Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.mft
File: 6228A3C6D637801692F7D7D48251DAD36A3CDB7F.mft (raw, json)
Hash identifier: RbnqB0ksHGCq5DJp1O2wIUvDoHE2zdrTRzX/hA646dw=
Subject key identifier: 86:5D:86:90:77:2F:C5:19:A6:B6:67:CB:E8:30:1B:8A:9A:CA:29:1F
Authority key identifier: 62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F
Certificate issuer: /CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F
Certificate serial: 3EE26E8C66E251ED32937B6DE2C54B37F751290E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.mft
Manifest number: 0232
Signing time: Sun 26 Jan 2025 07:19:51 +0000
Manifest this update: Sun 26 Jan 2025 07:14:51 +0000
Manifest next update: Mon 27 Jan 2025 08:58:51 +0000
Files and hashes: 1: 6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl (hash: X8DhZJlyLdIJNUml5/9ROsFOODcJ+gWaqLddaaRiPc4=)
2: 3130332e3234382e35302e302f32332d3234203d3e20313437303230.roa (hash: dZCb0NNFa0t8qRGSq9V6Zny0WChx1nzDMlS1sNzpGkc=)
3: 323430313a323036303a313030303a3a2f33362d3438203d3e20313437303230.roa (hash: SHmsWgoH0W5a4MIxTAojgLAEwCWFrmFdKxj2tt7AE10=)
4: 323430313a323036303a323030303a3a2f33362d3438203d3e20313437303230.roa (hash: gPG8l3OXv2nZ75Sb3JVWXTUkACkZtrgOXoNSpOUaoI0=)
5: 323430313a323036303a613030303a3a2f33362d3336203d3e20313437303230.roa (hash: MKfMjJ5TpoAcS0RoIjPaUqgCChV2FoLRtYqM8x/DCcY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:e2:6e:8c:66:e2:51:ed:32:93:7b:6d:e2:c5:4b:37:f7:51:29:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E4D0000
Validity
Not Before: Jan 26 07:14:51 2025 GMT
Not After : Jan 27 08:58:51 2025 GMT
Subject: CN=865D8690772FC519A6B667CBE8301B8A9ACA291F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:1a:8e:5e:3a:0e:29:06:ac:9f:5b:16:ff:
fc:57:30:8d:b1:96:eb:80:fb:df:75:8d:c6:2f:cd:
25:74:24:fc:d6:b9:7b:c0:c2:d0:11:8a:da:e2:8a:
e4:f7:bf:8e:6b:f8:53:10:ea:4a:c6:c3:ce:3b:f3:
42:f0:5a:5a:f7:ae:6b:c3:ab:d3:12:5a:a9:8c:f8:
be:ae:6a:48:7a:41:1a:88:ca:f1:5d:61:40:2d:3e:
80:57:6b:0e:ca:b4:cb:5e:c1:a1:c1:cb:a9:46:01:
08:94:a3:3e:49:0f:19:b5:93:7d:ee:e0:ca:29:04:
16:53:af:d3:93:7d:b5:8b:74:ca:30:cd:46:04:7f:
af:48:25:c9:cb:59:c8:52:b4:7d:a6:63:55:9c:97:
89:84:26:ea:69:13:f6:80:38:c5:41:1d:78:ca:df:
38:45:9d:e5:8c:6d:a4:51:09:9a:c0:5a:42:45:21:
42:a0:0d:eb:36:60:71:69:40:80:93:ef:a1:0f:ca:
26:53:ff:e6:8c:d4:96:e5:ce:bb:38:c5:10:65:d5:
16:6f:21:f4:96:d6:8c:9a:a8:7c:ba:75:c6:d6:8c:
92:d3:b2:7e:8e:61:3d:17:cc:89:10:b3:60:fb:56:
2a:aa:f9:41:56:9f:6b:57:e7:ef:f3:8d:ea:ae:85:
03:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5D:86:90:77:2F:C5:19:A6:B6:67:CB:E8:30:1B:8A:9A:CA:29:1F
X509v3 Authority Key Identifier:
keyid:62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f6:17:8c:3e:ae:15:9c:b4:07:23:16:b2:89:07:da:60:0e:
82:77:58:5e:91:b4:38:25:d8:e8:fa:a5:ba:ac:c5:fd:48:e6:
81:a1:01:89:16:1b:8d:59:08:f2:2c:6e:ea:80:65:4e:38:96:
3d:29:e3:9a:3a:b8:50:b3:58:86:79:23:f4:42:1f:2f:84:58:
9e:26:62:4c:54:c6:43:d2:fa:2d:d7:08:cd:80:5a:0f:81:47:
ca:98:07:7f:4f:e5:21:a9:07:62:4e:6e:ac:a2:51:7c:73:4a:
2f:0c:5b:71:2b:43:71:a0:a0:6a:17:4a:df:f4:ff:14:51:ea:
c1:4e:c7:53:ed:b2:bb:9c:92:41:a6:a8:31:6c:6a:9e:db:32:
e4:59:f4:c7:f3:76:4a:fb:c2:1e:1e:34:98:d5:b2:b7:d9:9f:
b7:f0:8b:c7:82:16:29:7b:42:2d:4b:eb:60:53:8a:63:65:2d:
9e:fc:d4:be:10:2a:83:ee:98:f1:2b:a5:91:c8:bc:7d:4b:18:
90:4c:08:92:14:b0:fb:a2:e9:ba:35:d6:2a:50:fd:bc:e1:3e:
28:bf:be:ce:3b:f1:2d:d5:b2:33:06:ed:c8:ec:04:fd:eb:66:
05:46:21:3e:90:18:cc:d3:b4:87:f0:81:3d:ef:68:ee:d7:bb:
0f:fa:b3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:46 2025 by rpki-client