Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
File: jSAgfR7bX1wtZjsKahC81AutOt4.mft (raw, json)
Hash identifier: 4F+5Inyx4L0Arht3kTHDZ3auoRGPqscQ+vf3jSt/504=
Subject key identifier: 70:28:F1:E5:1E:30:24:70:2B:D6:A7:0A:1E:BB:E7:CE:6D:FA:6A:3F
Authority key identifier: 8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE
Certificate issuer: /CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
Certificate serial: 03CC
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
Manifest number: 03BA
Signing time: Fri 28 Mar 2025 23:41:39 +0000
Manifest this update: Fri 28 Mar 2025 23:41:38 +0000
Manifest next update: Fri 04 Apr 2025 23:41:38 +0000
Files and hashes: 1: jSAgfR7bX1wtZjsKahC81AutOt4.crl (hash: O0VFPVZ3y+a3iWcu6zNonCvcekWzn+keeY0y287F/z0=)
2: AA14FB00C70811ECBAECCC78C4F9AE02.roa (hash: aj80KCIif9eZITuW9nRaN1zZrhEdRJFymu5+h23dMBM=)
3: A97B2098C70811ECBAECCC78C4F9AE02.roa (hash: rFV4dBSx4huWrYaHq03A3z+Pf588WQXVbdQYJWcq8sE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 972 (0x3cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D6E
Validity
Not Before: Mar 28 23:41:38 2025 GMT
Not After : Apr 4 23:41:38 2025 GMT
Subject: CN=67e733b2-88d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:19:56:07:c1:50:c7:02:52:54:dc:30:f6:99:
ba:ca:25:25:49:1b:5a:79:31:7b:e3:3a:48:ba:38:
eb:f5:19:7b:a9:78:52:7c:e3:65:67:54:cf:90:82:
d0:ef:c7:4b:d9:e0:d5:f1:f9:30:bc:60:c0:36:6c:
ae:bf:15:03:a5:27:7b:8d:1c:0b:52:14:29:4e:55:
1a:cc:90:4e:a0:e4:8c:0f:83:e0:4b:c9:e7:83:92:
59:5c:50:3e:71:e3:cd:3f:0d:49:8d:96:f4:cc:05:
47:0c:2c:4e:a7:e2:fe:d7:79:f3:c8:b8:94:9c:fe:
58:fe:1a:1e:98:4c:dd:e3:67:e1:b8:cc:85:ff:03:
6c:2c:9b:1c:70:1d:ea:5c:dc:cb:1f:f8:63:92:e7:
47:0a:b9:f9:50:94:68:fe:39:0e:25:9a:7b:80:eb:
0f:6d:70:13:21:ff:1a:d5:fb:ac:e7:1a:29:e3:67:
3f:9c:68:0a:59:a1:4d:cc:06:43:87:e1:1e:d9:64:
62:08:f1:ce:8c:a2:f7:c9:f0:6c:45:63:26:95:28:
92:d0:1a:b5:e3:3a:5e:d0:e5:dd:6d:1a:d1:f5:46:
1f:ed:ce:a5:f5:0e:dd:cd:38:04:d5:d4:61:f0:ac:
51:41:85:90:42:84:fb:7f:5a:fd:50:ed:7e:8a:45:
75:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:28:F1:E5:1E:30:24:70:2B:D6:A7:0A:1E:BB:E7:CE:6D:FA:6A:3F
X509v3 Authority Key Identifier:
keyid:8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:09:67:e7:1a:00:a6:ce:44:ca:1e:a8:f1:11:d0:d0:d8:2f:
ca:94:be:6c:8a:85:ab:b4:e0:7d:4b:ab:87:0f:c5:8c:3e:1d:
24:a7:4f:4a:37:9d:0c:03:07:92:d9:80:52:4b:9a:da:f3:a8:
3c:05:53:0a:7c:ef:0a:62:5a:68:2f:43:f4:bf:96:62:c1:83:
3a:fc:64:47:04:e4:b2:22:d9:ef:e7:23:37:1d:fd:2d:45:14:
6d:d7:8a:6d:e2:91:4c:9e:23:c4:d5:cf:e7:5a:b0:df:81:9b:
61:cf:11:06:af:d3:ad:42:fe:ce:fc:3a:cd:4d:46:51:eb:0d:
65:b2:56:b7:78:ed:f8:95:1e:6d:54:d4:8d:74:ce:d0:fc:cc:
34:f3:22:ef:15:df:b1:6a:4a:4f:e5:de:b3:1b:4c:5e:90:bc:
d5:4d:15:58:8d:98:c3:a5:3c:37:32:fd:6a:d6:aa:28:fa:23:
17:98:7e:5f:64:59:48:de:61:42:db:35:f8:5d:ae:52:b8:72:
52:5f:49:6a:cb:47:ed:d1:2f:2f:9d:43:5c:a3:13:3c:d2:b9:
1b:43:91:ac:5a:85:e9:15:21:d5:65:de:38:6f:e9:92:c3:c9:
a3:26:1d:7f:1a:c7:62:14:d5:4e:a9:be:18:23:62:41:47:c8:
64:ab:70:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:58:39 2025 by rpki-client