Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
File: q1NeEyiEvKNF969pE6sKOXdl56k.mft (raw, json)
Hash identifier: isS7Ag1okyWRR3hcV3nhoXGx69U8Kvq2GXOfvwksSyQ=
Subject key identifier: B4:76:9C:53:34:74:4F:32:1F:56:91:9C:59:4F:F4:52:D3:01:EB:91
Authority key identifier: AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
Certificate issuer: /CN=A9115F15/serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Certificate serial: 0713
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
Manifest number: 0702
Signing time: Fri 28 Mar 2025 22:14:14 +0000
Manifest this update: Fri 28 Mar 2025 22:14:14 +0000
Manifest next update: Fri 04 Apr 2025 22:14:14 +0000
Files and hashes: 1: q1NeEyiEvKNF969pE6sKOXdl56k.crl (hash: 1CNU8lAr7uZnwmwgUKBDUacwCu8ZfqDdQ6ymi2Fxm7w=)
2: 1E812B043A9611EB8CD4224BC4F9AE02.roa (hash: 2rloIWspoTdsayqQCE8TDyVLzZgtkvVp6yhHBSi7B7A=)
3: 1F2DD6743A9611EB8CD4224BC4F9AE02.roa (hash: TlDhnldYuakAwxJhMCiNbVx6zqDuO+DOexXHVfVHcu4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1811 (0x713)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115F15
Validity
Not Before: Mar 28 22:14:14 2025 GMT
Not After : Apr 4 22:14:14 2025 GMT
Subject: CN=67e71f36-70b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:12:29:9b:a1:ba:4f:b9:50:ae:f5:d9:75:ac:
0a:6f:40:b4:cf:34:6f:6d:60:8b:a8:69:e4:05:41:
26:6f:9a:cc:60:00:ac:f6:f4:67:82:0b:e7:01:00:
65:e7:e5:1b:c3:64:4f:7a:4e:42:38:96:8c:79:01:
b2:17:67:08:1c:08:04:ef:45:c4:2a:f3:35:d0:a6:
a4:f1:83:bb:40:c6:1a:2c:77:03:7e:8b:43:a0:1c:
40:2f:67:94:10:8f:92:d5:1f:db:82:23:7c:d3:e2:
3e:69:2c:16:40:9d:3e:27:80:bf:7b:0c:da:7a:96:
76:ad:0c:c4:72:3e:c5:30:7f:1d:68:31:9d:3e:b7:
45:5c:85:7b:f8:8c:86:e7:9e:4f:14:71:c2:e4:f9:
18:03:24:51:86:ca:3d:c3:12:7f:bf:73:64:09:c9:
f8:1c:85:b9:9e:21:96:0d:a2:e3:21:62:19:fb:6a:
de:db:fe:65:ca:12:d8:e7:98:3e:55:b5:d7:6c:99:
39:a5:79:d5:cf:b9:89:33:5e:fc:13:bb:92:fa:19:
d1:23:c4:61:3c:59:63:c9:b7:36:68:5c:41:7f:23:
f3:07:b2:d1:b7:50:58:35:1e:87:15:0f:6f:f0:5b:
54:1f:11:e2:cf:cc:ae:57:18:2e:3b:f3:cc:a8:e4:
dd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:76:9C:53:34:74:4F:32:1F:56:91:9C:59:4F:F4:52:D3:01:EB:91
X509v3 Authority Key Identifier:
keyid:AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:b2:f3:fb:98:46:e8:60:64:13:86:cb:77:54:48:21:57:a3:
ee:37:36:a1:09:96:d5:1d:22:00:41:56:ff:ce:13:23:a3:9f:
0d:03:ab:89:9d:de:62:e2:bd:fe:de:54:89:13:a8:ab:11:a6:
1d:6c:c0:de:76:a4:a8:9f:67:64:d1:b0:5d:58:47:c8:68:5e:
69:7a:e5:dc:83:1f:e7:c5:fe:14:84:ac:06:45:8e:63:e5:ed:
03:b0:04:05:ea:b2:e9:93:b1:8b:f2:5a:65:9c:bb:8b:da:37:
d5:f7:fb:6a:d7:73:33:e3:6b:38:83:35:59:15:39:0f:f6:fe:
c8:16:15:b3:bc:d4:36:a3:5b:d8:fa:8c:0d:ce:5e:ae:f4:32:
9b:9d:e7:81:81:41:e2:0c:8f:c1:09:84:f9:ee:93:84:a4:57:
78:cd:f6:37:08:b2:e8:ba:ff:07:89:00:ad:79:60:00:a0:06:
ed:31:fa:03:c6:00:2a:f9:78:f2:73:c4:38:93:8b:fe:74:8a:
e2:fc:1e:d6:98:e8:3a:69:9e:d0:f0:69:79:5c:28:b9:e7:5a:
22:cf:51:c4:d3:39:ea:1e:2b:ef:98:65:65:63:d5:97:af:b3:
f3:07:b9:d4:9b:a0:00:22:0b:88:84:4c:2c:f8:49:f8:ce:c3:
a7:94:9c:a6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTVGMTUxMTAvBgNVBAUTKEFCNTM1RTEzMjg4NEJDQTM0NUY3QUY2OTEzQUIwQTM5
Nzc2NUU3QTkwHhcNMjUwMzI4MjIxNDE0WhcNMjUwNDA0MjIxNDE0WjAYMRYwFAYD
VQQDEw02N2U3MWYzNi03MGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6hIpm6G6T7lQrvXZdawKb0C0zzRvbWCLqGnkBUEmb5rMYACs9vRnggvnAQBl
5+Ubw2RPek5COJaMeQGyF2cIHAgE70XEKvM10Kak8YO7QMYaLHcDfotDoBxAL2eU
EI+S1R/bgiN80+I+aSwWQJ0+J4C/ewzaepZ2rQzEcj7FMH8daDGdPrdFXIV7+IyG
555PFHHC5PkYAyRRhso9wxJ/v3NkCcn4HIW5niGWDaLjIWIZ+2re2/5lyhLY55g+
VbXXbJk5pXnVz7mJM178E7uS+hnRI8RhPFljybc2aFxBfyPzB7LRt1BYNR6HFQ9v
8FtUHxHiz8yuVxguO/PMqOTdHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLR2nFM0
dE8yH1aRnFlP9FLTAeuRMB8GA1UdIwQYMBaAFKtTXhMohLyjRfevaROrCjl3Zeep
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUYxNS9GRkVEMjc5NDNB
OTMxMUVCQUJERTIzMkZDNEY5QUUwMi9xMU5lRXlpRXZLTkY5NjlwRTZzS09YZGw1
NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ExTmVFeWlFdktORjk2OXBFNnNLT1hkbDU2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NUYxNS9GRkVEMjc5NDNBOTMxMUVCQUJERTIzMkZDNEY5QUUwMi9xMU5lRXlpRXZL
TkY5NjlwRTZzS09YZGw1NmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCGsvP7mEboYGQThst3VEghV6PuNzahCZbVHSIAQVb/zhMjo58NA6uJ
nd5i4r3+3lSJE6irEaYdbMDedqSon2dk0bBdWEfIaF5peuXcgx/nxf4UhKwGRY5j
5e0DsAQF6rLpk7GL8lplnLuL2jfV9/tq13Mz42s4gzVZFTkP9v7IFhWzvNQ2o1vY
+owNzl6u9DKbneeBgUHiDI/BCYT57pOEpFd4zfY3CLLouv8HiQCteWAAoAbtMfoD
xgAq+Xjyc8Q4k4v+dIri/B7WmOg6aZ7Q8Gl5XCi551oiz1HE0znqHivvmGVlY9WX
r7PzB7nUm6AAIguIhEws+En4zsOnlJym
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:39 2025 by rpki-client