Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft
File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json)
Hash identifier: QpleXavaPA0vOzjit8qBevY1Rr5v/N2Y5ySXGSVfUAY=
Subject key identifier: 10:BF:E3:C0:7E:5C:60:A9:E3:58:42:EE:BD:45:93:0A:2A:EF:9E:52
Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E
Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E
Certificate serial: 092D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft
Manifest number: 0915
Signing time: Fri 28 Mar 2025 20:37:20 +0000
Manifest this update: Fri 28 Mar 2025 20:37:20 +0000
Manifest next update: Fri 04 Apr 2025 20:37:20 +0000
Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: T1dxxDSWXssTC1sdcBT5E89J4d63mtMZWlK1FZZjsaM=)
2: FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (hash: kvRrYXzDEb1knff7u5sMUOY0LST5MU2sRwL9Qq51bMI=)
3: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: 5xmx4EdtRdh7/raKFzoldytV08fzGVQ9tShtrjhxke0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2349 (0x92d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118CA7
Validity
Not Before: Mar 28 20:37:20 2025 GMT
Not After : Apr 4 20:37:20 2025 GMT
Subject: CN=67e70880-09dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3a:e9:d4:c4:1c:2f:fd:42:67:28:fb:0d:14:
07:89:63:44:27:78:20:44:ec:02:c6:77:54:1c:71:
25:1e:e4:22:ea:65:25:2c:ca:94:e5:6d:25:3d:f3:
5e:fc:56:0f:ce:4d:7d:6b:4b:37:7c:96:8a:25:f0:
16:52:a1:35:af:ae:1b:d2:a9:65:5a:87:37:44:65:
ef:cf:3e:53:81:9b:05:5e:11:09:c6:d2:06:b4:cf:
1d:4c:fe:20:a7:79:ee:f2:59:1e:b3:e2:53:d2:db:
30:65:2a:69:ed:10:c4:ec:1b:ea:02:fc:df:d0:34:
8c:5f:7d:c8:2f:06:16:32:0d:a5:d1:07:52:58:0b:
24:69:cd:04:1b:c2:bd:dc:ee:13:66:03:60:19:c8:
f7:74:59:fc:d8:f8:cd:b4:b7:7e:41:d8:4c:0d:51:
83:ed:c0:0e:e7:13:a1:d6:77:ee:84:95:95:86:75:
df:b3:00:d8:0a:cd:73:ab:ec:5d:1a:10:2e:dc:9f:
6b:d7:68:56:67:b0:24:99:e0:77:2c:cf:01:41:74:
a0:6c:ab:d0:10:40:35:15:eb:16:a8:c6:45:1d:34:
a7:52:5e:17:55:6f:87:68:40:db:6f:0f:0b:c7:48:
49:8f:eb:3e:16:50:f9:e7:68:19:53:f8:de:f6:e6:
f1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BF:E3:C0:7E:5C:60:A9:E3:58:42:EE:BD:45:93:0A:2A:EF:9E:52
X509v3 Authority Key Identifier:
keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e7:b1:96:8c:40:1c:74:96:6d:b1:6d:1c:87:2b:f4:9d:0a:
4a:7d:d5:14:f7:49:9e:15:3a:ec:dd:fb:be:fa:bb:7e:af:53:
55:92:9b:54:91:35:2f:7e:74:42:79:64:95:6e:53:43:26:28:
9d:b8:cb:39:38:3f:a7:de:2e:4d:66:79:1c:d7:2a:ff:d9:83:
70:a3:cc:73:62:af:69:05:9a:26:7d:ad:19:cb:0c:ad:04:ee:
e8:50:8b:8c:e1:7a:c6:49:60:38:96:4c:84:b8:c4:d8:c7:98:
ff:aa:0e:0e:01:bb:3f:60:be:12:5a:0c:d9:22:c8:84:8a:67:
2a:9f:92:c2:79:44:c6:bc:61:bc:12:85:80:a8:9a:6e:be:44:
a4:0f:27:64:f5:5c:7e:a3:f6:5a:af:bd:14:5a:87:9c:da:0e:
1b:4f:38:4e:64:8e:ad:24:30:45:5c:0a:0e:eb:28:7f:fe:fd:
a6:28:a5:f0:ea:75:73:16:7e:95:4d:c1:3b:41:6f:86:81:02:
be:ea:64:68:85:1e:c2:03:e4:7e:4d:cb:bc:7d:51:f6:dc:20:
dc:8e:9e:90:94:51:c7:90:56:91:cf:2a:96:1c:b9:a9:a9:38:
a2:e8:ce:04:22:bb:16:44:ce:23:1e:e4:d6:49:2a:c9:bd:06:
f9:c3:e5:54
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MThDQTcxMTAvBgNVBAUTKEYxOTk4QTQ3NUU5MkRFOEE2QzdENDA5NDU1NkEwREE2
N0Q1RDREMEUwHhcNMjUwMzI4MjAzNzIwWhcNMjUwNDA0MjAzNzIwWjAYMRYwFAYD
VQQDEw02N2U3MDg4MC0wOWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApDrp1MQcL/1CZyj7DRQHiWNEJ3ggROwCxndUHHElHuQi6mUlLMqU5W0lPfNe
/FYPzk19a0s3fJaKJfAWUqE1r64b0qllWoc3RGXvzz5TgZsFXhEJxtIGtM8dTP4g
p3nu8lkes+JT0tswZSpp7RDE7BvqAvzf0DSMX33ILwYWMg2l0QdSWAskac0EG8K9
3O4TZgNgGcj3dFn82PjNtLd+QdhMDVGD7cAO5xOh1nfuhJWVhnXfswDYCs1zq+xd
GhAu3J9r12hWZ7AkmeB3LM8BQXSgbKvQEEA1FesWqMZFHTSnUl4XVW+HaEDbbw8L
x0hJj+s+FlD552gZU/je9ubxzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBC/48B+
XGCp41hC7r1Fkwoq755SMB8GA1UdIwQYMBaAFPGZikdekt6KbH1AlFVqDaZ9XU0O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOENBNy8yRkM3MEEyNEEw
RDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNvcHNmVUNVVldvTnBuMWRU
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhabUtSMTZTM29wc2ZVQ1VWV29OcG4xZFRRNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OENBNy8yRkM3MEEyNEEwRDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNv
cHNmVUNVVldvTnBuMWRUUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAO57GWjEAcdJZtsW0chyv0nQpKfdUU90meFTrs3fu++rt+r1NVkptU
kTUvfnRCeWSVblNDJiiduMs5OD+n3i5NZnkc1yr/2YNwo8xzYq9pBZomfa0Zywyt
BO7oUIuM4XrGSWA4lkyEuMTYx5j/qg4OAbs/YL4SWgzZIsiEimcqn5LCeUTGvGG8
EoWAqJpuvkSkDydk9Vx+o/Zar70UWoec2g4bTzhOZI6tJDBFXAoO6yh//v2mKKXw
6nVzFn6VTcE7QW+GgQK+6mRohR7CA+R+Tcu8fVH23CDcjp6QlFHHkFaRzyqWHLmp
qTii6M4EIrsWRM4jHuTWSSrJvQb5w+VU
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:03 2025 by rpki-client