Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
File: UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft (raw, json)
Hash identifier: onnOoLxa43bwh1aHv/FjnXJtJoWBVY5/zYhFfva4Zt8=
Subject key identifier: 13:03:B8:E2:95:F9:BC:30:A3:A9:7C:73:7F:EF:87:52:95:20:85:0C
Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
Certificate issuer: /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Certificate serial: 305B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
Manifest number: 304D
Signing time: Fri 28 Mar 2025 15:32:50 +0000
Manifest this update: Fri 28 Mar 2025 15:32:50 +0000
Manifest next update: Fri 04 Apr 2025 15:32:50 +0000
Files and hashes: 1: UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl (hash: duUscXY2YA6OoupHgJRnuBC6Zv7UCLL3luC4ioMSvBw=)
2: E5DB5238DFBD11EC8E203126C4F9AE02.roa (hash: 8yPXIp2srpOMXwXrVDBAhf+m6VYRXr2aEaNExsEirN4=)
3: B8B02658C16B11EEA7D01A7DC4F9AE02.roa (hash: WamiUU84cAcc5WGx4lslvANbP3TtO/lIaFT/y7zUmEY=)
4: 446A425EA6BB11ED9D458785C4F9AE02.roa (hash: WhKdctnJM8x/P3lLuqtSYgwShQQZa8r7EVnRQb0csbo=)
5: 43DADDD0A6BB11ED9D458785C4F9AE02.roa (hash: T37Xr3jND0OgDmWZSLZeRiJ8MSQ6+oBhyzh33K0Hddg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12379 (0x305b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B1DA
Validity
Not Before: Mar 28 15:32:50 2025 GMT
Not After : Apr 4 15:32:50 2025 GMT
Subject: CN=67e6c122-a121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:d5:ac:1e:04:2d:5c:63:3b:57:5f:e1:8c:
fe:e1:71:1c:18:f1:43:38:cc:1e:6c:67:2c:73:bd:
0b:2c:f8:74:68:27:13:17:22:63:82:81:56:56:21:
59:e3:a9:1f:48:23:60:ce:c0:f4:5c:43:c5:a8:f9:
cf:ac:60:e2:3e:44:10:d5:ce:20:33:ce:21:2d:37:
c1:c7:3d:d5:e7:f6:ef:23:5f:8f:b0:ee:6b:e4:66:
9b:11:99:88:a2:68:c2:94:de:4a:21:c7:3f:cb:56:
d8:3c:ce:aa:39:52:4c:0b:bc:b6:e7:d1:2b:e6:f3:
51:03:8c:41:89:8b:11:50:7d:3e:15:f6:55:e6:7e:
eb:ba:8a:53:83:4f:d8:32:42:22:f4:7e:9b:66:0d:
fa:2d:87:40:da:16:14:16:dc:20:15:fd:32:48:1b:
68:a9:18:da:4f:97:f0:f6:e7:5c:b8:01:3b:9f:5d:
fd:4e:ab:e1:4f:fa:bd:93:b0:58:08:2e:ca:cf:f5:
6e:68:eb:92:c0:4d:89:5b:cd:ca:1c:61:3e:37:a0:
28:66:19:c7:c8:49:c0:36:f5:df:3d:44:3d:75:df:
a6:e4:54:9d:9a:d0:d7:34:23:c6:fc:93:da:58:9e:
12:b7:b9:19:67:cd:d5:f0:01:df:ab:fa:f6:e6:bc:
97:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:03:B8:E2:95:F9:BC:30:A3:A9:7C:73:7F:EF:87:52:95:20:85:0C
X509v3 Authority Key Identifier:
keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:99:0d:8c:e1:f0:65:3e:21:92:06:91:12:1d:23:3e:d6:f7:
fd:5f:8b:8c:86:aa:a0:92:7a:69:7b:5b:b2:25:e3:02:c6:c2:
be:ed:3a:57:83:b5:21:d3:b5:bc:c2:f6:57:04:ef:66:df:cb:
df:1c:29:c7:4a:30:9f:ec:35:c1:b4:e6:83:43:ba:f6:62:08:
ae:06:af:63:e5:07:e5:32:46:ce:e8:78:5f:8f:9d:9a:d7:7f:
ed:06:80:df:d5:a4:44:db:01:29:e8:6c:4c:c3:a5:49:46:2a:
82:48:9e:14:ee:fb:22:2b:b4:cf:73:44:0a:f4:8c:0f:fe:9a:
ae:4b:5c:4d:88:be:88:e0:56:a7:95:04:85:7d:de:fe:f5:f0:
e8:96:0b:c4:da:9d:3b:f2:c1:67:8e:2f:4e:a1:bc:50:c3:9e:
67:4e:1e:c2:8c:74:4d:c4:aa:d9:ac:fe:6a:39:53:a7:15:ae:
02:8f:d2:f8:a5:b7:a9:3c:5b:fe:8f:c9:55:3d:67:5f:19:57:
2f:97:eb:67:ff:11:6f:71:ec:25:ad:29:22:13:1b:9f:3a:66:
bc:12:44:cc:22:4e:08:1d:b4:af:f5:cc:53:ad:1a:09:a6:ff:
11:fc:05:85:27:67:9a:35:36:7f:a9:67:68:2d:4d:53:3c:bd:
57:1c:19:2b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICMFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0IxREExMTAvBgNVBAUTKDUwRTY2ODNBNkFGNDY0NEI2OEExMUMyMkRBN0YzQTY1
QjMxMkMwNkYwHhcNMjUwMzI4MTUzMjUwWhcNMjUwNDA0MTUzMjUwWjAYMRYwFAYD
VQQDEw02N2U2YzEyMi1hMTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0AfVrB4ELVxjO1df4Yz+4XEcGPFDOMwebGcsc70LLPh0aCcTFyJjgoFWViFZ
46kfSCNgzsD0XEPFqPnPrGDiPkQQ1c4gM84hLTfBxz3V5/bvI1+PsO5r5GabEZmI
omjClN5KIcc/y1bYPM6qOVJMC7y259Er5vNRA4xBiYsRUH0+FfZV5n7ruopTg0/Y
MkIi9H6bZg36LYdA2hYUFtwgFf0ySBtoqRjaT5fw9udcuAE7n139TqvhT/q9k7BY
CC7Kz/VuaOuSwE2JW83KHGE+N6AoZhnHyEnANvXfPUQ9dd+m5FSdmtDXNCPG/JPa
WJ4St7kZZ83V8AHfq/r25ryXxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMDuOKV
+bwwo6l8c3/vh1KVIIUMMB8GA1UdIwQYMBaAFFDmaDpq9GRLaKEcItp/OmWzEsBv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS8xNEI3NkJDOEVE
MEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpFdG9vUndpMm44NlpiTVN3
RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VPWm9PbXIwWkV0b29Sd2kybjg2WmJNU3dHOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjFEQS8xNEI3NkJDOEVEMEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpF
dG9vUndpMm44NlpiTVN3RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCYmQ2M4fBlPiGSBpESHSM+1vf9X4uMhqqgknppe1uyJeMCxsK+7TpX
g7Uh07W8wvZXBO9m38vfHCnHSjCf7DXBtOaDQ7r2YgiuBq9j5QflMkbO6Hhfj52a
13/tBoDf1aRE2wEp6GxMw6VJRiqCSJ4U7vsiK7TPc0QK9IwP/pquS1xNiL6I4Fan
lQSFfd7+9fDolgvE2p078sFnji9OobxQw55nTh7CjHRNxKrZrP5qOVOnFa4Cj9L4
pbepPFv+j8lVPWdfGVcvl+tn/xFvcewlrSkiExufOma8EkTMIk4IHbSv9cxTrRoJ
pv8R/AWFJ2eaNTZ/qWdoLU1TPL1XHBkr
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:13 2025 by rpki-client