91:31:47:8f:a3:a4:c4:16:f1:f5:99:48:18:b9:
78:39:a2:26:11:14:bb:be:4b:fd:fb:25:7c:43:a6:
45:37:f7:8b:da:c5:74:62:9c:c7:2c:d7:65:39:ff:
d3:8a:f7:06:8c:a4:49:d5:50:ec:50:ca:4e:45:e5:
b9:e2:46:a6:9c:f1:ac:ea:85:ac:00:2b:b5:5b:a8:
15:68:e8:28:95:36:fa:f9:e7:86:7f:aa:64:a7:9d:
a0:1d:ac:2b:9a:10:a7:5d:2f:51:ea:de:86:0e:4f:
63:f6:d3:4c:83:48:48:81:9a:f4:35:97:a4:f5:0b:
05:2a:66:76:00:36:97:67:4e:78:a5:7b:a0:f8:b8:
75:91:27:48:68:e7:bc:c2:c8:6b:05:6f:f0:e8:93:
f1:a6:39:cd:84:01:c8:ac:fc:00:6d:20:94:d2:8b:
ae:bd:67:63:e4:3e:01:6b:84:02:fa:ac:51:a6:60:
0e:1b:b1:b6:8d:1d:f6:c1:8d:7c:e5:ff:48:26:93:
fd:2a:36:b4:55:2c:21:cc:7e:50:8b:a8:07:cb:c7:
4f:77:26:15:4c:00:36:f7:90:ef:99:ea:fe:12:e2:
af:5e:f8:2d:54:40:be:93:e7:c6:e6:e6:ab:18:6d:
c5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CC:E9:3D:82:A7:A1:54:B8:70:E2:53:B9:45:3F:56:BD:7B:31:93
X509v3 Authority Key Identifier:
keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:ad:a0:af:4a:20:40:90:da:6d:65:cb:60:4a:00:ba:12:1e:
ce:33:f2:ca:3f:51:74:04:b0:38:28:94:38:3e:8a:83:0b:9f:
84:03:40:ee:21:b4:6a:b1:b5:dd:ba:83:56:fb:c0:54:3f:ab:
c8:8d:40:9d:15:d2:85:b7:fe:d7:53:ff:89:21:00:2a:06:f0:
9f:bc:66:a9:13:fd:28:38:49:cb:1e:82:51:3e:df:d1:2f:b2:
07:83:cd:82:1c:d1:68:88:65:3c:b6:f8:f9:37:7d:2a:91:d1:
2d:74:5f:4e:82:16:3b:bf:49:87:78:fc:24:41:2a:9d:ad:30:
b3:9c:26:55:73:2a:f0:35:ff:ef:9b:38:bd:72:4e:16:e4:a8:
02:be:15:e4:32:6f:2d:9a:7c:a0:f7:55:bd:df:a7:a8:4f:d4:
70:18:6f:c6:dc:bd:2a:db:54:a6:54:ca:9e:18:b3:47:9e:93:
cf:78:bc:ab:e2:e2:23:6c:85:fe:1d:51:29:ac:75:9e:92:28:
3b:ba:0d:62:12:dc:05:6b:d3:da:94:55:50:88:41:d8:86:2f:
84:56:d0:43:e4:c5:1e:4f:e0:c6:9a:53:2e:e8:2d:a0:4f:fe:
00:6f:14:fb:e3:a4:69:22:63:f0:e4:8a:2e:a0:eb:9f:62:4f:
57:1f:81:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:28 2025 by rpki-client