Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
File: 339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json)
Hash identifier: 7hru5uERnzcsQqr51+FOcKQ7DZJSASWDY8SWG6AgEO0=
Subject key identifier: BE:4D:DC:3A:2D:E1:A9:5D:70:12:5C:90:1A:51:7D:9A:2B:38:70:24
Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
Certificate issuer: /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
Certificate serial: 59D50389F950ADE2F482C8AA0F4D7B60145CB46A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
Manifest number: C5
Signing time: Fri 28 Mar 2025 17:09:14 +0000
Manifest this update: Fri 28 Mar 2025 17:04:14 +0000
Manifest next update: Sat 29 Mar 2025 19:58:14 +0000
Files and hashes: 1: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: yWaDNCbi6Fo0MOwDwK3xRRSsJHKdEY4sTITM8u1sep0=)
2: 3130332e3232332e3138342e302f32332d3234203d3e20313531313036.roa (hash: CBbZdYOvzs1t+tqtDF6Ts0Z4cSe+M4/U5oUl3sp2oLk=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d5:03:89:f9:50:ad:e2:f4:82:c8:aa:0f:4d:7b:60:14:5c:b4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148BF70000
Validity
Not Before: Mar 28 17:04:14 2025 GMT
Not After : Mar 29 19:58:14 2025 GMT
Subject: CN=BE4DDC3A2DE1A95D70125C901A517D9A2B387024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ef:aa:b4:11:00:64:89:ee:ad:83:ca:c7:42:
16:56:42:5a:32:d1:da:59:b5:91:18:56:d0:19:89:
4a:50:49:2d:c6:b3:30:15:3d:37:44:a3:b1:0e:ba:
6d:d5:a1:9f:02:ef:48:b1:5b:21:31:26:59:6d:83:
b5:00:db:72:cb:58:5a:e3:e5:72:1c:db:45:80:4c:
aa:a2:63:b1:2c:df:7c:e7:b6:9f:94:2c:bd:4c:f3:
8e:da:68:1a:7f:2f:6d:bd:5e:13:11:48:ac:a0:f1:
f2:ba:f7:61:aa:73:cf:3f:cc:0b:ef:72:f0:e6:f4:
5e:18:47:10:c6:53:cc:7d:64:24:54:37:95:32:7e:
f4:db:92:e0:91:9d:24:27:47:98:f7:f7:27:e1:10:
1f:03:ed:e4:06:28:64:0c:77:dc:6e:ea:8b:1c:1e:
e0:89:f3:8d:15:02:76:a0:68:71:76:25:43:1b:32:
33:cd:a1:83:af:d7:64:d5:92:59:f6:ec:15:fd:22:
a9:48:d7:52:dd:50:73:52:4f:f5:25:b5:a4:2f:fc:
45:68:78:45:73:0c:2d:88:e7:6e:5f:28:28:cb:ed:
01:ba:a8:c9:24:db:db:7e:9c:24:eb:16:b0:6e:bc:
0c:95:9a:e8:b1:50:c6:80:fc:e6:1d:19:e3:dd:53:
e4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4D:DC:3A:2D:E1:A9:5D:70:12:5C:90:1A:51:7D:9A:2B:38:70:24
X509v3 Authority Key Identifier:
keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:90:ae:c8:5b:d4:99:38:1f:5a:10:8b:1f:0b:20:30:7c:45:
3d:e9:39:7c:66:f4:84:b0:1d:4c:66:bd:df:ea:5e:a6:a4:75:
76:12:24:65:fb:f3:96:04:86:ae:f7:13:d2:11:3f:c7:09:a9:
8c:31:34:1c:bb:ee:b4:aa:1b:b1:aa:1a:63:15:b8:36:f9:3f:
0a:4a:6d:3e:6f:74:58:09:48:7f:1b:92:41:56:44:78:dd:1e:
a3:49:36:f7:e7:21:9f:fb:41:6e:55:6a:f2:b0:15:41:cb:42:
dc:dd:74:25:1c:0c:87:16:ba:66:49:e2:f2:f0:21:b6:41:b7:
dd:24:45:a3:e0:ff:60:6e:d5:5a:af:b6:c4:36:2c:c2:1c:67:
fc:19:54:55:d0:f5:11:15:dd:97:3a:64:2e:9b:f9:b9:2d:33:
cb:0c:37:d9:6f:37:71:82:2c:b6:e6:70:36:17:ba:bf:85:5c:
bb:8e:e5:c6:3a:ef:e8:be:09:22:72:a8:31:92:fa:0c:cb:9c:
cc:23:59:40:07:a0:e8:cf:d8:85:14:07:42:f8:51:49:8d:5a:
01:ec:fa:8e:c0:ab:03:bc:b4:56:02:2a:8b:4b:07:00:f6:57:
47:cc:5a:b6:df:ef:15:19:d9:e4:71:41:6e:a9:97:8d:6e:f1:
91:41:d8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:55 2025 by rpki-client