Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft
File: h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft (raw, json)
Hash identifier: IbyzxKBvNP3BJQLdwChHC8hHnYr71yxjDJFUB4uOn7k=
Subject key identifier: 0B:D3:01:8B:87:D7:00:18:07:9B:30:C0:66:E9:3C:7D:F5:69:51:99
Authority key identifier: 87:BF:57:FB:BC:E0:64:5E:29:1D:49:46:E5:C7:22:76:24:37:1A:CE
Certificate issuer: /CN=A9174CB0/serialNumber=87BF57FBBCE0645E291D4946E5C7227624371ACE
Certificate serial: 07CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft
Manifest number: 07C6
Signing time: Fri 28 Mar 2025 21:20:30 +0000
Manifest this update: Fri 28 Mar 2025 21:20:29 +0000
Manifest next update: Fri 04 Apr 2025 21:20:29 +0000
Files and hashes: 1: h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl (hash: hYqgZ8SkcbtFUyFwOwbrRwfCEviXEtoyIEns/NAhXio=)
2: E21E5A44EB5611EA85A6FA39C4F9AE02.roa (hash: ygZtjL1bFA8A+sTwqChq0qOveU0/d5/4OX+UBo9P2Hk=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1997 (0x7cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174CB0
Validity
Not Before: Mar 28 21:20:29 2025 GMT
Not After : Apr 4 21:20:29 2025 GMT
Subject: CN=67e7129e-f8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e9:e2:0a:db:99:35:c0:cc:32:c8:45:44:e3:
c3:06:7a:0f:6c:1f:66:2d:d5:83:b6:7a:27:7c:fa:
34:fa:a7:c3:f1:de:60:f6:53:c5:28:a8:07:9c:b1:
0e:79:e1:e5:97:8b:7e:13:c7:ef:64:43:73:00:50:
a2:5d:fa:ed:1b:2a:1c:e9:3f:64:79:6e:a4:e2:32:
a4:50:42:d6:6c:97:39:b9:81:5c:1c:28:94:ae:cc:
01:2d:74:86:f2:05:c9:1e:49:c5:f0:1a:90:e5:8f:
25:7a:12:42:01:ce:a7:da:ea:8e:44:6e:d8:19:94:
d3:60:f2:2e:5c:02:fe:08:9c:0b:e4:61:5b:bd:06:
4a:7a:8c:f2:ed:39:a6:f1:e8:25:b5:e1:5e:71:f8:
39:87:ce:50:5d:db:bd:6f:1b:ab:1a:33:5d:a6:46:
44:a1:ba:94:d3:23:38:05:7e:09:13:b6:9f:c9:12:
63:a3:ca:8b:fd:6b:b6:95:0b:25:14:d0:ac:ea:57:
e2:ed:41:68:e7:35:d5:78:4f:9e:0a:6c:9a:9a:f2:
fa:bb:b7:08:8e:50:d7:59:ae:ea:9b:9a:d7:23:5a:
43:17:a8:9f:bb:5f:98:ef:76:fc:32:86:6b:e6:14:
0b:7b:05:13:7f:94:83:f8:6c:98:30:b5:d9:fb:ca:
2b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D3:01:8B:87:D7:00:18:07:9B:30:C0:66:E9:3C:7D:F5:69:51:99
X509v3 Authority Key Identifier:
keyid:87:BF:57:FB:BC:E0:64:5E:29:1D:49:46:E5:C7:22:76:24:37:1A:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:8a:e2:66:17:ba:73:89:96:f7:28:e8:48:2f:8f:52:0f:ce:
91:31:6c:ab:28:ca:bd:14:80:7a:10:9d:4a:8d:d8:62:a6:d3:
07:58:e5:ce:e4:3a:3f:6f:c7:e6:40:af:18:c7:0c:e8:61:a5:
d4:1c:f6:dd:63:9a:db:02:4b:73:15:b3:4c:9b:91:80:ac:29:
d1:f0:46:75:ed:e8:83:31:92:56:f1:64:6e:02:4e:fe:16:5b:
77:ab:01:94:a1:ef:60:e6:bf:30:56:c1:6e:99:93:79:af:63:
02:82:63:57:be:ef:d0:ed:46:8f:0d:5a:58:76:92:63:0f:79:
6c:ca:24:df:6a:d1:09:90:47:58:f9:b1:28:2f:6a:5d:2d:47:
df:9e:92:db:27:1b:72:4d:a2:0b:03:89:7f:67:aa:13:13:c2:
3a:0f:45:0c:30:07:8a:af:4e:d0:3f:d6:96:a2:bf:d7:7e:b1:
b0:aa:24:4b:db:f5:17:62:30:33:b5:7e:f0:c1:20:d4:39:f1:
bb:05:82:61:bb:f1:69:08:f1:cc:62:6a:3c:29:9e:0d:5e:65:
8f:39:98:18:6c:3c:7f:d0:43:ea:65:af:6b:0b:db:9a:3d:e6:
4d:16:d2:4e:d4:c7:7d:36:b6:60:eb:56:75:2d:5b:f5:86:5a:
7f:41:3d:9f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzRDQjAxMTAvBgNVBAUTKDg3QkY1N0ZCQkNFMDY0NUUyOTFENDk0NkU1QzcyMjc2
MjQzNzFBQ0UwHhcNMjUwMzI4MjEyMDI5WhcNMjUwNDA0MjEyMDI5WjAYMRYwFAYD
VQQDEw02N2U3MTI5ZS1mOGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1eniCtuZNcDMMshFROPDBnoPbB9mLdWDtnonfPo0+qfD8d5g9lPFKKgHnLEO
eeHll4t+E8fvZENzAFCiXfrtGyoc6T9keW6k4jKkUELWbJc5uYFcHCiUrswBLXSG
8gXJHknF8BqQ5Y8lehJCAc6n2uqORG7YGZTTYPIuXAL+CJwL5GFbvQZKeozy7Tmm
8eglteFecfg5h85QXdu9bxurGjNdpkZEobqU0yM4BX4JE7afyRJjo8qL/Wu2lQsl
FNCs6lfi7UFo5zXVeE+eCmyamvL6u7cIjlDXWa7qm5rXI1pDF6ifu1+Y73b8MoZr
5hQLewUTf5SD+GyYMLXZ+8oruwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvTAYuH
1wAYB5swwGbpPH31aVGZMB8GA1UdIwQYMBaAFIe/V/u84GReKR1JRuXHInYkNxrO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NENCMC9DQ0FDMTQ1NEVC
NTUxMUVBQkRFMjRFMzZDNEY5QUUwMi9oNzlYLTd6Z1pGNHBIVWxHNWNjaWRpUTNH
czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g3OVgtN3pnWkY0cEhVbEc1Y2NpZGlRM0dzNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NENCMC9DQ0FDMTQ1NEVCNTUxMUVBQkRFMjRFMzZDNEY5QUUwMi9oNzlYLTd6Z1pG
NHBIVWxHNWNjaWRpUTNHczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAoiuJmF7pziZb3KOhIL49SD86RMWyrKMq9FIB6EJ1KjdhiptMHWOXO
5Do/b8fmQK8YxwzoYaXUHPbdY5rbAktzFbNMm5GArCnR8EZ17eiDMZJW8WRuAk7+
Flt3qwGUoe9g5r8wVsFumZN5r2MCgmNXvu/Q7UaPDVpYdpJjD3lsyiTfatEJkEdY
+bEoL2pdLUffnpLbJxtyTaILA4l/Z6oTE8I6D0UMMAeKr07QP9aWor/XfrGwqiRL
2/UXYjAztX7wwSDUOfG7BYJhu/FpCPHMYmo8KZ4NXmWPOZgYbDx/0EPqZa9rC9ua
PeZNFtJO1Md9NrZg61Z1LVv1hlp/QT2f
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:10 2025 by rpki-client