Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
File: cQnPztTUjL9WSOoHl6fHNH1o_xI.mft (raw, json)
Hash identifier: 75SyQ3fC/1J1MXzaIjn4siHo6ksHOiKp/fVvjfWlUes=
Subject key identifier: CA:D0:5C:71:F5:1F:5D:9E:A5:72:7E:6E:5C:18:DB:5B:C4:4F:A1:AE
Authority key identifier: 71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12
Certificate issuer: /CN=A913132A/serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12
Certificate serial: 3462
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
Manifest number: 3462
Signing time: Fri 28 Mar 2025 15:20:13 +0000
Manifest this update: Fri 28 Mar 2025 15:20:13 +0000
Manifest next update: Fri 04 Apr 2025 15:20:13 +0000
Files and hashes: 1: cQnPztTUjL9WSOoHl6fHNH1o_xI.crl (hash: kw8q34ke85Zfdaqcs2Df/GewLlTYbYGtKzGEIQ9dR0Q=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13410 (0x3462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913132A
Validity
Not Before: Mar 28 15:20:13 2025 GMT
Not After : Apr 4 15:20:13 2025 GMT
Subject: CN=67e6be2d-f453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:8b:5c:a1:e6:69:1c:81:23:f1:8f:df:7b:
ab:57:70:c2:8d:68:99:9b:4f:38:d0:b2:31:ad:c1:
1c:47:f1:ce:e2:43:fb:f2:1e:c5:a6:fe:f7:ce:92:
b7:ae:40:aa:5a:2b:ea:83:2c:85:cb:93:02:28:6e:
aa:4d:57:ab:0d:8f:23:34:99:c8:be:0b:13:fc:6d:
0f:59:68:ba:ad:16:6f:78:84:49:57:d8:71:df:22:
5b:b9:fa:3d:de:eb:36:8b:07:ab:67:98:f1:ad:ef:
ca:aa:1c:bd:fe:55:94:81:e5:1b:1a:4c:c2:e8:66:
94:7b:03:49:4d:70:00:e2:f0:a0:9f:ac:cc:62:e3:
c3:16:2f:3f:53:aa:85:f0:c9:a4:69:a8:30:48:56:
d1:e9:cf:d9:bb:78:55:3c:f4:46:12:65:6a:7c:4f:
db:73:0b:7c:97:42:61:cb:2a:64:fa:51:51:f2:93:
1c:f0:df:ce:fa:68:84:be:5e:96:10:0e:95:fb:91:
0b:cc:5f:5d:55:6e:99:ae:4c:32:f5:d5:20:4c:e2:
b2:66:e1:1f:19:dd:f7:82:ac:ed:b2:fb:91:5b:6e:
43:bf:26:d2:2d:0e:0c:5f:c2:26:7d:54:28:9e:b7:
a0:86:5d:e2:32:e4:24:32:a6:43:e1:b7:c2:5f:d5:
47:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D0:5C:71:F5:1F:5D:9E:A5:72:7E:6E:5C:18:DB:5B:C4:4F:A1:AE
X509v3 Authority Key Identifier:
keyid:71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:52:ab:7c:af:02:19:60:e7:2b:d6:6a:76:c2:f5:f3:b1:d5:
2e:0c:18:97:0a:c3:b9:56:ac:37:05:7e:7c:8d:2c:ee:59:30:
35:a2:ce:4f:ad:f3:8a:15:15:f8:28:6d:79:dc:45:67:d9:74:
3f:6c:c3:17:57:07:3e:e4:81:97:e0:f5:2f:59:7d:3d:02:af:
d8:73:ae:11:11:83:43:e7:d1:5d:8b:43:11:cb:90:23:f3:c6:
48:cf:93:ab:8b:04:d9:2b:83:52:41:0f:b2:1e:ee:2f:be:43:
fb:94:93:b0:fe:fd:8f:a0:f6:f3:3c:4f:63:93:a6:b1:30:82:
69:c3:7c:df:6a:04:84:4f:58:fa:27:b0:c2:aa:88:b5:dd:e7:
6a:a7:2f:f5:43:b1:d5:45:27:0a:a9:5c:ee:b1:6f:6d:10:a3:
6e:f3:7d:0c:da:de:54:a0:ec:64:8e:74:c1:26:c4:63:bf:cd:
95:d6:79:68:3c:39:e6:5f:f7:c3:ec:3d:5e:cf:42:cd:6f:ff:
95:5b:7c:23:42:37:79:2d:f3:6f:d9:a0:da:83:36:f5:aa:12:
16:75:92:35:cd:83:c7:0f:e0:ab:fe:27:aa:cf:a1:41:3f:5f:
51:0a:77:b4:67:83:a3:e4:73:a0:ec:24:92:75:f4:b8:6c:9c:
e5:00:83:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzEzMkExMTAvBgNVBAUTKDcxMDlDRkNFRDRENDhDQkY1NjQ4RUEwNzk3QTdDNzM0
N0Q2OEZGMTIwHhcNMjUwMzI4MTUyMDEzWhcNMjUwNDA0MTUyMDEzWjAYMRYwFAYD
VQQDEw02N2U2YmUyZC1mNDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwEWLXKHmaRyBI/GP33urV3DCjWiZm0840LIxrcEcR/HO4kP78h7Fpv73zpK3
rkCqWivqgyyFy5MCKG6qTVerDY8jNJnIvgsT/G0PWWi6rRZveIRJV9hx3yJbufo9
3us2iwerZ5jxre/Kqhy9/lWUgeUbGkzC6GaUewNJTXAA4vCgn6zMYuPDFi8/U6qF
8MmkaagwSFbR6c/Zu3hVPPRGEmVqfE/bcwt8l0Jhyypk+lFR8pMc8N/O+miEvl6W
EA6V+5ELzF9dVW6Zrkwy9dUgTOKyZuEfGd33gqztsvuRW25DvybSLQ4MX8ImfVQo
nreghl3iMuQkMqZD4bfCX9VHBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrQXHH1
H12epXJ+blwY21vET6GuMB8GA1UdIwQYMBaAFHEJz87U1Iy/VkjqB5enxzR9aP8S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTMyQS9CMTE2NDhEODFE
QTcxMUUyOEI2RTg2QTEwOEIwMkNEMi9jUW5QenRUVWpMOVdTT29IbDZmSE5IMW9f
eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NRblB6dFRVakw5V1NPb0hsNmZITkgxb194SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTMyQS9CMTE2NDhEODFEQTcxMUUyOEI2RTg2QTEwOEIwMkNEMi9jUW5QenRUVWpM
OVdTT29IbDZmSE5IMW9feEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQALUqt8rwIZYOcr1mp2wvXzsdUuDBiXCsO5Vqw3BX58jSzuWTA1os5P
rfOKFRX4KG153EVn2XQ/bMMXVwc+5IGX4PUvWX09Aq/Yc64REYND59Fdi0MRy5Aj
88ZIz5OriwTZK4NSQQ+yHu4vvkP7lJOw/v2PoPbzPE9jk6axMIJpw3zfagSET1j6
J7DCqoi13edqpy/1Q7HVRScKqVzusW9tEKNu830M2t5UoOxkjnTBJsRjv82V1nlo
PDnmX/fD7D1ez0LNb/+VW3wjQjd5LfNv2aDagzb1qhIWdZI1zYPHD+Cr/ieqz6FB
P19RCne0Z4Oj5HOg7CSSdfS4bJzlAIM7
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:43 2025 by rpki-client