Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
File: J8wSkYRVB6yvwoe3f-lP6lPdycI.mft (raw, json)
Hash identifier: BQV2zraGOqYKuDNF5je+3VrEYBSE8Yvi267Vkh9J6B8=
Subject key identifier: 92:91:A0:8B:FF:66:9B:C8:30:4B:48:32:1C:4F:28:41:64:58:4F:37
Authority key identifier: 27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2
Certificate issuer: /CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2
Certificate serial: 0C14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
Manifest number: 0C06
Signing time: Fri 28 Mar 2025 18:50:52 +0000
Manifest this update: Fri 28 Mar 2025 18:50:52 +0000
Manifest next update: Fri 04 Apr 2025 18:50:52 +0000
Files and hashes: 1: J8wSkYRVB6yvwoe3f-lP6lPdycI.crl (hash: ypyMj8rCpzZzyTRSy/VOJYB0mYryXkBN3Ob/tLxSYtQ=)
2: 4A6A598EDB1311EB9B223B40C4F9AE02.roa (hash: 1gxw5LanH6K05ytHQ24AFaIeR9aTp+NtUFQdmJYcVT0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3092 (0xc14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134CF6
Validity
Not Before: Mar 28 18:50:52 2025 GMT
Not After : Apr 4 18:50:52 2025 GMT
Subject: CN=67e6ef8c-3597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:c9:8d:76:07:4e:bf:80:77:34:4d:4d:c0:
c6:17:e8:1f:a9:8f:b2:03:88:6a:b7:a9:b9:51:7e:
11:c3:13:0b:4d:c6:4f:00:2b:a5:7a:cf:03:59:d3:
87:38:28:fa:e4:7d:5a:30:f3:8d:fa:1d:ec:89:05:
62:d0:49:c6:59:48:c6:0c:2d:b3:b5:0d:fa:90:70:
a1:a6:8a:d2:34:c1:eb:85:01:80:40:cc:20:b3:eb:
54:3e:eb:2a:32:33:02:61:16:05:69:ad:17:85:26:
e4:fd:1d:c8:3d:a4:cd:19:75:45:ed:ee:37:99:30:
95:c7:bf:f5:64:88:b4:96:27:31:ac:2b:03:fa:d5:
4a:b0:e0:87:02:1e:20:9c:40:18:20:d4:d8:94:b1:
f4:49:51:90:97:fc:d9:79:0a:50:09:da:a0:a1:c9:
c8:f3:b4:ab:5b:9c:c5:36:fe:28:7c:55:83:62:87:
28:46:49:6f:ba:13:39:66:4f:96:4c:b4:24:57:02:
31:3a:7f:9d:e4:b0:ad:86:df:cd:31:6d:a2:ca:6d:
08:03:be:be:20:76:a6:2d:35:d0:46:6d:88:54:bf:
5e:6f:6b:26:d9:77:7b:82:a6:28:5a:47:a7:4c:65:
76:c1:43:fc:5a:ad:a5:da:7c:b5:a7:a4:68:7a:7e:
bc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:91:A0:8B:FF:66:9B:C8:30:4B:48:32:1C:4F:28:41:64:58:4F:37
X509v3 Authority Key Identifier:
keyid:27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:75:d3:a1:f1:54:85:86:b8:ff:da:98:e0:95:41:c9:31:e9:
be:27:e5:c0:0d:8e:1f:1e:79:ec:15:5b:33:87:43:e9:00:d5:
c6:e7:89:20:49:a7:e7:da:53:94:e6:75:06:9f:82:b6:83:b4:
2c:cf:56:a3:fa:14:d0:ee:c1:44:81:09:a8:2d:2e:e0:71:7a:
2b:9e:49:4c:9b:f1:37:ec:6e:dd:dc:9b:bd:50:75:89:cc:4a:
3b:05:80:b2:cc:73:42:b3:6e:20:2e:a6:b6:98:da:39:6c:89:
c4:d3:0f:21:c6:51:0a:2a:87:47:0f:d4:51:5a:e2:9c:36:0b:
61:41:4b:a8:8c:9c:a7:66:c2:d8:f0:3f:3f:a3:62:fa:af:58:
25:26:36:a6:5b:d9:9c:3a:94:95:2f:fd:41:75:32:25:95:d5:
87:30:d9:e6:9c:2f:a8:d9:35:49:e7:fa:55:45:38:1d:c2:ab:
2b:1c:52:5d:78:f7:b0:7d:a5:53:8a:37:56:41:40:3f:e9:73:
58:76:8d:fd:3e:26:63:20:8d:08:a9:4f:e2:b3:18:1c:76:e0:
cf:cc:bb:2f:32:4e:b1:ec:df:98:23:72:89:7d:2d:2b:79:59:
ba:7f:a3:0e:75:98:ef:71:be:08:b1:fe:dc:9d:b8:6d:4e:c5:
9d:07:27:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzRDRjYxMTAvBgNVBAUTKDI3Q0MxMjkxODQ1NTA3QUNBRkMyODdCNzdGRTk0RkVB
NTNEREM5QzIwHhcNMjUwMzI4MTg1MDUyWhcNMjUwNDA0MTg1MDUyWjAYMRYwFAYD
VQQDEw02N2U2ZWY4Yy0zNTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvBLJjXYHTr+AdzRNTcDGF+gfqY+yA4hqt6m5UX4RwxMLTcZPACules8DWdOH
OCj65H1aMPON+h3siQVi0EnGWUjGDC2ztQ36kHChporSNMHrhQGAQMwgs+tUPusq
MjMCYRYFaa0XhSbk/R3IPaTNGXVF7e43mTCVx7/1ZIi0licxrCsD+tVKsOCHAh4g
nEAYINTYlLH0SVGQl/zZeQpQCdqgocnI87SrW5zFNv4ofFWDYocoRklvuhM5Zk+W
TLQkVwIxOn+d5LCtht/NMW2iym0IA76+IHamLTXQRm2IVL9eb2sm2Xd7gqYoWken
TGV2wUP8Wq2l2ny1p6Roen68swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKRoIv/
ZpvIMEtIMhxPKEFkWE83MB8GA1UdIwQYMBaAFCfMEpGEVQesr8KHt3/pT+pT3cnC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENGNi9GRDI1MDE4QTBC
N0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2eXZ3b2UzZi1sUDZsUGR5
Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0o4d1NrWVJWQjZ5dndvZTNmLWxQNmxQZHljSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NENGNi9GRDI1MDE4QTBCN0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2
eXZ3b2UzZi1sUDZsUGR5Y0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZddOh8VSFhrj/2pjglUHJMem+J+XADY4fHnnsFVszh0PpANXG54kg
Safn2lOU5nUGn4K2g7Qsz1aj+hTQ7sFEgQmoLS7gcXornklMm/E37G7d3Ju9UHWJ
zEo7BYCyzHNCs24gLqa2mNo5bInE0w8hxlEKKodHD9RRWuKcNgthQUuojJynZsLY
8D8/o2L6r1glJjamW9mcOpSVL/1BdTIlldWHMNnmnC+o2TVJ5/pVRTgdwqsrHFJd
ePewfaVTijdWQUA/6XNYdo39PiZjII0IqU/isxgcduDPzLsvMk6x7N+YI3KJfS0r
eVm6f6MOdZjvcb4Isf7cnbhtTsWdByfJ
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:33 2025 by rpki-client