Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft
File: UHztrU5Y_M0K4JOTmGWG21g_B6I.mft (raw, json)
Hash identifier: pDX8/hl/g4cAxEB6vVqaqzdMqZfTT3335PUbwiKjkCQ=
Subject key identifier: F4:D7:E9:D2:AD:36:31:CC:AA:02:17:C5:51:28:49:E1:50:A8:2A:71
Authority key identifier: 50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2
Certificate issuer: /CN=A912C8FD/serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2
Certificate serial: 0B8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft
Manifest number: 0B8A
Signing time: Fri 28 Mar 2025 19:10:41 +0000
Manifest this update: Fri 28 Mar 2025 19:10:41 +0000
Manifest next update: Fri 04 Apr 2025 19:10:40 +0000
Files and hashes: 1: UHztrU5Y_M0K4JOTmGWG21g_B6I.crl (hash: jBpMDfvx6pf34Ltu8KoToKyAyKaZiT1ML9dIVnKnF/E=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2954 (0xb8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8FD
Validity
Not Before: Mar 28 19:10:41 2025 GMT
Not After : Apr 4 19:10:40 2025 GMT
Subject: CN=67e6f431-26bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:ce:2e:3b:07:ae:2f:d5:f6:cb:62:50:a9:
f7:86:c7:55:b2:74:4f:d9:53:36:eb:71:a8:a9:95:
29:e0:ad:25:3f:e9:fe:55:9d:69:10:05:fa:89:32:
81:60:f5:3b:30:31:fe:9f:26:fc:1c:43:72:d0:bc:
83:7c:1a:b2:97:49:db:ed:d3:6a:ba:6a:2b:4d:35:
42:d0:49:0f:f0:25:6d:bf:f9:33:4a:47:f0:0d:fa:
9e:17:d1:15:2f:4f:98:c8:16:3c:e1:fe:7d:ee:87:
14:ab:59:17:3c:80:c0:53:f3:3d:20:36:57:dc:70:
3d:a2:98:5a:33:99:1a:7e:f5:6a:d4:5c:24:0b:d2:
98:08:06:28:36:22:2e:6c:16:9b:95:96:ec:4c:e9:
46:90:76:64:5e:7b:07:d6:f0:c7:83:c4:fd:df:00:
2e:dd:35:35:a7:ee:9c:b1:41:34:06:be:5f:f4:e9:
98:1b:62:23:80:f5:e6:42:ad:40:0c:ec:8d:d9:eb:
33:b4:22:7c:3e:a0:5d:11:8b:02:33:35:84:32:3d:
46:ff:38:1d:5a:f7:76:f8:d4:69:56:0a:d5:4a:c1:
d6:3f:1f:8b:ce:7a:87:06:5e:d0:4e:e1:54:85:35:
2d:8d:50:00:8e:19:c7:ad:8e:19:e7:45:88:cf:8b:
02:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D7:E9:D2:AD:36:31:CC:AA:02:17:C5:51:28:49:E1:50:A8:2A:71
X509v3 Authority Key Identifier:
keyid:50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:38:52:ce:66:06:5a:72:07:3a:80:da:56:03:80:ad:41:28:
11:fe:e0:88:62:83:a0:04:e4:08:a2:99:b7:a5:b7:c0:27:22:
9e:f9:d7:3c:eb:90:49:31:04:b1:92:fa:14:97:5a:83:54:b0:
58:d4:fb:10:27:c5:8c:42:fa:6b:ec:a3:b7:72:4e:59:30:63:
b8:70:3e:84:85:25:31:ee:d3:01:dd:1f:ad:5b:74:03:b6:52:
8c:f3:3d:eb:76:2f:4d:15:5e:b5:bd:71:c9:89:7a:3a:3c:db:
91:e3:9e:74:10:16:8f:6f:d6:ae:76:09:90:1c:74:bc:98:d7:
c3:c1:f9:d3:80:a3:75:f9:33:6c:49:0a:5d:e1:fa:9c:bc:12:
b5:e0:9b:11:df:de:fd:77:9c:16:99:f6:ed:97:4f:cb:eb:d6:
cb:4f:4d:85:3c:25:f3:73:f7:fa:67:03:54:66:5a:e5:eb:ee:
1e:5b:6e:e1:1e:c1:4a:a0:29:8d:35:5f:84:1d:30:3a:a6:2f:
62:5a:09:fa:d0:f4:ca:68:ba:97:1b:9c:bb:09:30:0d:b0:b0:
c5:b9:fb:a9:6c:e0:f0:77:5a:cb:f0:4e:05:7b:f5:00:51:d6:
7e:79:50:f0:fd:5d:d6:19:e0:5d:b5:7c:4c:ba:05:d3:1f:25:
54:bc:6b:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM4RkQxMTAvBgNVBAUTKDUwN0NFREFENEU1OEZDQ0QwQUUwOTM5Mzk4NjU4NkRC
NTgzRjA3QTIwHhcNMjUwMzI4MTkxMDQxWhcNMjUwNDA0MTkxMDQwWjAYMRYwFAYD
VQQDEw02N2U2ZjQzMS0yNmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtRLOLjsHri/V9stiUKn3hsdVsnRP2VM263GoqZUp4K0lP+n+VZ1pEAX6iTKB
YPU7MDH+nyb8HENy0LyDfBqyl0nb7dNqumorTTVC0EkP8CVtv/kzSkfwDfqeF9EV
L0+YyBY84f597ocUq1kXPIDAU/M9IDZX3HA9ophaM5kafvVq1FwkC9KYCAYoNiIu
bBablZbsTOlGkHZkXnsH1vDHg8T93wAu3TU1p+6csUE0Br5f9OmYG2IjgPXmQq1A
DOyN2esztCJ8PqBdEYsCMzWEMj1G/zgdWvd2+NRpVgrVSsHWPx+LznqHBl7QTuFU
hTUtjVAAjhnHrY4Z50WIz4sCBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTX6dKt
NjHMqgIXxVEoSeFQqCpxMB8GA1UdIwQYMBaAFFB87a1OWPzNCuCTk5hlhttYPwei
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGRC82NzRDRTJGMDIx
NjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9NMEs0Sk9UbUdXRzIxZ19C
NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VIenRyVTVZX00wSzRKT1RtR1dHMjFnX0I2SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzhGRC82NzRDRTJGMDIxNjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9N
MEs0Sk9UbUdXRzIxZ19CNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBhOFLOZgZacgc6gNpWA4CtQSgR/uCIYoOgBOQIopm3pbfAJyKe+dc8
65BJMQSxkvoUl1qDVLBY1PsQJ8WMQvpr7KO3ck5ZMGO4cD6EhSUx7tMB3R+tW3QD
tlKM8z3rdi9NFV61vXHJiXo6PNuR4550EBaPb9audgmQHHS8mNfDwfnTgKN1+TNs
SQpd4fqcvBK14JsR3979d5wWmfbtl0/L69bLT02FPCXzc/f6ZwNUZlrl6+4eW27h
HsFKoCmNNV+EHTA6pi9iWgn60PTKaLqXG5y7CTANsLDFufupbODwd1rL8E4Fe/UA
UdZ+eVDw/V3WGeBdtXxMugXTHyVUvGt7
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:02 2025 by rpki-client