Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
File: Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft (raw, json)
Hash identifier: IZ7TfRTryH2bLtz1uFEOUSeGJbrXjQlbgLUn1AbtF2k=
Subject key identifier: EC:90:EE:A6:79:86:A7:2F:70:AB:81:5C:BB:D8:76:9A:2D:7A:EA:F6
Authority key identifier: 2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1
Certificate issuer: /CN=A91325FD/serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1
Certificate serial: 34E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
Manifest number: 34AA
Signing time: Fri 28 Mar 2025 14:15:40 +0000
Manifest this update: Fri 28 Mar 2025 14:15:39 +0000
Manifest next update: Fri 04 Apr 2025 14:15:39 +0000
Files and hashes: 1: Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl (hash: V/WDSVIrRwtSDDMW8EKAziw3t4E6cd+S+I/4/7oF33M=)
2: 58C5CA92AF9411EE9774D74CC4F9AE02.roa (hash: kZ7lGqUSa7QDbdQn5Phtug9wEvqAopDp24gkxncZqms=)
3: 6A45D74E118811EE88E9FE46C4F9AE02.roa (hash: gPXM355jFI8rfBytnJ40meI4jOctz96q7otlI3dOULI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13541 (0x34e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91325FD
Validity
Not Before: Mar 28 14:15:39 2025 GMT
Not After : Apr 4 14:15:39 2025 GMT
Subject: CN=67e6af0b-9b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:64:86:b8:6d:3f:e7:31:b1:7e:f1:36:e5:
a1:76:8d:01:ed:ac:4f:be:b0:f9:12:60:28:3a:5f:
81:39:8d:74:67:ba:b9:75:c6:e9:73:15:d2:ec:19:
3b:73:5e:2e:da:15:a9:b9:3c:4f:47:3a:ca:c4:6d:
6d:fb:e7:a0:47:f4:98:60:06:6d:a4:39:ac:ee:85:
04:2c:2b:5e:14:e8:2b:81:e0:2e:22:01:fd:44:d9:
b2:fb:99:d3:b9:0b:48:41:39:a8:b0:73:60:96:4b:
81:a4:5e:5d:7f:77:cf:d3:cd:c6:43:02:fc:71:b4:
92:3f:94:5c:23:33:d8:ed:1e:c7:11:41:f8:ca:d8:
b8:54:91:9e:4e:13:ba:40:11:ce:7c:85:2e:19:40:
69:72:ac:1f:dc:d1:1b:db:45:38:63:d5:bf:7b:d9:
a1:c1:09:fc:b1:7e:80:10:58:7c:5e:80:74:8b:d1:
db:3f:8e:a0:55:14:6f:a0:ce:b1:13:86:5b:ba:db:
8b:35:1c:a2:1f:c7:85:59:ca:ad:8f:28:80:22:2a:
34:d8:30:d2:f3:f2:df:52:d6:0c:ad:f5:f3:c2:5f:
85:c1:e0:ce:a2:ab:e1:bc:56:b4:af:ac:5a:22:57:
9c:5c:7d:ee:8c:d9:8d:f6:b8:8c:c1:fa:54:21:b4:
f2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:90:EE:A6:79:86:A7:2F:70:AB:81:5C:BB:D8:76:9A:2D:7A:EA:F6
X509v3 Authority Key Identifier:
keyid:2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:eb:0c:d3:9e:9c:d7:ae:85:eb:a8:d2:64:b8:5d:bf:fe:57:
55:de:da:10:ad:62:a6:a1:69:86:49:fe:53:bf:f2:1f:af:43:
49:3b:de:85:75:e8:7f:0d:3c:76:c9:54:2f:22:80:05:ed:02:
ae:d2:79:59:5e:9c:0f:f1:86:64:22:93:9f:54:8c:c3:07:71:
58:51:80:d0:d7:b2:ae:80:29:03:bd:89:a7:63:4e:10:44:a5:
30:db:f5:6a:92:76:7e:ec:b0:8d:84:4e:ae:68:c0:a3:d3:48:
39:74:7e:65:76:88:55:28:a8:87:39:db:dc:38:e4:77:c3:3f:
07:40:ce:61:72:68:f1:da:0d:f8:68:29:9b:07:e5:e7:6b:07:
99:08:d8:3b:77:a4:d3:70:58:9e:3b:85:d0:00:b4:e4:ce:0f:
81:b6:92:7d:0c:54:7d:b8:fc:0e:ee:c5:17:d9:8b:47:51:f9:
61:80:88:5f:ea:b6:17:b0:36:ed:7f:e7:05:18:2d:3e:31:d8:
28:38:0b:fd:18:eb:3b:e3:59:36:fc:4d:20:b1:90:ae:91:e9:
d7:0d:20:50:cc:9f:25:a4:97:3b:9e:4d:52:96:32:04:07:c4:
5d:93:53:59:0a:75:6d:63:de:31:45:c4:1d:8c:85:2f:99:c0:
19:6e:43:c8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzI1RkQxMTAvBgNVBAUTKDJFOERBRjQ5RTI3RTRGQzEyQkUwNUVGN0RGMUE4MkJC
Mjg3MTI2QTEwHhcNMjUwMzI4MTQxNTM5WhcNMjUwNDA0MTQxNTM5WjAYMRYwFAYD
VQQDEw02N2U2YWYwYi05YjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxWFkhrhtP+cxsX7xNuWhdo0B7axPvrD5EmAoOl+BOY10Z7q5dcbpcxXS7Bk7
c14u2hWpuTxPRzrKxG1t++egR/SYYAZtpDms7oUELCteFOgrgeAuIgH9RNmy+5nT
uQtIQTmosHNglkuBpF5df3fP083GQwL8cbSSP5RcIzPY7R7HEUH4yti4VJGeThO6
QBHOfIUuGUBpcqwf3NEb20U4Y9W/e9mhwQn8sX6AEFh8XoB0i9HbP46gVRRvoM6x
E4ZbutuLNRyiH8eFWcqtjyiAIio02DDS8/LfUtYMrfXzwl+FweDOoqvhvFa0r6xa
IlecXH3ujNmN9riMwfpUIbTyiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyQ7qZ5
hqcvcKuBXLvYdpoteur2MB8GA1UdIwQYMBaAFC6Nr0nifk/BK+Be998agrsocSah
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVGRC9CQ0U0RDEwQTFE
NjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4RXI0RjczM3hxQ3V5aHhK
cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xvMnZTZUotVDhFcjRGNzMzeHFDdXloeEpxRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MjVGRC9CQ0U0RDEwQTFENjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4
RXI0RjczM3hxQ3V5aHhKcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBb6wzTnpzXroXrqNJkuF2//ldV3toQrWKmoWmGSf5Tv/Ifr0NJO96F
deh/DTx2yVQvIoAF7QKu0nlZXpwP8YZkIpOfVIzDB3FYUYDQ17KugCkDvYmnY04Q
RKUw2/VqknZ+7LCNhE6uaMCj00g5dH5ldohVKKiHOdvcOOR3wz8HQM5hcmjx2g34
aCmbB+XnaweZCNg7d6TTcFieO4XQALTkzg+BtpJ9DFR9uPwO7sUX2YtHUflhgIhf
6rYXsDbtf+cFGC0+MdgoOAv9GOs741k2/E0gsZCukenXDSBQzJ8lpJc7nk1SljIE
B8Rdk1NZCnVtY94xRcQdjIUvmcAZbkPI
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:47 2025 by rpki-client