Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
File: 1QTYGQKxg4soKun0XE3D-BeOJO4.mft (raw, json)
Hash identifier: kwlqfeSZizCw5gD1pCjGMuykk+VDBrPrq5QZiFMUjZQ=
Subject key identifier: B8:AD:B0:39:31:C6:42:90:69:A7:EC:9C:3A:F0:FD:74:86:DA:F5:CD
Authority key identifier: D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE
Certificate issuer: /CN=A913A74D/serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE
Certificate serial: 0845
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
Manifest number: 083F
Signing time: Fri 28 Mar 2025 21:01:56 +0000
Manifest this update: Fri 28 Mar 2025 21:01:55 +0000
Manifest next update: Fri 04 Apr 2025 21:01:55 +0000
Files and hashes: 1: 1QTYGQKxg4soKun0XE3D-BeOJO4.crl (hash: 1sdWlx6wha3LkryznwYemaYCe4zspzpzcx6nKM8Fwhk=)
2: 833D8D9AC72711EA8890F311C4F9AE02.roa (hash: tIeSqHeCHUuOJ39Gd9YUOSN/PIr6jNAJWJM2EB0gZPY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2117 (0x845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A74D
Validity
Not Before: Mar 28 21:01:55 2025 GMT
Not After : Apr 4 21:01:55 2025 GMT
Subject: CN=67e70e44-cdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:e2:cc:a7:29:ed:20:0c:31:1b:6c:51:1d:
68:6d:9f:ee:6c:af:a2:c5:8e:a1:c8:0e:b3:98:3b:
44:4b:20:a2:67:67:72:88:05:6b:5e:63:2c:9b:d2:
8d:92:0b:e2:aa:a5:18:42:0f:2c:3e:11:37:c8:02:
0b:a9:76:2f:a7:d9:cf:02:ba:da:7d:24:9b:38:a4:
6b:9c:82:c4:15:54:3e:b8:f2:5b:f6:5a:a6:94:d9:
0d:fb:7a:f2:c8:89:d0:ec:70:1d:47:1d:d0:49:0b:
ad:da:20:71:89:75:c9:b4:30:2b:e7:8b:87:a9:63:
5c:97:bd:8f:4b:54:12:c9:54:df:a0:fb:a8:30:a4:
4b:8b:59:2a:e3:79:d1:a1:3e:2a:2d:12:3d:1b:8a:
bd:d6:26:df:94:e4:52:c7:cf:3d:f5:7c:1e:c2:84:
d4:43:11:82:f1:40:ef:d8:41:47:f3:98:38:f8:f7:
3c:3e:40:4a:85:64:44:e6:fd:c3:ba:95:aa:9c:82:
05:9d:ef:2e:de:fc:26:15:19:45:93:dc:6c:5d:02:
3d:f4:09:d2:b8:24:4e:63:9f:4d:7b:60:c4:33:d8:
e5:89:48:3a:38:84:62:57:35:f5:7a:de:8f:15:22:
e9:4f:c0:79:10:a0:e7:26:51:92:05:a5:a4:e5:48:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AD:B0:39:31:C6:42:90:69:A7:EC:9C:3A:F0:FD:74:86:DA:F5:CD
X509v3 Authority Key Identifier:
keyid:D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:47:47:d6:65:c5:8f:43:3e:62:1b:4f:36:be:1b:d6:51:f9:
a1:35:47:86:d2:fc:59:a9:b1:68:f1:17:96:b0:8e:67:e6:5c:
c2:c8:4c:02:39:52:e4:5a:a1:8f:0f:66:fb:0b:8e:c1:8d:42:
b7:61:6c:76:41:64:ce:b3:25:63:b4:79:c0:71:0f:34:29:15:
f9:74:3d:c2:f1:33:a7:09:61:f1:76:5e:e7:88:95:50:d1:a5:
ef:7c:cf:62:a0:e3:bf:08:bc:85:b0:7c:2e:c9:ae:11:cc:a0:
04:f4:67:15:bc:f0:c8:f6:00:d1:2c:07:28:ce:99:ab:a9:cf:
68:49:6e:ff:5f:c9:51:b7:76:eb:77:21:3e:01:cc:cc:65:2e:
bd:ee:98:76:7b:ac:1f:66:5a:3c:9b:eb:43:97:c4:f0:e2:3d:
d6:7c:8f:8f:4b:6d:9e:02:db:9f:da:b8:45:d2:62:c2:c0:a9:
80:6a:21:87:e9:f2:a5:29:25:6e:a3:19:a8:3a:0d:d3:a7:ea:
96:d5:d2:af:85:3f:9a:07:b3:06:77:6f:21:28:c7:f1:9f:3c:
96:e4:09:26:eb:e7:78:0a:89:1d:5e:3e:eb:80:aa:d2:d6:6a:
eb:b4:da:c0:7b:4f:a3:ca:21:72:51:c2:c6:4e:5f:fa:ab:6f:
ce:66:08:28
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E3NEQxMTAvBgNVBAUTKEQ1MDREODE5MDJCMTgzOEIyODJBRTlGNDVDNERDM0Y4
MTc4RTI0RUUwHhcNMjUwMzI4MjEwMTU1WhcNMjUwNDA0MjEwMTU1WjAYMRYwFAYD
VQQDEw02N2U3MGU0NC1jZGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt5DizKcp7SAMMRtsUR1obZ/ubK+ixY6hyA6zmDtESyCiZ2dyiAVrXmMsm9KN
kgviqqUYQg8sPhE3yAILqXYvp9nPArrafSSbOKRrnILEFVQ+uPJb9lqmlNkN+3ry
yInQ7HAdRx3QSQut2iBxiXXJtDAr54uHqWNcl72PS1QSyVTfoPuoMKRLi1kq43nR
oT4qLRI9G4q91ibflORSx8899XwewoTUQxGC8UDv2EFH85g4+Pc8PkBKhWRE5v3D
upWqnIIFne8u3vwmFRlFk9xsXQI99AnSuCROY59Ne2DEM9jliUg6OIRiVzX1et6P
FSLpT8B5EKDnJlGSBaWk5UhqGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLitsDkx
xkKQaafsnDrw/XSG2vXNMB8GA1UdIwQYMBaAFNUE2BkCsYOLKCrp9FxNw/gXjiTu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTc0RC82OEExRDU1QUM3
MjYxMUVBOTk1NUU0MTBDNEY5QUUwMi8xUVRZR1FLeGc0c29LdW4wWEUzRC1CZU9K
TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFRVFlHUUt4ZzRzb0t1bjBYRTNELUJlT0pPNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QTc0RC82OEExRDU1QUM3MjYxMUVBOTk1NUU0MTBDNEY5QUUwMi8xUVRZR1FLeGc0
c29LdW4wWEUzRC1CZU9KTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBjR0fWZcWPQz5iG082vhvWUfmhNUeG0vxZqbFo8ReWsI5n5lzCyEwC
OVLkWqGPD2b7C47BjUK3YWx2QWTOsyVjtHnAcQ80KRX5dD3C8TOnCWHxdl7niJVQ
0aXvfM9ioOO/CLyFsHwuya4RzKAE9GcVvPDI9gDRLAcozpmrqc9oSW7/X8lRt3br
dyE+AczMZS697ph2e6wfZlo8m+tDl8Tw4j3WfI+PS22eAtuf2rhF0mLCwKmAaiGH
6fKlKSVuoxmoOg3Tp+qW1dKvhT+aB7MGd28hKMfxnzyW5Akm6+d4CokdXj7rgKrS
1mrrtNrAe0+jyiFyUcLGTl/6q2/OZggo
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:33 2025 by rpki-client