Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.mft
File: lKFbyZFsWyyhjjWQUVAeVGQsCNM.mft (raw, json)
Hash identifier: V+Mlp3QGJyVZbzFmeJoKF09FSN3sIHD20W6h+AEmId4=
Subject key identifier: 9C:AD:DF:81:49:D1:BD:22:D1:81:6E:34:E2:03:E5:10:6D:27:3B:D4
Authority key identifier: 94:A1:5B:C9:91:6C:5B:2C:A1:8E:35:90:51:50:1E:54:64:2C:08:D3
Certificate issuer: /CN=A916B0A3/serialNumber=94A15BC9916C5B2CA18E359051501E54642C08D3
Certificate serial: 2698
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKFbyZFsWyyhjjWQUVAeVGQsCNM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.mft
Manifest number: 31E0
Signing time: Fri 28 Mar 2025 15:46:17 +0000
Manifest this update: Fri 28 Mar 2025 15:46:17 +0000
Manifest next update: Fri 04 Apr 2025 15:46:17 +0000
Files and hashes: 1: lKFbyZFsWyyhjjWQUVAeVGQsCNM.crl (hash: vnm5dOX9Hve48d469TpdgKuG/AOqPcclIR1M2qf0HDE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9880 (0x2698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B0A3
Validity
Not Before: Mar 28 15:46:17 2025 GMT
Not After : Apr 4 15:46:17 2025 GMT
Subject: CN=67e6c449-55a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ee:4a:b6:38:63:90:52:20:b9:32:cd:97:30:
eb:2d:34:92:04:d0:e0:ba:cd:60:f8:07:f5:13:f5:
81:7e:20:46:5d:ed:4b:71:6e:31:a9:7e:ad:43:b0:
d6:43:ac:c7:74:bb:5e:e0:ce:f1:7c:46:d8:a2:0b:
93:67:45:64:31:7b:3b:3d:c5:00:9a:8c:d5:f6:98:
54:5a:9d:41:96:09:b6:21:f1:9c:99:44:30:3a:19:
0b:a6:4d:70:1e:65:34:eb:9e:54:88:cb:a0:51:a9:
19:b5:09:09:26:9a:c5:f2:44:6c:4a:e3:e4:58:c8:
64:ab:80:33:fc:80:24:a0:81:44:d0:c1:5f:50:16:
53:0d:e4:c8:02:a3:7d:e4:70:38:c1:52:d4:0f:9c:
40:66:5b:b3:44:d1:2a:13:57:5b:26:6d:7b:93:fd:
af:f6:ba:58:67:2c:77:1c:e5:2d:2f:23:ca:17:2c:
b3:4f:c3:c3:c8:7e:94:b6:86:08:80:03:27:e0:d2:
7f:4b:dc:c5:6b:07:72:53:c5:d5:fa:e7:65:33:a4:
28:c1:df:38:65:fb:74:59:78:ee:02:08:ee:c2:36:
2a:d3:cc:4a:ec:17:1a:48:74:de:04:20:eb:9a:ea:
c9:a2:93:c1:83:15:e7:da:25:9a:66:b8:f2:b4:be:
4b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AD:DF:81:49:D1:BD:22:D1:81:6E:34:E2:03:E5:10:6D:27:3B:D4
X509v3 Authority Key Identifier:
keyid:94:A1:5B:C9:91:6C:5B:2C:A1:8E:35:90:51:50:1E:54:64:2C:08:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKFbyZFsWyyhjjWQUVAeVGQsCNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:81:66:03:25:38:22:17:34:d9:d9:c0:aa:88:dd:4d:5d:c6:
44:e3:4f:be:2b:d1:f7:cd:b4:dc:7b:26:7b:3b:6c:89:11:59:
4e:6a:3b:d1:ad:d4:5b:b1:9d:6b:98:a8:84:dc:4d:4c:59:72:
e1:95:72:fe:7d:3c:ef:61:1b:3d:16:f8:32:b7:51:e1:0d:85:
ba:ea:84:9e:8b:d8:65:5e:ba:cd:29:0c:5b:e8:4e:7a:b1:f4:
cd:ad:ca:96:f0:87:d8:88:d6:b3:74:53:3f:eb:aa:1f:fe:8b:
54:df:5b:ea:55:33:4f:c9:3a:38:4a:ca:39:50:cd:7a:46:4e:
02:b6:4c:6b:db:f3:54:5b:2a:c8:e3:94:33:ad:81:a2:67:18:
b5:dd:37:7d:74:4a:bb:5f:07:8b:00:bd:1f:1e:0d:3d:9b:50:
fd:1c:42:7d:bc:34:81:5a:6a:0a:e4:0a:c5:1a:d9:72:00:73:
d2:11:46:f0:08:ee:44:6a:bd:b5:ff:b0:8f:c9:7e:c3:92:b4:
87:20:8a:93:32:41:29:2c:84:11:73:3d:09:97:29:2f:62:de:
a9:0d:60:e6:0b:6e:bb:77:d0:2a:38:59:33:ee:14:ff:70:22:
a9:03:4f:58:7b:6a:1c:62:c3:42:fb:d9:ea:0c:72:8f:a3:02:
f4:c6:99:f6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIwQTMxMTAvBgNVBAUTKDk0QTE1QkM5OTE2QzVCMkNBMThFMzU5MDUxNTAxRTU0
NjQyQzA4RDMwHhcNMjUwMzI4MTU0NjE3WhcNMjUwNDA0MTU0NjE3WjAYMRYwFAYD
VQQDEw02N2U2YzQ0OS01NWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6+5KtjhjkFIguTLNlzDrLTSSBNDgus1g+Af1E/WBfiBGXe1LcW4xqX6tQ7DW
Q6zHdLte4M7xfEbYoguTZ0VkMXs7PcUAmozV9phUWp1Blgm2IfGcmUQwOhkLpk1w
HmU0655UiMugUakZtQkJJprF8kRsSuPkWMhkq4Az/IAkoIFE0MFfUBZTDeTIAqN9
5HA4wVLUD5xAZluzRNEqE1dbJm17k/2v9rpYZyx3HOUtLyPKFyyzT8PDyH6UtoYI
gAMn4NJ/S9zFawdyU8XV+udlM6Qowd84Zft0WXjuAgjuwjYq08xK7BcaSHTeBCDr
murJopPBgxXn2iWaZrjytL5LbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyt34FJ
0b0i0YFuNOID5RBtJzvUMB8GA1UdIwQYMBaAFJShW8mRbFssoY41kFFQHlRkLAjT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBBMy83MUFERTFGRUQ4
MjgxMUU0QUE3QzhBNDdDNEY5QUUwMi9sS0ZieVpGc1d5eWhqaldRVVZBZVZHUXND
Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xLRmJ5WkZzV3l5aGpqV1FVVkFlVkdRc0NOTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjBBMy83MUFERTFGRUQ4MjgxMUU0QUE3QzhBNDdDNEY5QUUwMi9sS0ZieVpGc1d5
eWhqaldRVVZBZVZHUXNDTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDagWYDJTgiFzTZ2cCqiN1NXcZE40++K9H3zbTceyZ7O2yJEVlOajvR
rdRbsZ1rmKiE3E1MWXLhlXL+fTzvYRs9Fvgyt1HhDYW66oSei9hlXrrNKQxb6E56
sfTNrcqW8IfYiNazdFM/66of/otU31vqVTNPyTo4Sso5UM16Rk4Ctkxr2/NUWyrI
45QzrYGiZxi13Td9dEq7XweLAL0fHg09m1D9HEJ9vDSBWmoK5ArFGtlyAHPSEUbw
CO5Ear21/7CPyX7DkrSHIIqTMkEpLIQRcz0JlykvYt6pDWDmC267d9AqOFkz7hT/
cCKpA09Ye2ocYsNC+9nqDHKPowL0xpn2
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:18:39 2025 by rpki-client