Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
File: jZoijMUvgA7lpDIwezQyxj2KnYc.mft (raw, json)
Hash identifier: EIbWc2z4kVKBD3bunltEUkZtQ099cJZnetHpH9x3IRQ=
Subject key identifier: BE:62:D4:15:68:BE:87:36:B9:B3:1C:B5:FA:9C:4A:70:E5:87:12:A3
Authority key identifier: 8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87
Certificate issuer: /CN=A918FDBF/serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87
Certificate serial: 1BB2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
Manifest number: 1BA8
Signing time: Fri 28 Mar 2025 16:21:20 +0000
Manifest this update: Fri 28 Mar 2025 16:21:19 +0000
Manifest next update: Fri 04 Apr 2025 16:21:19 +0000
Files and hashes: 1: jZoijMUvgA7lpDIwezQyxj2KnYc.crl (hash: 7hBw2kexT7gsXWUd0XSsZl+IRP0hSROIzRvDLRcVWH4=)
2: 1D88BC36F8C711E6B6C42C6CC4F9AE02.roa (hash: adZvd/ecrn/69jFBmaF8532OMU/h1NSuA6iJnPKo2nw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7090 (0x1bb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FDBF
Validity
Not Before: Mar 28 16:21:19 2025 GMT
Not After : Apr 4 16:21:19 2025 GMT
Subject: CN=67e6cc7f-b385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6f:02:9f:f9:bc:f6:fc:f0:b7:18:30:8e:17:
c5:f8:c7:7c:9d:6c:24:8d:da:bd:f7:d0:92:f2:e8:
42:6f:28:18:e2:7c:2b:78:0c:39:52:03:4a:c3:17:
82:91:6b:95:ff:84:10:fa:73:ba:6b:5a:72:85:ce:
1f:b0:8e:54:ef:ec:c4:90:54:17:b0:02:4b:23:7a:
09:04:1c:0d:69:46:b1:10:4b:8c:b0:f1:73:03:34:
a1:ce:a2:8b:aa:5e:48:aa:73:f3:2c:e6:70:e0:9c:
82:ed:1d:93:9d:87:05:ab:ed:c4:0d:f3:d6:9b:69:
8f:e0:9c:ed:f3:9c:b1:c0:ea:6d:3a:6e:8b:f1:59:
d8:11:bb:4c:cd:0e:f2:00:70:7a:35:dd:0a:98:db:
dd:df:a6:11:eb:de:b2:1d:0b:68:08:88:61:61:76:
52:e3:69:c1:ef:62:ad:b6:b7:b8:95:5b:cb:7c:f0:
cd:79:54:3b:b1:52:b1:aa:08:19:2d:3d:40:e3:89:
df:8a:22:89:94:10:b8:9e:b7:37:c6:fb:3d:ff:b2:
0e:1d:01:59:90:4d:c2:58:f7:19:8e:67:ef:2c:db:
39:15:9e:f0:2b:04:73:eb:cf:43:fe:f5:d9:7b:0d:
02:21:bb:84:5b:7b:4a:7f:be:ac:47:25:fb:07:80:
46:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:62:D4:15:68:BE:87:36:B9:B3:1C:B5:FA:9C:4A:70:E5:87:12:A3
X509v3 Authority Key Identifier:
keyid:8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b5:d7:48:05:21:b1:b5:77:a5:a0:ac:f4:8b:95:cb:5b:3c:
d7:e6:50:85:ad:c9:d5:ff:71:c4:7c:1e:3a:2b:d7:46:09:94:
66:9d:ef:1e:47:09:34:f4:52:ff:3e:05:da:bb:20:d9:ec:8a:
a0:29:7b:0c:ef:46:a5:ae:17:d8:16:49:99:d1:37:08:46:c8:
74:bb:2e:76:0c:a0:ef:59:6c:a8:b8:7d:12:49:a2:ae:40:82:
f8:ed:35:36:54:b6:ef:98:8e:bb:ff:c7:ef:04:ab:e7:9d:8d:
c5:10:01:42:4e:f1:00:aa:da:33:79:75:ca:87:94:27:6a:bb:
47:3c:42:0a:b3:b5:55:49:68:c2:a3:1f:c3:48:53:d4:fd:80:
7f:40:9b:33:3c:49:95:38:a5:8b:a5:3c:2f:da:17:a7:04:0c:
4c:98:29:34:35:83:66:2a:2c:e9:52:3f:04:d8:05:f8:eb:4b:
df:21:3c:01:fd:75:13:99:aa:64:c7:1c:21:d5:7b:8a:af:94:
3b:ed:ee:c0:57:d1:60:b4:4a:c4:3b:23:88:1c:eb:b1:67:ec:
11:de:4d:87:2a:0e:b4:75:7c:40:e3:67:77:60:41:9c:cd:80:
94:79:19:d5:7c:79:89:e0:cb:c4:63:68:bb:69:5c:ca:38:3c:
97:b5:39:62
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICG7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZEQkYxMTAvBgNVBAUTKDhEOUEyMjhDQzUyRjgwMEVFNUE0MzIzMDdCMzQzMkM2
M0Q4QTlEODcwHhcNMjUwMzI4MTYyMTE5WhcNMjUwNDA0MTYyMTE5WjAYMRYwFAYD
VQQDEw02N2U2Y2M3Zi1iMzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtW8Cn/m89vzwtxgwjhfF+Md8nWwkjdq999CS8uhCbygY4nwreAw5UgNKwxeC
kWuV/4QQ+nO6a1pyhc4fsI5U7+zEkFQXsAJLI3oJBBwNaUaxEEuMsPFzAzShzqKL
ql5IqnPzLOZw4JyC7R2TnYcFq+3EDfPWm2mP4Jzt85yxwOptOm6L8VnYEbtMzQ7y
AHB6Nd0KmNvd36YR696yHQtoCIhhYXZS42nB72Kttre4lVvLfPDNeVQ7sVKxqggZ
LT1A44nfiiKJlBC4nrc3xvs9/7IOHQFZkE3CWPcZjmfvLNs5FZ7wKwRz689D/vXZ
ew0CIbuEW3tKf76sRyX7B4BGKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5i1BVo
voc2ubMctfqcSnDlhxKjMB8GA1UdIwQYMBaAFI2aIozFL4AO5aQyMHs0MsY9ip2H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkRCRi85OUEzMEFGOEY4
QzUxMUU2OUVCQzU1NkFDNEY5QUUwMi9qWm9pak1VdmdBN2xwREl3ZXpReXhqMktu
WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pab2lqTVV2Z0E3bHBESXdlelF5eGoyS25ZYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkRCRi85OUEzMEFGOEY4QzUxMUU2OUVCQzU1NkFDNEY5QUUwMi9qWm9pak1VdmdB
N2xwREl3ZXpReXhqMktuWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCptddIBSGxtXeloKz0i5XLWzzX5lCFrcnV/3HEfB46K9dGCZRmne8e
Rwk09FL/PgXauyDZ7IqgKXsM70alrhfYFkmZ0TcIRsh0uy52DKDvWWyouH0SSaKu
QIL47TU2VLbvmI67/8fvBKvnnY3FEAFCTvEAqtozeXXKh5QnartHPEIKs7VVSWjC
ox/DSFPU/YB/QJszPEmVOKWLpTwv2henBAxMmCk0NYNmKizpUj8E2AX460vfITwB
/XUTmapkxxwh1XuKr5Q77e7AV9FgtErEOyOIHOuxZ+wR3k2HKg60dXxA42d3YEGc
zYCUeRnVfHmJ4MvEY2i7aVzKODyXtTli
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:12:33 2025 by rpki-client