Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
File: fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft (raw, json)
Hash identifier: zDrNpEZMVyKP4H/qyW3nLJrQ5PO5RaCQXVL0lL6gvcc=
Subject key identifier: D7:28:41:5E:DB:4A:4E:45:6A:81:E9:86:F0:4E:25:7B:E4:13:5E:08
Authority key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78
Certificate issuer: /CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378
Certificate serial: 0B33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
Manifest number: 0B30
Signing time: Fri 28 Mar 2025 19:21:45 +0000
Manifest this update: Fri 28 Mar 2025 19:21:45 +0000
Manifest next update: Fri 04 Apr 2025 19:21:45 +0000
Files and hashes: 1: fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl (hash: RGuHhfjCFUe5Mr28RM9jTUzZxBgClwuBs/OzUYAadKU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2867 (0xb33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D02A
Validity
Not Before: Mar 28 19:21:45 2025 GMT
Not After : Apr 4 19:21:45 2025 GMT
Subject: CN=67e6f6c9-7a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:b4:94:a2:5b:4d:74:5f:ed:b8:15:df:ce:
02:4e:cd:4c:e8:8d:d0:9e:3e:b6:52:ea:87:34:d3:
b2:c8:ad:28:63:30:5f:76:94:b1:8a:20:7d:18:9c:
24:d2:45:a4:24:cf:b3:19:09:2a:f5:dc:7b:54:43:
d2:2c:f2:11:71:f2:af:4a:41:52:5b:6c:dc:be:8a:
6a:d7:ab:50:e5:38:bf:ae:48:e6:76:b7:56:73:db:
e8:f3:ab:66:2b:13:79:0e:ce:78:a6:a1:5f:ce:0b:
eb:08:97:f2:65:74:9f:f9:9f:37:79:27:ae:5d:4a:
8e:f8:5b:d4:ab:cc:a0:ff:96:ce:ea:38:db:06:64:
bc:30:34:30:4e:c3:43:2d:5f:04:e6:ef:08:c7:e3:
19:98:7d:d8:79:05:61:46:df:6d:97:30:be:24:c3:
be:7b:ce:03:49:4f:c5:d1:af:87:77:fd:bb:c7:dc:
a7:88:10:e2:2f:4f:3a:94:a2:c4:a7:37:a0:ea:71:
8b:38:54:9d:5a:86:8d:d0:b6:b1:05:35:ec:f6:11:
75:6b:9a:88:81:4d:ad:98:fe:35:0c:05:0d:45:9b:
d2:fe:9e:6b:44:76:ec:66:cf:87:b5:f9:9c:7b:e2:
3b:2f:a7:95:c8:d1:fd:b6:95:f1:2f:f9:3f:1e:a2:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:28:41:5E:DB:4A:4E:45:6A:81:E9:86:F0:4E:25:7B:E4:13:5E:08
X509v3 Authority Key Identifier:
keyid:7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:01:63:9e:5d:0c:6c:10:f0:66:04:fd:02:ac:cb:82:56:17:
ae:7f:df:d4:57:3e:40:b5:52:f0:89:85:95:0d:d1:49:2d:b0:
f3:df:4e:23:cc:8f:7a:bc:42:e4:ad:d1:73:c8:f4:21:21:7a:
24:aa:50:63:53:02:86:05:0b:40:89:5a:0f:a5:7b:7d:48:c8:
22:eb:b3:7b:ef:cd:63:69:88:7e:70:df:c7:44:72:6e:c6:cc:
24:d4:13:b8:8a:3a:e5:fa:c6:19:3a:b4:4f:3e:a9:b6:d8:f4:
09:14:cc:3e:b8:01:af:2a:6f:5e:2f:8d:3c:54:18:f3:4e:11:
d0:ac:48:fd:6a:dc:ab:70:a3:a0:e5:a7:b1:3b:67:51:9e:b4:
f2:08:ef:66:ee:ec:4c:d0:f5:47:b0:79:2d:d8:04:30:e2:b3:
1c:c0:e5:6e:68:a2:89:76:c1:e3:57:58:60:90:7b:04:2b:f3:
b7:8a:d2:03:5d:4f:e1:36:18:7e:9d:bd:61:fc:65:a9:84:7a:
db:66:e3:e6:85:db:1a:2c:f6:fb:c3:b8:88:8d:48:3b:6c:a6:
f2:83:90:6b:45:0f:71:57:b6:4b:4b:24:bd:05:87:d4:02:8b:
30:f8:2d:9a:ae:94:27:9b:04:01:22:14:6d:1f:aa:67:5e:f3:
ed:67:c4:82
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QwMkExMTAvBgNVBAUTKDdDQkY4MUM1OUUzMjVFRjAwNjk3MzEwQjM5NDVGRUEx
QzEwNkIzNzgwHhcNMjUwMzI4MTkyMTQ1WhcNMjUwNDA0MTkyMTQ1WjAYMRYwFAYD
VQQDEw02N2U2ZjZjOS03YTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy4i0lKJbTXRf7bgV384CTs1M6I3Qnj62UuqHNNOyyK0oYzBfdpSxiiB9GJwk
0kWkJM+zGQkq9dx7VEPSLPIRcfKvSkFSW2zcvopq16tQ5Ti/rkjmdrdWc9vo86tm
KxN5Ds54pqFfzgvrCJfyZXSf+Z83eSeuXUqO+FvUq8yg/5bO6jjbBmS8MDQwTsND
LV8E5u8Ix+MZmH3YeQVhRt9tlzC+JMO+e84DSU/F0a+Hd/27x9yniBDiL086lKLE
pzeg6nGLOFSdWoaN0LaxBTXs9hF1a5qIgU2tmP41DAUNRZvS/p5rRHbsZs+Htfmc
e+I7L6eVyNH9tpXxL/k/HqJcqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcoQV7b
Sk5FaoHphvBOJXvkE14IMB8GA1UdIwQYMBaAFHy/gcWeMl7wBpcxCzlF/qHBBrN4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDAyQS83N0ExRDk1RTMz
QkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2QUdsekVMT1VYLW9jRUdz
M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZMLUJ4WjR5WHZBR2x6RUxPVVgtb2NFR3MzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDAyQS83N0ExRDk1RTMzQkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2
QUdsekVMT1VYLW9jRUdzM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCHAWOeXQxsEPBmBP0CrMuCVheuf9/UVz5AtVLwiYWVDdFJLbDz304j
zI96vELkrdFzyPQhIXokqlBjUwKGBQtAiVoPpXt9SMgi67N7781jaYh+cN/HRHJu
xswk1BO4ijrl+sYZOrRPPqm22PQJFMw+uAGvKm9eL408VBjzThHQrEj9atyrcKOg
5aexO2dRnrTyCO9m7uxM0PVHsHkt2AQw4rMcwOVuaKKJdsHjV1hgkHsEK/O3itID
XU/hNhh+nb1h/GWphHrbZuPmhdsaLPb7w7iIjUg7bKbyg5BrRQ9xV7ZLSyS9BYfU
Aosw+C2arpQnmwQBIhRtH6pnXvPtZ8SC
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:48 2025 by rpki-client