Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
File: IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft (raw, json)
Hash identifier: JH+mXrLlDgYWDNXjghwnxOnefWy0S3HU315IgnXUaaA=
Subject key identifier: 6F:D3:4F:AF:BC:AA:36:8E:80:E9:5E:98:FC:A9:37:F1:C2:32:5C:8A
Authority key identifier: 21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6
Certificate issuer: /CN=A91159B7/serialNumber=21F20227559DB1F863849AB643233C3E935776A6
Certificate serial: 0CE6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
Manifest number: 0CDA
Signing time: Fri 28 Mar 2025 18:16:42 +0000
Manifest this update: Fri 28 Mar 2025 18:16:42 +0000
Manifest next update: Fri 04 Apr 2025 18:16:42 +0000
Files and hashes: 1: IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl (hash: eJaTI+dk1VGSjTxK8SQj63mPUjSGx6tVbr+qe7G3WnA=)
2: 7FC0801ED4EF11EC84AABC0CC4F9AE02.roa (hash: JfyJc8hrLZucoRHk+LPv3mbsPGDOx4vwQyrUYoddmy4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3302 (0xce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91159B7
Validity
Not Before: Mar 28 18:16:42 2025 GMT
Not After : Apr 4 18:16:42 2025 GMT
Subject: CN=67e6e78a-853a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:d3:66:98:99:b0:16:8d:a9:25:1d:48:12:
87:c2:cd:d4:ff:59:05:54:65:f7:c1:1d:44:9d:3b:
26:e7:a7:6a:e4:25:ea:c9:42:2b:18:0a:d0:58:ed:
f4:a2:a4:17:55:21:cf:9b:9e:f3:bf:2a:45:34:b5:
f1:80:eb:95:db:6b:b4:35:58:30:48:ea:76:0a:15:
d9:f8:e6:f1:d2:79:5f:e5:20:56:fd:2d:4a:03:c1:
ca:03:d5:83:88:a7:a9:02:a4:74:61:20:2c:95:cd:
e6:12:b5:cb:37:94:77:c7:c1:b1:cc:4d:4f:01:4e:
44:46:cc:fc:fc:f6:80:92:69:ea:28:89:85:c0:9f:
97:14:aa:26:0b:24:7a:57:83:b4:9b:9f:1b:c2:5f:
8f:6f:5a:3d:d2:47:9c:aa:05:c3:31:70:a6:db:c1:
1f:9e:86:ef:00:fd:3f:09:cb:cb:21:29:9d:13:73:
c9:4c:b3:ab:c7:98:19:7e:20:46:1d:12:3a:94:bc:
e7:d2:08:c6:d8:ea:90:19:59:39:ef:1b:4c:48:0b:
79:62:8e:10:83:39:8f:57:87:59:ff:b4:14:b4:33:
8e:45:d2:77:ba:d0:1d:13:55:ae:08:29:af:63:d1:
4a:09:dc:b8:20:bd:80:a2:4c:7c:a3:c3:90:2d:63:
02:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D3:4F:AF:BC:AA:36:8E:80:E9:5E:98:FC:A9:37:F1:C2:32:5C:8A
X509v3 Authority Key Identifier:
keyid:21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:32:07:c9:4c:0a:c9:4e:d8:62:96:0a:3f:9f:1a:91:ee:20:
e7:04:7b:66:e1:23:79:42:47:7d:16:4e:de:f8:93:ad:f7:8f:
63:be:8c:3d:89:99:fd:3d:f6:1b:53:8b:1c:fe:5f:7f:8e:d1:
16:b1:ff:3c:e2:e3:db:b8:df:e2:b5:4a:b4:68:a6:cc:a8:64:
5b:c3:b6:b9:e3:94:57:1c:cd:59:37:63:50:0e:78:29:0d:bd:
7e:cd:d3:15:df:80:33:39:c5:1b:b7:4b:4e:62:9d:c2:3a:4f:
48:be:04:65:22:06:c9:12:92:6c:07:b6:eb:b6:1f:2a:0c:2c:
de:14:88:33:d1:64:dc:e8:c7:ff:c5:23:44:89:bd:ca:eb:9b:
24:99:02:6f:25:98:a9:58:24:90:b7:9b:2d:c1:9c:19:00:86:
8e:55:e6:1a:16:70:b4:45:4b:82:74:66:88:a2:32:f2:e5:79:
f7:a9:2b:3d:0c:fa:bb:8e:52:9c:ea:e2:2d:b8:b2:8d:b1:fb:
61:1e:c6:9f:03:eb:e4:96:a9:99:5f:9b:b0:8e:be:0c:80:06:
8b:ef:b3:71:29:cc:6d:3c:9b:9a:ae:e6:7a:da:64:60:59:55:
c7:c3:2d:4e:27:57:f4:eb:b5:48:96:02:a2:1f:73:15:d5:83:
bf:07:88:fe
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTU5QjcxMTAvBgNVBAUTKDIxRjIwMjI3NTU5REIxRjg2Mzg0OUFCNjQzMjMzQzNF
OTM1Nzc2QTYwHhcNMjUwMzI4MTgxNjQyWhcNMjUwNDA0MTgxNjQyWjAYMRYwFAYD
VQQDEw02N2U2ZTc4YS04NTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAthbTZpiZsBaNqSUdSBKHws3U/1kFVGX3wR1EnTsm56dq5CXqyUIrGArQWO30
oqQXVSHPm57zvypFNLXxgOuV22u0NVgwSOp2ChXZ+Obx0nlf5SBW/S1KA8HKA9WD
iKepAqR0YSAslc3mErXLN5R3x8GxzE1PAU5ERsz8/PaAkmnqKImFwJ+XFKomCyR6
V4O0m58bwl+Pb1o90kecqgXDMXCm28EfnobvAP0/CcvLISmdE3PJTLOrx5gZfiBG
HRI6lLzn0gjG2OqQGVk57xtMSAt5Yo4QgzmPV4dZ/7QUtDOORdJ3utAdE1WuCCmv
Y9FKCdy4IL2Aokx8o8OQLWMCgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/TT6+8
qjaOgOlemPypN/HCMlyKMB8GA1UdIwQYMBaAFCHyAidVnbH4Y4SatkMjPD6TV3am
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTlCNy9BNEVDNTNGNkUy
QjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNmaGpoSnEyUXlNOFBwTlhk
cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lmSUNKMVdkc2ZoamhKcTJReU04UHBOWGRxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NTlCNy9BNEVDNTNGNkUyQjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNm
aGpoSnEyUXlNOFBwTlhkcVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCGMgfJTArJTthilgo/nxqR7iDnBHtm4SN5Qkd9Fk7e+JOt949jvow9
iZn9PfYbU4sc/l9/jtEWsf884uPbuN/itUq0aKbMqGRbw7a545RXHM1ZN2NQDngp
Db1+zdMV34AzOcUbt0tOYp3COk9IvgRlIgbJEpJsB7brth8qDCzeFIgz0WTc6Mf/
xSNEib3K65skmQJvJZipWCSQt5stwZwZAIaOVeYaFnC0RUuCdGaIojLy5Xn3qSs9
DPq7jlKc6uItuLKNsfthHsafA+vklqmZX5uwjr4MgAaL77NxKcxtPJuaruZ62mRg
WVXHwy1OJ1f067VIlgKiH3MV1YO/B4j+
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:30 2025 by rpki-client