Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
File: GRFX6ZVM7IiQxhjMBybwB06RDio.mft (raw, json)
Hash identifier: wNah1Nd7UMnoWFiEVN40l6gmd3CpattUvynijTRwM14=
Subject key identifier: 16:A4:D0:DF:A6:41:27:37:D6:50:F8:01:67:E6:C4:DB:EA:E8:69:9C
Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A
Certificate issuer: /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A
Certificate serial: 14A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
Manifest number: 1497
Signing time: Fri 28 Mar 2025 17:26:23 +0000
Manifest this update: Fri 28 Mar 2025 17:26:22 +0000
Manifest next update: Fri 04 Apr 2025 17:26:22 +0000
Files and hashes: 1: GRFX6ZVM7IiQxhjMBybwB06RDio.crl (hash: u73q01SptT6pXAI02vRwIHncTvpRuDFIeoY4U9lsMUg=)
2: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (hash: tnpA0IzI8bTdekuBPMUSd6+4zG46jfK32mHeai6hCkw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5280 (0x14a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FA49
Validity
Not Before: Mar 28 17:26:22 2025 GMT
Not After : Apr 4 17:26:22 2025 GMT
Subject: CN=67e6dbbe-23a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:25:3c:76:3e:4c:df:86:0f:c9:75:4b:a0:ac:
ad:b9:e0:0f:01:fb:cb:30:e4:eb:b8:e9:60:7e:56:
a2:59:55:4e:a5:48:08:5e:86:52:11:01:73:9f:81:
9a:6d:97:a5:73:b9:f4:d2:19:8f:0c:e6:b1:ce:ff:
71:95:46:b5:60:c0:0f:25:04:0e:f2:15:a4:e2:52:
70:ef:ad:81:59:86:70:4d:b6:43:45:35:70:4f:cd:
18:50:d0:c2:ca:27:c7:d5:11:58:43:87:39:10:80:
e5:24:92:f1:d1:04:c2:12:ce:93:0b:2b:9a:ab:01:
3f:6e:92:16:7b:58:95:e8:25:50:4b:de:38:f5:66:
d6:6f:63:df:1a:21:7d:e5:51:63:dc:1f:09:77:24:
bf:e0:55:2e:8c:63:46:90:39:5d:6d:10:ad:ef:82:
12:f9:d8:fe:0d:1c:9b:5d:78:ed:db:ed:eb:3c:d6:
bc:30:ff:35:7a:03:77:d6:d0:7c:b4:51:e3:ea:76:
ee:0a:4c:c7:0c:25:77:b6:f8:38:c3:83:8f:9e:ec:
1b:2d:17:fc:8b:d9:fb:d6:d7:b2:7b:b0:b8:5d:29:
81:f4:f4:d4:5e:dd:80:e0:b4:82:85:fe:53:10:f5:
50:7e:1d:74:b7:fc:fa:82:86:0e:e2:49:10:c9:5f:
7d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A4:D0:DF:A6:41:27:37:D6:50:F8:01:67:E6:C4:DB:EA:E8:69:9C
X509v3 Authority Key Identifier:
keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:a5:ed:ca:15:44:d0:69:b7:62:08:83:c2:34:25:a9:58:15:
1d:ad:51:4b:54:ad:72:72:5b:86:a8:72:8f:21:f5:9d:a3:34:
fa:93:6b:22:78:5d:91:61:6a:df:a7:a4:55:de:48:34:f7:64:
ed:d5:91:ef:2e:06:6e:91:4e:0c:26:0c:95:ee:98:7e:22:3d:
36:75:ef:e7:e3:32:6c:74:91:52:81:1e:5d:f0:30:f2:94:21:
d6:cb:a8:e5:b4:ff:f3:71:86:53:18:9e:dd:c6:b0:57:70:f2:
71:3d:df:91:4a:61:aa:ea:2c:7b:3f:da:75:ff:13:b3:99:c2:
2d:09:3a:dc:7a:b5:9b:f7:c7:f5:64:b1:6d:f4:4b:d0:e3:31:
2c:ea:51:27:df:4a:5d:e7:38:95:a8:3f:08:78:8a:24:af:57:
a2:b8:0b:59:2f:fe:40:e5:1d:fd:7c:94:f8:0a:b9:85:4f:98:
a1:90:10:d1:3e:3f:d8:5c:46:60:30:74:a2:76:2f:46:80:c5:
c7:08:a2:49:bc:a1:80:7d:35:6f:8f:6a:bf:32:c8:04:45:6c:
2c:52:dd:dc:95:16:e9:34:a5:83:0d:18:83:40:83:57:20:89:
ba:54:0c:e4:75:ea:94:7c:55:38:5c:18:47:3d:f6:c9:68:58:
b3:d5:87:93
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkZBNDkxMTAvBgNVBAUTKDE5MTE1N0U5OTU0Q0VDODg5MEM2MThDQzA3MjZGMDA3
NEU5MTBFMkEwHhcNMjUwMzI4MTcyNjIyWhcNMjUwNDA0MTcyNjIyWjAYMRYwFAYD
VQQDEw02N2U2ZGJiZS0yM2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7yU8dj5M34YPyXVLoKytueAPAfvLMOTruOlgflaiWVVOpUgIXoZSEQFzn4Ga
bZelc7n00hmPDOaxzv9xlUa1YMAPJQQO8hWk4lJw762BWYZwTbZDRTVwT80YUNDC
yifH1RFYQ4c5EIDlJJLx0QTCEs6TCyuaqwE/bpIWe1iV6CVQS9449WbWb2PfGiF9
5VFj3B8JdyS/4FUujGNGkDldbRCt74IS+dj+DRybXXjt2+3rPNa8MP81egN31tB8
tFHj6nbuCkzHDCV3tvg4w4OPnuwbLRf8i9n71teye7C4XSmB9PTUXt2A4LSChf5T
EPVQfh10t/z6goYO4kkQyV99VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBak0N+m
QSc31lD4AWfmxNvq6GmcMB8GA1UdIwQYMBaAFBkRV+mVTOyIkMYYzAcm8AdOkQ4q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS83MDJEODEyNDVD
QzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJaVF4aGpNQnlid0IwNlJE
aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dSRlg2WlZNN0lpUXhoak1CeWJ3QjA2UkRpby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RkE0OS83MDJEODEyNDVDQzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJ
aVF4aGpNQnlid0IwNlJEaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCRpe3KFUTQabdiCIPCNCWpWBUdrVFLVK1ycluGqHKPIfWdozT6k2si
eF2RYWrfp6RV3kg092Tt1ZHvLgZukU4MJgyV7ph+Ij02de/n4zJsdJFSgR5d8DDy
lCHWy6jltP/zcYZTGJ7dxrBXcPJxPd+RSmGq6ix7P9p1/xOzmcItCTrcerWb98f1
ZLFt9EvQ4zEs6lEn30pd5ziVqD8IeIokr1eiuAtZL/5A5R39fJT4CrmFT5ihkBDR
Pj/YXEZgMHSidi9GgMXHCKJJvKGAfTVvj2q/MsgERWwsUt3clRbpNKWDDRiDQINX
IIm6VAzkdeqUfFU4XBhHPfbJaFiz1YeT
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:22:06 2025 by rpki-client