Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft
File: 6w67ZlG90AYnOWdC_xoLTqD94uU.mft (raw, json)
Hash identifier: yrdEFNxzVYwhJInsGCVP/o6JwRlp+bTkdWw2SpxBVJ4=
Subject key identifier: 72:C3:AF:0D:A0:08:D1:EE:5E:9B:92:F7:8B:80:8D:0D:23:85:45:B2
Authority key identifier: EB:0E:BB:66:51:BD:D0:06:27:39:67:42:FF:1A:0B:4E:A0:FD:E2:E5
Certificate issuer: /CN=A913E504/serialNumber=EB0EBB6651BDD00627396742FF1A0B4EA0FDE2E5
Certificate serial: 1891
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft
Manifest number: 1883
Signing time: Fri 28 Mar 2025 16:36:25 +0000
Manifest this update: Fri 28 Mar 2025 16:36:24 +0000
Manifest next update: Fri 04 Apr 2025 16:36:24 +0000
Files and hashes: 1: 6w67ZlG90AYnOWdC_xoLTqD94uU.crl (hash: 1l9oymMm5bjr+Seiw5utE/srDTJL/irpMp4No5aQRSI=)
2: C00CB30A87A711EA94E5CF22C4F9AE02.roa (hash: aB/oE2OnnyN0W6HaDv8npp8QZbqOPeG0ULRgF9RjBlg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6289 (0x1891)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E504
Validity
Not Before: Mar 28 16:36:24 2025 GMT
Not After : Apr 4 16:36:24 2025 GMT
Subject: CN=67e6d009-d650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:d6:98:ba:a9:7c:eb:f7:5b:08:ea:06:b1:
a3:78:e4:5f:d5:00:0b:13:2d:e0:66:7e:8a:eb:96:
1f:80:80:cf:ed:4e:ab:cb:64:bf:c2:2a:03:dc:59:
5b:ca:0f:46:78:41:65:49:3a:b0:12:e4:45:7d:91:
95:1b:0d:a9:a9:89:f7:72:f5:99:f4:86:32:8b:d4:
82:48:83:c5:7c:c0:35:a7:69:42:bb:ed:e9:f8:72:
19:7d:44:c8:b8:db:c2:75:87:35:7c:5c:c9:e1:fc:
f3:7d:55:84:96:c5:de:24:af:84:2d:d3:d3:7d:e1:
f8:b8:3f:5d:6a:11:92:d8:40:1a:ca:4e:3a:41:13:
91:5b:8e:2f:89:21:30:47:91:cb:cb:f9:af:ea:0a:
63:9c:16:b5:8c:65:aa:46:5b:5b:5b:97:b1:e9:8e:
3d:92:51:12:f5:90:2a:37:fc:f5:e0:5c:59:83:b7:
5a:be:31:35:cd:18:e3:16:97:84:b6:7e:ea:e1:69:
50:3f:f7:89:dd:84:97:96:a1:e8:a7:54:f8:02:b5:
5e:b6:ef:ee:3d:0f:27:df:33:7e:11:5a:57:0b:57:
c8:a1:8d:08:8a:83:45:c7:30:ab:f7:b3:3b:4a:5f:
22:cf:40:8b:fd:9c:24:d5:fe:27:d6:34:85:62:82:
9f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C3:AF:0D:A0:08:D1:EE:5E:9B:92:F7:8B:80:8D:0D:23:85:45:B2
X509v3 Authority Key Identifier:
keyid:EB:0E:BB:66:51:BD:D0:06:27:39:67:42:FF:1A:0B:4E:A0:FD:E2:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:53:e6:f4:33:8a:b0:c5:1a:9b:12:c3:16:58:ae:fe:fb:73:
eb:2b:c8:09:18:a6:10:93:59:c7:7b:69:c4:95:20:67:fe:47:
82:b9:8f:3c:70:bc:78:a9:29:5d:e8:fa:82:60:9a:a3:0b:ea:
3e:63:a8:db:d3:a0:cd:b0:6b:86:b0:35:d9:09:ef:c7:dc:96:
94:e1:82:d7:f2:26:e0:ba:3e:a9:2d:fc:e7:9d:a0:b1:8c:1b:
2f:c2:11:77:85:5b:20:e2:a1:c2:a7:29:2c:ba:4c:39:62:29:
4d:fe:ee:96:7f:48:17:94:b5:01:a0:a5:2c:0d:8f:c0:1a:18:
b4:da:60:64:aa:bc:6a:19:10:41:06:3a:72:5c:f7:23:7f:0f:
68:b5:48:bc:7f:84:89:62:aa:79:98:2e:d2:db:70:57:f4:2e:
d6:ab:3c:7f:04:8e:19:e3:9a:a4:ea:7e:c1:11:56:34:90:a7:
6d:fc:09:21:d9:62:de:a5:6b:7f:f0:09:5b:f3:82:63:eb:82:
08:51:de:c3:67:09:e8:e4:81:18:87:82:0a:5e:59:6e:a3:d5:
84:3e:78:d6:c1:40:2a:e8:7a:fa:30:0c:c4:52:99:ea:bb:d0:
e6:20:ee:8e:7c:8b:fb:b3:00:75:19:e2:0c:46:e3:8b:19:e7:
7e:0e:d5:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0U1MDQxMTAvBgNVBAUTKEVCMEVCQjY2NTFCREQwMDYyNzM5Njc0MkZGMUEwQjRF
QTBGREUyRTUwHhcNMjUwMzI4MTYzNjI0WhcNMjUwNDA0MTYzNjI0WjAYMRYwFAYD
VQQDEw02N2U2ZDAwOS1kNjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAok3WmLqpfOv3WwjqBrGjeORf1QALEy3gZn6K65YfgIDP7U6ry2S/wioD3Flb
yg9GeEFlSTqwEuRFfZGVGw2pqYn3cvWZ9IYyi9SCSIPFfMA1p2lCu+3p+HIZfUTI
uNvCdYc1fFzJ4fzzfVWElsXeJK+ELdPTfeH4uD9dahGS2EAayk46QRORW44viSEw
R5HLy/mv6gpjnBa1jGWqRltbW5ex6Y49klES9ZAqN/z14FxZg7davjE1zRjjFpeE
tn7q4WlQP/eJ3YSXlqHop1T4ArVetu/uPQ8n3zN+EVpXC1fIoY0IioNFxzCr97M7
Sl8iz0CL/Zwk1f4n1jSFYoKfcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLDrw2g
CNHuXpuS94uAjQ0jhUWyMB8GA1UdIwQYMBaAFOsOu2ZRvdAGJzlnQv8aC06g/eLl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTUwNC9BMDhBMkM3Njk4
M0QxMUU3QTM3RkQ0NzhDNEY5QUUwMi82dzY3WmxHOTBBWW5PV2RDX3hvTFRxRDk0
dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ3NjdabEc5MEFZbk9XZENfeG9MVHFEOTR1VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RTUwNC9BMDhBMkM3Njk4M0QxMUU3QTM3RkQ0NzhDNEY5QUUwMi82dzY3WmxHOTBB
WW5PV2RDX3hvTFRxRDk0dVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBiU+b0M4qwxRqbEsMWWK7++3PrK8gJGKYQk1nHe2nElSBn/keCuY88
cLx4qSld6PqCYJqjC+o+Y6jb06DNsGuGsDXZCe/H3JaU4YLX8ibguj6pLfznnaCx
jBsvwhF3hVsg4qHCpyksukw5YilN/u6Wf0gXlLUBoKUsDY/AGhi02mBkqrxqGRBB
BjpyXPcjfw9otUi8f4SJYqp5mC7S23BX9C7Wqzx/BI4Z45qk6n7BEVY0kKdt/Akh
2WLepWt/8Alb84Jj64IIUd7DZwno5IEYh4IKXlluo9WEPnjWwUAq6Hr6MAzEUpnq
u9DmIO6OfIv7swB1GeIMRuOLGed+DtXg
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:02 2025 by rpki-client