Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft
File: taHQH3ui3UVMy-zTGGzhR6_-G64.mft (raw, json)
Hash identifier: eV10l1XgzEMWgdOP6ivzKaEP6vec2rBcviNM/DVusdo=
Subject key identifier: B7:69:A7:36:D3:9D:63:2F:26:3A:F0:D9:DF:91:35:E9:A6:8C:63:B1
Authority key identifier: B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE
Certificate issuer: /CN=A9177EF0/serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE
Certificate serial: 3471
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft
Manifest number: 346B
Signing time: Fri 28 Mar 2025 15:12:47 +0000
Manifest this update: Fri 28 Mar 2025 15:12:46 +0000
Manifest next update: Fri 04 Apr 2025 15:12:46 +0000
Files and hashes: 1: taHQH3ui3UVMy-zTGGzhR6_-G64.crl (hash: 3sQZa57MQPQ2CHYKh5cSc93hyj4bbYOhKf9f0tyLGV8=)
2: 2C49CD02723D11EB8F298B41C4F9AE02.roa (hash: M+qrH+d4hQUO8WoGFe8+wMrHk3LjUTfGpHtbU5q49ds=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13425 (0x3471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177EF0
Validity
Not Before: Mar 28 15:12:46 2025 GMT
Not After : Apr 4 15:12:46 2025 GMT
Subject: CN=67e6bc6f-71a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:a1:c7:3e:2f:09:1c:32:a4:52:0e:41:53:
36:0d:6a:0e:78:b8:86:ad:99:48:26:b4:79:14:90:
bb:30:39:dd:9c:d7:7e:dc:8f:31:5d:00:92:96:25:
fa:2d:0f:6b:5a:f0:ec:d6:2c:79:45:da:e1:88:84:
0b:fb:f9:f0:aa:eb:14:8d:0a:75:c1:27:a7:20:65:
5d:86:87:ae:17:61:2c:82:a0:51:73:75:af:ff:e7:
f1:e6:fc:ef:f2:46:7f:1e:ba:a7:1c:76:71:6e:49:
7a:6e:01:61:49:a5:32:25:7e:f3:dd:e4:24:02:79:
5c:f6:2f:d7:02:da:51:73:cb:03:49:3f:c4:f9:33:
5f:ff:d8:2e:03:08:79:2c:32:42:83:2c:d3:40:5c:
3a:41:49:cb:32:75:99:10:df:11:58:bb:2e:94:fa:
7f:14:36:b3:a3:cf:05:0a:b6:f8:20:3d:28:e8:12:
92:27:2f:d8:16:62:83:b3:e4:6c:08:68:7c:4f:b0:
7b:fb:62:fd:05:60:f8:fb:52:ff:2a:dc:a2:8e:7a:
a7:f8:d6:e4:82:0f:c5:b5:e8:fe:a3:06:21:3c:3f:
05:b4:65:a0:9b:2b:57:66:3f:2e:23:20:71:29:40:
db:2b:1a:fc:bf:b0:e7:89:7b:a6:09:9f:7c:70:70:
85:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:69:A7:36:D3:9D:63:2F:26:3A:F0:D9:DF:91:35:E9:A6:8C:63:B1
X509v3 Authority Key Identifier:
keyid:B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:f9:2f:53:d4:18:f3:41:f1:27:cb:5b:ae:74:78:56:fb:0e:
ff:1a:7f:f6:c6:ec:aa:eb:6a:8c:c5:01:e6:1c:ef:f9:ee:21:
66:78:22:8e:64:fe:91:6a:e5:81:82:ff:7f:22:07:4b:8e:47:
09:f6:ee:72:b3:45:ba:c8:e4:d2:51:04:49:f0:db:58:fc:fb:
40:21:23:b9:d6:75:c5:db:a7:70:34:0e:76:44:41:6b:ba:30:
75:08:8b:e8:26:27:ec:77:31:4b:bc:9e:ca:87:89:1c:68:89:
01:df:b3:85:07:f9:b7:ea:4a:68:f0:02:b3:af:ff:3c:6d:1c:
54:0e:28:d1:f4:4e:c9:3e:5f:ae:c2:a3:84:08:27:6d:c5:ca:
37:88:75:f9:38:ae:00:eb:76:8f:8a:25:7e:90:11:a4:97:3f:
34:9e:ba:f1:03:28:79:7f:54:9e:b5:61:ff:c1:96:d7:cf:c5:
71:b9:4e:87:dc:d1:32:df:74:e4:24:80:7e:0c:18:92:47:9f:
6c:b3:87:88:dd:06:3d:d8:1b:22:42:a4:ae:bd:b6:75:68:a8:
39:52:db:bb:0c:31:c4:bf:29:32:b2:11:96:62:e6:f1:98:8b:
10:cb:00:40:72:2e:c0:18:f4:df:ae:93:21:aa:c0:5b:ab:75:
e2:7d:7d:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzdFRjAxMTAvBgNVBAUTKEI1QTFEMDFGN0JBMkRENDU0Q0NCRUNEMzE4NkNFMTQ3
QUZGRTFCQUUwHhcNMjUwMzI4MTUxMjQ2WhcNMjUwNDA0MTUxMjQ2WjAYMRYwFAYD
VQQDEw02N2U2YmM2Zi03MWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq26hxz4vCRwypFIOQVM2DWoOeLiGrZlIJrR5FJC7MDndnNd+3I8xXQCSliX6
LQ9rWvDs1ix5RdrhiIQL+/nwqusUjQp1wSenIGVdhoeuF2EsgqBRc3Wv/+fx5vzv
8kZ/HrqnHHZxbkl6bgFhSaUyJX7z3eQkAnlc9i/XAtpRc8sDST/E+TNf/9guAwh5
LDJCgyzTQFw6QUnLMnWZEN8RWLsulPp/FDazo88FCrb4ID0o6BKSJy/YFmKDs+Rs
CGh8T7B7+2L9BWD4+1L/Ktyijnqn+Nbkgg/Ftej+owYhPD8FtGWgmytXZj8uIyBx
KUDbKxr8v7DniXumCZ98cHCFLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdppzbT
nWMvJjrw2d+RNemmjGOxMB8GA1UdIwQYMBaAFLWh0B97ot1FTMvs0xhs4Uev/huu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0VGMC9DMEJFRjNDMDFE
QTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNVVk15LXpUR0d6aFI2Xy1H
NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RhSFFIM3VpM1VWTXktelRHR3poUjZfLUc2NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
N0VGMC9DMEJFRjNDMDFEQTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNV
Vk15LXpUR0d6aFI2Xy1HNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCR+S9T1BjzQfEny1uudHhW+w7/Gn/2xuyq62qMxQHmHO/57iFmeCKO
ZP6RauWBgv9/IgdLjkcJ9u5ys0W6yOTSUQRJ8NtY/PtAISO51nXF26dwNA52REFr
ujB1CIvoJifsdzFLvJ7Kh4kcaIkB37OFB/m36kpo8AKzr/88bRxUDijR9E7JPl+u
wqOECCdtxco3iHX5OK4A63aPiiV+kBGklz80nrrxAyh5f1SetWH/wZbXz8VxuU6H
3NEy33TkJIB+DBiSR59ss4eI3QY92BsiQqSuvbZ1aKg5Utu7DDHEvykyshGWYubx
mIsQywBAci7AGPTfrpMhqsBbq3XifX0P
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:47 2025 by rpki-client