Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
File: fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft (raw, json)
Hash identifier: h00Opgm/nGaq5IhCsDoLQ3/qt1+/RjvW6iTFgswOapw=
Subject key identifier: 58:BA:5A:C4:6B:D5:55:3D:50:C2:B3:5B:BB:EF:D3:7F:B9:89:01:E5
Authority key identifier: 7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08
Certificate issuer: /CN=A913ED35/serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608
Certificate serial: 34D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
Manifest number: 3493
Signing time: Fri 28 Mar 2025 14:50:21 +0000
Manifest this update: Fri 28 Mar 2025 14:50:20 +0000
Manifest next update: Fri 04 Apr 2025 14:50:20 +0000
Files and hashes: 1: fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl (hash: nsY0jOIQ8e4bKQnPNEFQLsH1A/M1iIioYtBOkEHHdQU=)
2: B34FF580C40C11EB9C21CF7BC4F9AE02.roa (hash: JRmfeJomvQSzfrIXjYmMHFlugXE6bFe42lyJQeKQfX4=)
3: C5859C724D7611EFBA188667C4F9AE02.roa (hash: CejZncFNpgWH2BgJHmjLHA0HzP35tdBhuZ2TN28KyAw=)
4: E652AA52C40911EBA930053BC4F9AE02.roa (hash: ++KskV0PPNEiZEaTeUOZbL0iJBq0mAX/g0VHSQfJFGU=)
5: 0D47881A9EB311EC90138473C4F9AE02.roa (hash: /yUj95kJkPDjakWPdMSLk/tFuL1bJXsSQl7hw6ucO/8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13522 (0x34d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913ED35
Validity
Not Before: Mar 28 14:50:20 2025 GMT
Not After : Apr 4 14:50:20 2025 GMT
Subject: CN=67e6b72d-bf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:79:c0:80:b3:1e:68:1f:cd:e0:d0:3f:c0:
b2:bd:ea:86:15:37:5f:ce:f8:ca:7f:3d:e8:3b:de:
00:be:60:34:a1:e2:d6:16:87:4c:c0:74:8e:2a:40:
a2:66:2a:4e:55:ac:0c:58:69:c6:0a:77:9d:5e:a8:
4e:a6:d2:9d:17:b7:6e:d1:b7:0f:e3:c1:3b:5c:c1:
7d:33:0d:a2:99:42:37:95:c6:54:2e:83:86:cd:13:
55:cb:30:b4:76:b1:b9:38:35:27:bc:ef:91:2d:de:
6f:7e:aa:3e:46:74:a4:cc:4d:66:13:42:65:97:0f:
a7:45:c7:cd:c3:62:3a:51:72:8b:ef:f7:c1:9a:74:
23:57:8d:6c:22:0e:7e:41:99:64:61:61:66:43:ba:
85:a6:61:60:67:3f:92:38:70:5c:ca:f6:37:a3:8a:
38:c1:9e:d2:c5:59:16:07:42:0e:28:a8:a9:d9:78:
e2:80:d8:8b:11:86:85:57:f3:99:0c:3c:35:4c:5b:
74:cb:09:e9:37:6f:bf:d5:04:2e:b9:84:2d:e0:5d:
3d:97:57:6d:f0:57:15:f1:9f:eb:5f:83:96:fa:db:
68:86:6e:f1:8a:85:87:df:41:90:39:c5:fb:82:44:
e4:30:84:4f:c2:0a:4b:6a:b8:d4:72:20:fb:c9:75:
7d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BA:5A:C4:6B:D5:55:3D:50:C2:B3:5B:BB:EF:D3:7F:B9:89:01:E5
X509v3 Authority Key Identifier:
keyid:7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:18:49:54:b9:50:4f:eb:81:60:0b:ac:ac:79:75:31:2e:e7:
b9:1a:60:0b:c9:67:6d:08:27:00:b3:80:7b:f9:62:97:25:16:
1d:b6:63:3a:c0:63:38:d2:5d:0d:47:7d:60:55:3f:f2:dc:87:
28:8f:54:6c:2d:2f:b6:81:f7:c6:b4:83:80:54:53:6b:09:73:
6a:c6:07:b9:5f:bf:93:e8:a4:b8:42:06:16:88:2b:87:cc:4a:
51:a7:54:12:6e:e3:0a:9a:44:8c:b4:19:79:0b:c5:a3:06:79:
0c:71:3d:63:74:91:ec:8f:69:26:04:e9:77:0c:d7:fd:60:8c:
78:e4:71:a2:73:1f:df:d5:e9:44:51:a9:93:bb:9d:70:83:aa:
83:bc:4e:5c:18:5d:33:5f:0c:db:21:0d:82:f9:7a:e3:16:6a:
7a:2d:e1:e4:c1:08:b4:56:02:10:8d:82:00:45:c6:3f:f7:7e:
0b:88:c4:83:c7:eb:60:cf:ef:42:f3:19:17:81:d4:8f:35:d1:
77:7e:5a:38:37:32:af:e2:e5:e0:62:50:87:a4:14:f1:ec:60:
d9:9e:f3:fe:cb:98:e6:3f:69:3a:b1:3c:2d:28:82:f8:68:c0:
e2:94:b7:6a:5f:82:05:3e:84:fc:e6:f5:97:a1:72:b7:f6:f0:
83:03:29:97
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VEMzUxMTAvBgNVBAUTKDdFRTk0NUU5RTVFNTFDNEI0MUQ5OUM0MzMyOTUyRjlD
OTU4NzY2MDgwHhcNMjUwMzI4MTQ1MDIwWhcNMjUwNDA0MTQ1MDIwWjAYMRYwFAYD
VQQDEw02N2U2YjcyZC1iZjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvKJ5wICzHmgfzeDQP8CyveqGFTdfzvjKfz3oO94AvmA0oeLWFodMwHSOKkCi
ZipOVawMWGnGCnedXqhOptKdF7du0bcP48E7XMF9Mw2imUI3lcZULoOGzRNVyzC0
drG5ODUnvO+RLd5vfqo+RnSkzE1mE0Jllw+nRcfNw2I6UXKL7/fBmnQjV41sIg5+
QZlkYWFmQ7qFpmFgZz+SOHBcyvY3o4o4wZ7SxVkWB0IOKKip2XjigNiLEYaFV/OZ
DDw1TFt0ywnpN2+/1QQuuYQt4F09l1dt8FcV8Z/rX4OW+ttohm7xioWH30GQOcX7
gkTkMIRPwgpLarjUciD7yXV9AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFi6WsRr
1VU9UMKzW7vv03+5iQHlMB8GA1UdIwQYMBaAFH7pRenl5RxLQdmcQzKVL5yVh2YI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUQzNS9CNjNCQTdFRTFE
OTQxMUUyOUQxQTJFRjkwOEIwMkNEMi9mdWxGNmVYbEhFdEIyWnhETXBVdm5KV0ha
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z1bEY2ZVhsSEV0QjJaeERNcFV2bkpXSFpnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RUQzNS9CNjNCQTdFRTFEOTQxMUUyOUQxQTJFRjkwOEIwMkNEMi9mdWxGNmVYbEhF
dEIyWnhETXBVdm5KV0haZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQATGElUuVBP64FgC6yseXUxLue5GmALyWdtCCcAs4B7+WKXJRYdtmM6
wGM40l0NR31gVT/y3Icoj1RsLS+2gffGtIOAVFNrCXNqxge5X7+T6KS4QgYWiCuH
zEpRp1QSbuMKmkSMtBl5C8WjBnkMcT1jdJHsj2kmBOl3DNf9YIx45HGicx/f1elE
UamTu51wg6qDvE5cGF0zXwzbIQ2C+XrjFmp6LeHkwQi0VgIQjYIARcY/934LiMSD
x+tgz+9C8xkXgdSPNdF3flo4NzKv4uXgYlCHpBTx7GDZnvP+y5jmP2k6sTwtKIL4
aMDilLdqX4IFPoT85vWXoXK39vCDAymX
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:15 2025 by rpki-client