Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
File: sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json)
Hash identifier: 2h54PTPbh3RwLuAw6Aycn/oLCbPU2CbNGe5K+5/vTkQ=
Subject key identifier: ED:B5:D2:E7:58:C1:66:42:97:72:96:CE:4C:7A:8A:FB:FD:8A:D9:68
Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F
Certificate issuer: /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F
Certificate serial: 1305
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
Manifest number: 12FB
Signing time: Fri 28 Mar 2025 17:09:55 +0000
Manifest this update: Fri 28 Mar 2025 17:09:54 +0000
Manifest next update: Fri 04 Apr 2025 17:09:54 +0000
Files and hashes: 1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: /i+uNFWtfTIvH8RDk8a3vLwnuSKdB8LmFVKzmMrKGo4=)
2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: t9IbQoMRsiWsCorQ3w0qnfUpx5CDVs1SA9baB681Ybk=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4869 (0x1305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DDD6
Validity
Not Before: Mar 28 17:09:54 2025 GMT
Not After : Apr 4 17:09:54 2025 GMT
Subject: CN=67e6d7e3-4942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:f5:3e:5e:40:3b:79:24:fc:0d:69:11:ca:
cf:2a:1a:fd:53:04:96:0a:ec:8d:be:f3:43:c5:25:
f7:56:1d:f1:eb:95:26:4a:be:4c:4f:6f:b6:dd:bd:
01:73:f4:c9:85:ad:2b:4c:4b:bd:e8:c9:49:89:ff:
17:18:87:f6:ff:33:8a:12:77:05:d3:6b:4a:b2:65:
6c:73:05:06:ed:b1:0a:ee:37:4c:44:a6:2d:da:41:
36:b6:b0:b5:a0:3f:34:cc:a4:0f:c3:20:b6:39:9b:
63:c7:83:be:ee:4c:f9:41:bc:0a:c0:52:1d:91:d9:
d4:5f:d0:e2:fa:eb:c2:7d:00:63:0c:c2:5a:cb:75:
72:cd:52:20:99:b4:09:59:83:f8:8f:90:ca:37:00:
c2:5c:af:a9:6f:19:84:6b:b1:74:2b:8d:5e:31:28:
a7:60:25:e0:24:b4:97:36:6a:09:5b:cc:47:01:e5:
4d:42:d6:a2:cc:5e:1d:1b:ab:bd:e1:88:25:7e:cc:
d7:1e:bf:f9:66:3d:a1:70:db:b3:d1:05:59:e6:f7:
68:83:06:dd:31:fc:59:f4:78:55:3f:2a:62:2e:bc:
fb:48:f6:c2:54:b2:04:e9:15:ae:e3:b3:06:fa:36:
b0:f5:05:14:e2:85:1b:6b:d7:6b:81:ec:47:32:3a:
de:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B5:D2:E7:58:C1:66:42:97:72:96:CE:4C:7A:8A:FB:FD:8A:D9:68
X509v3 Authority Key Identifier:
keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:48:60:e9:a6:d5:27:30:6c:45:b7:b4:ff:fa:89:b2:90:9c:
f2:f4:4b:cd:49:52:c8:68:53:bb:a9:12:6a:20:a9:41:15:74:
3c:66:f8:82:38:4a:37:0d:1c:d1:0d:f0:cd:23:66:d8:4a:4d:
9a:b2:c8:8b:cb:72:35:f8:b8:27:53:f1:53:8e:21:b6:b7:13:
a7:57:92:fc:cd:eb:53:c1:06:a4:75:c4:11:f8:29:68:9a:50:
ab:ba:4c:7a:21:02:29:b1:c0:9b:1c:24:77:1c:ce:a5:9b:f9:
b6:88:fc:56:f1:b9:5e:14:31:ab:e5:0f:4a:4c:2e:f7:e7:ff:
2e:25:b3:5e:10:49:5b:f1:89:74:a1:0d:0d:d2:b6:b3:b9:d4:
8b:c3:5a:c4:97:c3:13:46:e2:bc:b6:8f:b1:e5:5b:8c:00:79:
4a:c5:6d:0a:39:26:9e:8f:6f:72:9f:6e:f9:9d:2e:bb:77:fc:
af:97:6f:c6:0f:80:b6:14:22:ad:40:b8:56:8f:7c:2b:ae:03:
6b:f5:3b:b5:d1:06:8b:7a:51:18:0f:6f:98:af:49:53:ad:bb:
4f:0d:8d:02:b2:b5:18:fa:f8:40:18:42:49:03:84:a8:9f:b5:
13:7a:03:e7:9e:fb:f7:49:2c:9e:44:65:3c:1b:c7:ff:b9:0c:
bb:4e:12:ec
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0RERDYxMTAvBgNVBAUTKEIwNTU3MTczQTAwOEQ2Rjc4QzZFNUU2QjQwRjhEQzA3
OUE4REY2NUYwHhcNMjUwMzI4MTcwOTU0WhcNMjUwNDA0MTcwOTU0WjAYMRYwFAYD
VQQDEw02N2U2ZDdlMy00OTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp/f1Pl5AO3kk/A1pEcrPKhr9UwSWCuyNvvNDxSX3Vh3x65UmSr5MT2+23b0B
c/TJha0rTEu96MlJif8XGIf2/zOKEncF02tKsmVscwUG7bEK7jdMRKYt2kE2trC1
oD80zKQPwyC2OZtjx4O+7kz5QbwKwFIdkdnUX9Di+uvCfQBjDMJay3VyzVIgmbQJ
WYP4j5DKNwDCXK+pbxmEa7F0K41eMSinYCXgJLSXNmoJW8xHAeVNQtaizF4dG6u9
4YglfszXHr/5Zj2hcNuz0QVZ5vdogwbdMfxZ9HhVPypiLrz7SPbCVLIE6RWu47MG
+jaw9QUU4oUba9drgexHMjrexQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO210udY
wWZCl3KWzkx6ivv9itloMB8GA1UdIwQYMBaAFLBVcXOgCNb3jG5ea0D43AeajfZf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RERENi9FNTM0N0IxQ0FE
MjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2ZU1ibDVyUVBqY0I1cU45
bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NGVnhjNkFJMXZlTWJsNXJRUGpjQjVxTjlsOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RERENi9FNTM0N0IxQ0FEMjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2
ZU1ibDVyUVBqY0I1cU45bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA2SGDpptUnMGxFt7T/+omykJzy9EvNSVLIaFO7qRJqIKlBFXQ8ZviC
OEo3DRzRDfDNI2bYSk2assiLy3I1+LgnU/FTjiG2txOnV5L8zetTwQakdcQR+Clo
mlCrukx6IQIpscCbHCR3HM6lm/m2iPxW8bleFDGr5Q9KTC735/8uJbNeEElb8Yl0
oQ0N0razudSLw1rEl8MTRuK8to+x5VuMAHlKxW0KOSaej29yn275nS67d/yvl2/G
D4C2FCKtQLhWj3wrrgNr9Tu10QaLelEYD2+Yr0lTrbtPDY0CsrUY+vhAGEJJA4So
n7UTegPnnvv3SSyeRGU8G8f/uQy7ThLs
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:54 2025 by rpki-client