Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
File: vhgzygFCXO9HWUXxmZieZUOzHmI.mft (raw, json)
Hash identifier: 5yukwk2L+5xs3EckuhjRHn7t8yKeGK8Qjvh4/61/miI=
Subject key identifier: 3E:83:C7:D4:C4:9E:B5:36:18:6D:E4:1B:BE:75:86:C3:26:9B:90:A0
Authority key identifier: BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62
Certificate issuer: /CN=A91382E4/serialNumber=BE1833CA01425CEF475945F199989E6543B31E62
Certificate serial: 02FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
Manifest number: 02F5
Signing time: Sat 29 Mar 2025 01:34:26 +0000
Manifest this update: Sat 29 Mar 2025 01:34:26 +0000
Manifest next update: Sat 05 Apr 2025 01:34:26 +0000
Files and hashes: 1: vhgzygFCXO9HWUXxmZieZUOzHmI.crl (hash: rA9/mv8P803Th426PcDwty+6RoPpX04d11OhaSPMVEM=)
2: A05195B4633011ED9122442CC4F9AE02.roa (hash: DzVCTjhUidYA2Rg2xDcdlUFOgDtQxj0BrAXsbysJQW8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 763 (0x2fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91382E4
Validity
Not Before: Mar 29 01:34:26 2025 GMT
Not After : Apr 5 01:34:26 2025 GMT
Subject: CN=67e74e22-8885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:19:f5:fe:c8:1d:4d:d7:33:fd:ac:8d:15:86:
89:8d:7e:74:81:b2:4e:7c:51:8e:ec:76:34:4f:54:
d8:98:68:29:32:48:9e:f9:cb:3e:77:11:ab:0a:32:
39:22:a4:47:af:c5:e6:0a:b5:ac:ac:51:51:75:5e:
f7:25:0e:7a:ee:a6:52:b9:56:4e:ab:29:64:76:f5:
d1:e4:33:be:03:d5:20:7f:7c:64:aa:e0:84:d1:43:
8f:4f:a9:5b:2b:00:eb:64:6d:3d:58:4f:ab:b8:75:
8c:ab:14:c9:7d:1f:b9:c7:9d:ce:ba:3e:53:66:7d:
6c:b7:e4:c3:46:47:11:56:c2:0e:7e:43:f4:81:58:
5f:bf:a8:af:4b:57:90:4c:24:51:33:fb:98:98:55:
4e:7d:87:46:d9:e7:12:51:77:50:6d:4d:ae:6f:69:
58:71:da:c6:65:8b:c4:30:cd:b6:8a:d6:05:7d:f4:
0f:ac:3f:4b:19:14:69:54:58:26:61:b5:da:64:3f:
49:4a:f0:96:09:7e:79:e0:b9:38:5b:aa:9a:cd:21:
fb:f7:ee:d8:1d:7a:3c:64:ce:60:fc:45:e4:a0:60:
14:eb:7e:1b:6b:f0:12:20:1c:72:0b:b7:24:eb:fa:
3a:00:7a:e8:e2:df:87:75:67:f0:f9:35:4e:13:4d:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:83:C7:D4:C4:9E:B5:36:18:6D:E4:1B:BE:75:86:C3:26:9B:90:A0
X509v3 Authority Key Identifier:
keyid:BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:19:66:1d:fa:fc:24:e1:de:e7:47:ab:19:8d:1f:74:65:6f:
eb:14:51:93:50:5b:3f:3e:89:8c:69:76:ea:81:9f:90:58:0c:
3f:b1:ef:01:c3:e2:4a:ce:84:d9:dc:d3:6e:2c:ee:e9:47:15:
5c:c5:43:7d:29:9d:93:fd:83:b6:cf:1d:af:aa:07:4e:85:74:
9e:8c:0c:aa:07:16:6e:86:72:2d:13:11:9f:d0:db:ac:d8:f6:
5b:ef:38:08:e5:10:67:6f:ca:10:3c:30:55:45:14:66:8f:21:
2f:5d:b8:48:84:3e:ee:1c:b9:55:8c:12:3b:d4:69:84:9a:49:
84:7d:ad:ea:03:9f:0f:8f:29:5a:bb:6d:c5:71:3d:02:57:c1:
dc:b4:cd:2d:51:79:4c:61:6b:cd:b8:c4:32:f2:8c:19:90:b2:
2a:63:e0:34:1d:41:6d:57:89:64:08:c3:a5:78:70:dd:a3:f1:
93:54:d6:11:b8:95:f7:9a:93:b7:7e:f2:7e:c2:d0:39:60:e6:
63:b2:58:72:54:8d:9a:49:c6:42:3d:ac:4a:c4:56:82:d4:d9:
f6:64:7b:33:a3:3e:63:5e:d9:f6:62:39:1a:b9:68:35:b6:ce:
24:35:cf:16:45:5c:91:9b:a8:60:1c:e4:a5:ca:f5:ab:b3:7f:
39:4c:c2:4e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgyRTQxMTAvBgNVBAUTKEJFMTgzM0NBMDE0MjVDRUY0NzU5NDVGMTk5OTg5RTY1
NDNCMzFFNjIwHhcNMjUwMzI5MDEzNDI2WhcNMjUwNDA1MDEzNDI2WjAYMRYwFAYD
VQQDEw02N2U3NGUyMi04ODg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Rn1/sgdTdcz/ayNFYaJjX50gbJOfFGO7HY0T1TYmGgpMkie+cs+dxGrCjI5
IqRHr8XmCrWsrFFRdV73JQ567qZSuVZOqylkdvXR5DO+A9Ugf3xkquCE0UOPT6lb
KwDrZG09WE+ruHWMqxTJfR+5x53Ouj5TZn1st+TDRkcRVsIOfkP0gVhfv6ivS1eQ
TCRRM/uYmFVOfYdG2ecSUXdQbU2ub2lYcdrGZYvEMM22itYFffQPrD9LGRRpVFgm
YbXaZD9JSvCWCX554Lk4W6qazSH79+7YHXo8ZM5g/EXkoGAU634ba/ASIBxyC7ck
6/o6AHro4t+HdWfw+TVOE02YQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6Dx9TE
nrU2GG3kG751hsMmm5CgMB8GA1UdIwQYMBaAFL4YM8oBQlzvR1lF8ZmYnmVDsx5i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODJFNC8yMzZGNDA1NEQx
MTkxMUVDOTAwQTJGNkZDNEY5QUUwMi92aGd6eWdGQ1hPOUhXVVh4bVppZVpVT3pI
bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZoZ3p5Z0ZDWE85SFdVWHhtWmllWlVPekhtSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODJFNC8yMzZGNDA1NEQxMTkxMUVDOTAwQTJGNkZDNEY5QUUwMi92aGd6eWdGQ1hP
OUhXVVh4bVppZVpVT3pIbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB+GWYd+vwk4d7nR6sZjR90ZW/rFFGTUFs/PomMaXbqgZ+QWAw/se8B
w+JKzoTZ3NNuLO7pRxVcxUN9KZ2T/YO2zx2vqgdOhXSejAyqBxZuhnItExGf0Nus
2PZb7zgI5RBnb8oQPDBVRRRmjyEvXbhIhD7uHLlVjBI71GmEmkmEfa3qA58Pjyla
u23FcT0CV8HctM0tUXlMYWvNuMQy8owZkLIqY+A0HUFtV4lkCMOleHDdo/GTVNYR
uJX3mpO3fvJ+wtA5YOZjslhyVI2aScZCPaxKxFaC1Nn2ZHszoz5jXtn2YjkauWg1
ts4kNc8WRVyRm6hgHOSlyvWrs385TMJO
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:10 2025 by rpki-client