Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft
File: Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft (raw, json)
Hash identifier: q6/qEqWNBN8kmcbFsp/ScS/clMRjJPoImpNLga8XVP8=
Subject key identifier: AE:F9:07:3E:B9:77:44:C4:A5:0C:CC:AD:2B:31:49:D4:8C:9C:E5:75
Authority key identifier: 52:FE:2B:6B:7F:49:7F:94:F1:D4:92:D1:91:7B:48:64:78:BF:59:D6
Certificate issuer: /CN=A9125475/serialNumber=52FE2B6B7F497F94F1D492D1917B486478BF59D6
Certificate serial: 0229
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft
Manifest number: 0220
Signing time: Fri 28 Mar 2025 14:20:38 +0000
Manifest this update: Fri 28 Mar 2025 14:20:37 +0000
Manifest next update: Fri 04 Apr 2025 14:20:37 +0000
Files and hashes: 1: Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl (hash: rMyeSt47Ld5H4ICQEYycryFZeBBo9FbH0ByBpUdd+TM=)
2: 84094296EF5E11EF81B0790EC4F9AE02.roa (hash: Ckg4hw6DabBO2d7okoEF2pancj6gViKBZRAEfAu13oo=)
3: DFA79FA2EFD811EE87F4440AC4F9AE02.roa (hash: hQScYTUNqe8SfNNwSXoRwPKv/1EvvMjHkzfsNEe+pKg=)
4: C3923CE6EFD811EEB93EE009C4F9AE02.roa (hash: EgTNqiKvmZXEy9LjOSG2dN0ynTpnYuhjXlrpPTL50KA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125475
Validity
Not Before: Mar 28 14:20:37 2025 GMT
Not After : Apr 4 14:20:37 2025 GMT
Subject: CN=67e6b035-ba21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:36:03:9c:ed:0e:b5:51:bd:7b:6d:2b:7f:0d:
ec:8c:0b:d2:bd:2e:78:e6:ec:d0:52:90:e5:3d:04:
73:f2:cb:85:66:c1:16:16:ab:dd:8d:40:03:31:af:
0d:cc:e2:47:9e:72:7c:15:75:28:e3:c7:15:ff:76:
47:96:1d:1b:75:32:6d:a4:df:0b:dc:d0:71:09:26:
a6:3a:0d:1f:33:e0:d8:eb:37:2c:43:1b:e3:df:62:
11:92:f9:08:27:88:d2:0c:23:ab:8a:ac:b4:3f:0f:
0f:d8:d6:f5:e1:59:4b:91:89:1e:4b:b8:0f:ac:7f:
24:30:69:a7:22:31:46:e8:92:35:fb:94:c2:9a:85:
09:75:c2:14:82:30:54:14:e6:08:34:b9:06:d8:29:
45:82:56:8c:0a:2b:66:50:cc:8b:7d:8f:52:d2:55:
fc:43:a4:af:60:9b:e5:f1:70:8d:f8:e5:a5:55:4e:
0f:45:45:a0:4a:d5:79:c5:1c:51:64:c5:a8:a2:e0:
6d:e4:f3:dc:11:03:29:ec:7a:21:31:e4:60:de:ca:
56:26:8f:6f:2b:49:1d:0a:91:98:21:2f:2c:02:2f:
25:d1:a6:5a:e4:e4:cd:5d:94:78:5e:a4:1d:ae:8f:
9d:eb:79:61:c6:1f:30:81:02:be:06:c4:e8:d9:e7:
a1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F9:07:3E:B9:77:44:C4:A5:0C:CC:AD:2B:31:49:D4:8C:9C:E5:75
X509v3 Authority Key Identifier:
keyid:52:FE:2B:6B:7F:49:7F:94:F1:D4:92:D1:91:7B:48:64:78:BF:59:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e1:d6:aa:74:45:b2:60:17:45:f3:e8:20:45:3a:ac:ab:37:
7e:5d:81:32:0a:ab:c8:50:7d:c8:c9:a2:e8:93:a1:9d:27:bb:
ae:6d:c4:b8:5e:48:22:88:d0:d7:fd:ef:12:da:05:9e:ae:27:
4a:74:55:bd:60:51:6f:fe:02:03:45:50:bb:b4:72:c6:79:d2:
7e:f2:1e:0a:1b:a2:bf:cd:63:b4:d7:d2:90:4a:79:28:db:1a:
08:ef:84:f1:e3:f7:75:26:18:9f:36:8e:62:f8:ce:16:47:1b:
65:9f:d8:39:4f:f4:e8:26:7b:3a:7d:fd:7e:d0:c8:91:35:75:
d2:df:89:d0:a4:04:67:a5:fc:35:7f:36:24:68:ba:82:6f:b9:
fc:18:1d:7f:d5:ac:1c:95:82:40:8a:3d:e6:22:08:5b:30:c3:
14:30:62:90:90:4d:31:04:8c:b6:e8:64:59:a6:f3:2c:40:ea:
fd:fb:d0:9f:f4:81:6e:9b:e0:6a:6f:67:5a:5d:70:ef:f2:66:
6b:7f:e5:b7:e4:6a:7b:97:56:24:81:44:a6:e2:7f:35:9b:e6:
0e:16:86:47:be:59:d7:14:ff:4a:a2:77:90:4c:63:0f:37:c9:
a6:8e:ae:3a:c3:da:9b:73:d0:12:d5:46:07:83:74:e1:ea:6c:
dd:29:79:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:56:52 2025 by rpki-client