Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft
File: jLkrEub5htMT1T88qrB-vjJVrro.mft (raw, json)
Hash identifier: wHRDDf1Nrqh14XDP8St/qajVzoHebcKKhv+lp9OZOE4=
Subject key identifier: 83:C9:76:73:9C:49:FE:6C:68:4E:10:64:B9:56:53:5A:38:22:76:4A
Authority key identifier: 8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA
Certificate issuer: /CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA
Certificate serial: 1A44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft
Manifest number: 1A3A
Signing time: Fri 28 Mar 2025 16:28:20 +0000
Manifest this update: Fri 28 Mar 2025 16:28:19 +0000
Manifest next update: Fri 04 Apr 2025 16:28:19 +0000
Files and hashes: 1: jLkrEub5htMT1T88qrB-vjJVrro.crl (hash: /kpmOnMS9nhSWdrDr1KizH2lBcbQraP1Hy78T3/X66U=)
2: 452D6C36BD1411EAA4875216C4F9AE02.roa (hash: yGGkDxuoJ7+8gqf/0aTvyd850ZQHcY8118DqWsFirgg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6724 (0x1a44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF4E
Validity
Not Before: Mar 28 16:28:19 2025 GMT
Not After : Apr 4 16:28:19 2025 GMT
Subject: CN=67e6ce24-0748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2f:a6:4e:27:14:5f:af:27:01:14:be:25:ff:
bb:c5:47:25:e1:ba:97:66:85:19:53:b9:f9:53:ed:
6a:5e:36:76:e5:23:73:4f:43:d3:14:3d:cb:1e:a6:
16:8e:88:d0:50:4a:e3:8a:39:9d:84:69:2d:fd:6f:
0e:21:43:da:fb:e2:38:e1:60:e3:f5:09:09:f4:32:
41:d8:79:3a:b7:eb:f1:81:93:99:6a:59:29:68:3f:
f5:59:64:e7:94:bc:29:ee:d2:48:f2:86:bf:ac:5f:
6d:eb:e6:ce:a2:73:50:0e:c8:d6:e1:da:6b:66:01:
69:3d:cb:ba:f1:ef:36:83:c5:1b:db:0e:01:7e:50:
47:c1:75:84:3b:75:0c:d9:91:89:e6:dd:53:5d:f1:
3b:12:4f:0d:d2:ca:d3:3f:f9:ee:fc:24:01:fc:49:
52:af:a0:24:ac:30:a9:7d:97:e5:97:43:51:0f:6b:
fe:75:bf:27:7a:ae:f5:43:1a:82:dd:f8:7e:01:90:
32:b4:ad:b3:88:e8:ec:fb:97:8a:4b:1f:a5:76:b4:
31:b3:2c:96:11:34:47:24:34:77:23:b7:81:83:c1:
a0:97:5c:a8:02:1f:c7:5d:fb:7a:e6:91:b4:80:b9:
b0:84:63:e2:68:67:8f:55:f9:f9:59:27:cc:a8:bc:
40:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C9:76:73:9C:49:FE:6C:68:4E:10:64:B9:56:53:5A:38:22:76:4A
X509v3 Authority Key Identifier:
keyid:8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:9d:b3:9c:36:6d:c8:cc:cf:11:53:9a:ef:22:d2:42:1e:f1:
11:74:7f:ff:20:ad:e6:d0:d1:ff:fa:61:50:49:a8:c1:ef:23:
20:e1:26:8b:0f:f7:53:c5:0d:32:1c:dc:f0:03:ab:04:fe:c7:
9e:33:ae:69:bf:1f:79:0a:f9:1f:a9:be:f6:4f:db:e9:db:57:
4b:a5:33:8f:d7:5c:f7:a9:e9:22:ce:1a:24:bd:14:96:9e:22:
52:6a:88:3a:4f:04:59:7d:fc:61:54:31:72:90:e2:43:a0:cb:
e7:7a:87:5b:f3:05:ba:2a:df:3a:55:5c:a3:0d:ac:14:56:c1:
21:41:01:99:fb:06:29:ed:bb:5b:a0:a2:a4:9d:3e:aa:66:5f:
b7:c9:00:7d:c6:5f:d5:f8:66:dd:96:e6:ba:ac:98:20:ed:5c:
fc:52:ef:2c:46:e8:02:30:ab:15:f4:10:dd:b7:cd:10:88:2b:
53:7c:06:27:9b:8e:2e:44:6a:0e:0a:25:7b:1b:52:ea:f7:49:
9d:db:b8:1a:eb:82:0f:51:fe:92:c3:01:f4:32:13:78:25:d2:
c1:0d:8c:22:90:3d:b4:b5:a5:f5:3b:a5:d0:e0:be:ba:9c:9d:
f8:29:b9:e4:a9:d5:35:93:ea:60:c8:7f:64:70:73:dd:f1:d1:
64:f1:bc:c3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVGNEUxMTAvBgNVBAUTKDhDQjkyQjEyRTZGOTg2RDMxM0Q1M0YzQ0FBQjA3RUJF
MzI1NUFFQkEwHhcNMjUwMzI4MTYyODE5WhcNMjUwNDA0MTYyODE5WjAYMRYwFAYD
VQQDEw02N2U2Y2UyNC0wNzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7S+mTicUX68nARS+Jf+7xUcl4bqXZoUZU7n5U+1qXjZ25SNzT0PTFD3LHqYW
jojQUErjijmdhGkt/W8OIUPa++I44WDj9QkJ9DJB2Hk6t+vxgZOZalkpaD/1WWTn
lLwp7tJI8oa/rF9t6+bOonNQDsjW4dprZgFpPcu68e82g8Ub2w4BflBHwXWEO3UM
2ZGJ5t1TXfE7Ek8N0srTP/nu/CQB/ElSr6AkrDCpfZfll0NRD2v+db8neq71QxqC
3fh+AZAytK2ziOjs+5eKSx+ldrQxsyyWETRHJDR3I7eBg8Ggl1yoAh/HXft65pG0
gLmwhGPiaGePVfn5WSfMqLxANwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPJdnOc
Sf5saE4QZLlWU1o4InZKMB8GA1UdIwQYMBaAFIy5KxLm+YbTE9U/PKqwfr4yVa66
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY0RS9CRjQ3QkY4QzQx
MzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0TVQxVDg4cXJCLXZqSlZy
cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pMa3JFdWI1aHRNVDFUODhxckItdmpKVnJyby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RUY0RS9CRjQ3QkY4QzQxMzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0
TVQxVDg4cXJCLXZqSlZycm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBKnbOcNm3IzM8RU5rvItJCHvERdH//IK3m0NH/+mFQSajB7yMg4SaL
D/dTxQ0yHNzwA6sE/seeM65pvx95Cvkfqb72T9vp21dLpTOP11z3qekizhokvRSW
niJSaog6TwRZffxhVDFykOJDoMvneodb8wW6Kt86VVyjDawUVsEhQQGZ+wYp7btb
oKKknT6qZl+3yQB9xl/V+Gbdlua6rJgg7Vz8Uu8sRugCMKsV9BDdt80QiCtTfAYn
m44uRGoOCiV7G1Lq90md27ga64IPUf6SwwH0MhN4JdLBDYwikD20taX1O6XQ4L66
nJ34KbnkqdU1k+pgyH9kcHPd8dFk8bzD
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:51 2025 by rpki-client