Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft
File: KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json)
Hash identifier: WKBjsx1iBtq8ui/59Vnu6Aa/Ihd3Fdk8sqaOaYBMrwI=
Subject key identifier: 22:51:86:F5:D9:11:49:89:34:C5:3F:CD:ED:E9:DE:6F:E4:4C:9E:D8
Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58
Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758
Certificate serial: 1A30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft
Manifest number: 1A16
Signing time: Fri 28 Mar 2025 16:29:43 +0000
Manifest this update: Fri 28 Mar 2025 16:29:42 +0000
Manifest next update: Fri 04 Apr 2025 16:29:42 +0000
Files and hashes: 1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: V3+6K+a0oxIRm+0iIQX50NNOiJqzOGUqdSB0k3bMM3U=)
2: A0769964641D11EFA3C4902EC4F9AE02.roa (hash: t5K6AqvleSo216upA/bWqmGHo904QC0Pfe/exQVGjfs=)
3: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: 9Yic7ZudnM+/3y+rGwCOY5Ix5lQBB7EQE64c16elJaU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6704 (0x1a30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DA2D
Validity
Not Before: Mar 28 16:29:42 2025 GMT
Not After : Apr 4 16:29:42 2025 GMT
Subject: CN=67e6ce77-a49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:4b:fc:24:02:62:31:a7:90:e9:7d:84:d0:
93:88:da:78:c1:3b:70:4d:7b:ce:71:e2:24:4f:48:
79:90:0d:df:58:3c:bd:4b:ef:65:5a:e5:ac:68:1f:
eb:77:75:4a:40:65:9b:07:6c:bc:a1:ed:09:2b:60:
99:5c:3b:80:50:2c:3e:b3:fe:06:1f:96:95:de:cd:
26:a7:24:67:55:cb:7e:f4:e0:8c:44:7a:06:08:ce:
90:23:83:56:0f:71:93:25:60:8f:bb:21:92:df:c1:
4f:56:e7:3e:1b:84:2b:a9:01:2c:d5:92:13:0a:88:
50:5d:26:c5:36:f8:f1:82:ea:26:a4:1f:21:51:06:
eb:30:4e:e5:c3:00:8b:c6:32:cf:16:0e:ce:a0:f7:
1f:ca:ee:61:2d:23:97:38:5e:69:ef:4b:a6:2b:43:
d0:8e:fe:e5:0f:f9:52:b1:47:58:4a:e5:1c:0d:a6:
be:92:d7:75:c5:83:39:4a:e7:13:26:a7:6c:04:68:
45:78:b0:a4:cb:5c:3d:f5:7d:37:03:0b:4f:5b:38:
0d:27:84:63:48:5d:7e:8e:00:f7:30:ac:83:6b:df:
af:8e:b7:e5:b4:62:fd:c5:d4:ab:5d:22:ce:8e:39:
9d:ee:db:8c:69:7c:eb:9e:a2:68:03:21:61:87:2d:
91:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:51:86:F5:D9:11:49:89:34:C5:3F:CD:ED:E9:DE:6F:E4:4C:9E:D8
X509v3 Authority Key Identifier:
keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:60:1c:da:cb:fe:8a:90:0f:45:26:12:d7:5e:8f:63:d8:5c:
96:d2:dd:15:d3:71:27:62:03:d9:06:01:71:9b:5a:9a:d4:02:
f7:a8:11:cd:aa:99:a3:c0:11:30:8d:3b:8f:dd:ea:07:17:32:
ae:30:81:14:55:cb:7d:d8:e9:b8:e3:af:f3:20:fd:10:60:49:
85:4f:a2:ca:98:67:cb:b7:dd:b5:75:12:85:bc:17:33:4a:77:
05:6c:82:dd:16:b4:3e:3e:89:2a:84:c0:7c:2a:18:c3:5f:da:
4f:12:b9:19:3f:9e:cb:e4:8c:1b:b4:8d:74:63:74:e8:1a:5e:
d4:a6:df:89:8d:29:62:69:97:e0:b7:b0:c9:dd:10:8a:09:92:
3a:c2:00:81:34:36:22:42:8b:e3:7e:b2:e9:dd:af:12:a9:02:
24:84:03:2a:23:49:38:be:9c:e1:d4:2e:65:be:84:aa:53:89:
d5:32:86:2b:99:9a:8a:10:dc:7a:98:f4:0f:9c:2a:1d:bb:d9:
25:0c:52:01:ad:18:a0:a6:ae:27:1c:a2:a4:75:96:62:ab:ac:
b2:8d:f2:35:55:fd:4b:4a:14:9b:1a:9b:a8:9e:68:df:57:a2:
0d:38:d0:01:02:3c:5f:9b:70:d3:df:68:ee:14:54:cf:31:f7:
4f:e2:80:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERBMkQxMTAvBgNVBAUTKDI5OTYyMzI1REUwQkFERTREQzlEREJDNTc2QUUyNzcw
MTJCQzM3NTgwHhcNMjUwMzI4MTYyOTQyWhcNMjUwNDA0MTYyOTQyWjAYMRYwFAYD
VQQDEw02N2U2Y2U3Ny1hNDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq31L/CQCYjGnkOl9hNCTiNp4wTtwTXvOceIkT0h5kA3fWDy9S+9lWuWsaB/r
d3VKQGWbB2y8oe0JK2CZXDuAUCw+s/4GH5aV3s0mpyRnVct+9OCMRHoGCM6QI4NW
D3GTJWCPuyGS38FPVuc+G4QrqQEs1ZITCohQXSbFNvjxguompB8hUQbrME7lwwCL
xjLPFg7OoPcfyu5hLSOXOF5p70umK0PQjv7lD/lSsUdYSuUcDaa+ktd1xYM5SucT
JqdsBGhFeLCky1w99X03AwtPWzgNJ4RjSF1+jgD3MKyDa9+vjrfltGL9xdSrXSLO
jjmd7tuMaXzrnqJoAyFhhy2R8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJRhvXZ
EUmJNMU/ze3p3m/kTJ7YMB8GA1UdIwQYMBaAFCmWIyXeC63k3J3bxXauJ3ASvDdY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC84MzgzNjIwQTUw
RDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJlVGNuZHZGZHE0bmNCSzhO
MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0taWWpKZDRMcmVUY25kdkZkcTRuY0JLOE4xZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
REEyRC84MzgzNjIwQTUwRDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJl
VGNuZHZGZHE0bmNCSzhOMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAEYBzay/6KkA9FJhLXXo9j2FyW0t0V03EnYgPZBgFxm1qa1AL3qBHN
qpmjwBEwjTuP3eoHFzKuMIEUVct92Om446/zIP0QYEmFT6LKmGfLt921dRKFvBcz
SncFbILdFrQ+PokqhMB8KhjDX9pPErkZP57L5IwbtI10Y3ToGl7Upt+JjSliaZfg
t7DJ3RCKCZI6wgCBNDYiQovjfrLp3a8SqQIkhAMqI0k4vpzh1C5lvoSqU4nVMoYr
mZqKENx6mPQPnCodu9klDFIBrRigpq4nHKKkdZZiq6yyjfI1Vf1LShSbGpuonmjf
V6INONABAjxfm3DT32juFFTPMfdP4oB6
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:33 2025 by rpki-client