Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
File: VRHewp3K7aF782u_M5UycVnxSoE.mft (raw, json)
Hash identifier: KLJ9mDK8gNuSK3nfGRjsL7eYrBD7kIhE4bfHzGNI6aI=
Subject key identifier: B3:57:4C:27:DB:41:4A:6F:C7:B0:8A:2A:2A:91:14:F7:3F:45:B0:66
Authority key identifier: 55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81
Certificate issuer: /CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81
Certificate serial: 0C61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
Manifest number: 0C4D
Signing time: Fri 28 Mar 2025 18:30:44 +0000
Manifest this update: Fri 28 Mar 2025 18:30:43 +0000
Manifest next update: Fri 04 Apr 2025 18:30:43 +0000
Files and hashes: 1: VRHewp3K7aF782u_M5UycVnxSoE.crl (hash: qYKIkcVCkJhhSO5Zh9IVPYuywC4PIPYS786FYB9VfIA=)
2: F3E543B4CBB611EB94FE6E68C4F9AE02.roa (hash: ZXJMtYkkqA7hHeKOhLlOV4cY6XESDyR/pKiToP5eSgg=)
3: F2B52DF6CBB611EB94FE6E68C4F9AE02.roa (hash: pSxfk0FHnFoiI4DMtbpzZ2ySSBds/zGBYa4EKLwgCes=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3169 (0xc61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192248
Validity
Not Before: Mar 28 18:30:43 2025 GMT
Not After : Apr 4 18:30:43 2025 GMT
Subject: CN=67e6ead4-bdf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4f:23:ed:0c:3a:01:fa:31:06:bb:e8:98:e1:
86:85:05:94:95:b4:fa:4f:c9:33:25:29:ba:ab:fd:
9e:97:97:be:38:94:e7:18:0b:e4:20:3e:ca:a6:f0:
99:d0:08:ec:c2:14:92:01:dd:4f:3d:26:3f:1b:b1:
70:06:f5:24:09:56:71:37:52:db:69:32:1e:7d:5f:
70:07:cc:90:3c:09:b4:01:d1:c0:a3:52:3e:2c:23:
fc:aa:a3:62:83:6d:de:57:3a:3e:f9:bc:34:00:1e:
10:15:66:0d:0a:76:99:82:73:9f:98:1d:c3:b0:ed:
91:d9:e5:8b:da:c8:ca:c9:0d:f9:6d:cc:93:76:b2:
17:4c:1d:ca:71:91:fb:d2:7b:bb:ac:a8:13:34:c5:
75:04:f1:6f:fa:f2:8b:24:68:82:f3:5a:8c:32:17:
4c:63:f8:bb:2a:f7:50:7b:c7:4b:00:da:c9:08:bb:
7c:2b:f9:86:76:4a:1a:4b:80:7a:ce:61:4e:75:d4:
33:b1:51:53:f7:8d:c9:c6:0b:68:6f:c8:c2:52:c6:
af:dd:e5:ba:ca:06:76:c1:63:59:d3:e2:c4:13:b0:
4f:a7:06:f9:2c:c5:b8:11:16:82:42:9e:a3:95:7d:
fa:d0:21:df:da:70:46:4f:78:f5:4e:9f:e0:77:ad:
41:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:57:4C:27:DB:41:4A:6F:C7:B0:8A:2A:2A:91:14:F7:3F:45:B0:66
X509v3 Authority Key Identifier:
keyid:55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e8:33:d0:af:8a:61:24:23:d3:c3:47:2e:75:18:79:38:c0:
05:01:b3:f8:94:45:20:20:df:3e:f3:7f:6a:05:37:29:89:fc:
97:f9:42:12:f3:f0:b0:1f:52:95:ee:4f:0e:a7:14:61:3a:fd:
eb:b3:80:dd:5c:03:fb:39:aa:fe:f6:49:0c:02:43:70:34:b8:
2b:39:52:4a:bb:d6:08:7b:be:20:bf:4e:87:9b:da:b7:e8:af:
52:c4:6f:84:cd:35:d2:c6:51:71:42:c7:8c:69:eb:f9:ae:e8:
d2:6b:36:8a:21:49:e2:e4:c0:36:43:b7:34:a7:90:d1:f7:0a:
34:ef:3f:05:70:05:8c:42:ac:0f:df:8e:6a:46:24:97:bb:6d:
79:95:04:ac:3c:8a:d6:be:8f:43:e2:bf:50:da:04:2e:39:d7:
9e:c4:75:f2:63:de:2f:f7:2e:22:d5:77:56:51:e9:0c:81:3d:
42:06:d0:82:05:75:5f:7e:ed:1c:a6:f0:ba:ab:ea:7e:c5:21:
5c:f3:97:b4:c6:cf:9f:66:a9:c3:0f:99:5c:92:36:2b:b9:fb:
a7:d8:d1:e7:5f:d2:2a:98:59:8c:93:82:12:85:1b:b2:28:95:
92:1f:77:8f:35:15:5d:c3:84:dc:ad:32:20:43:e2:b8:cc:7d:
aa:ee:da:d5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTIyNDgxMTAvBgNVBAUTKDU1MTFERUMyOURDQUVEQTE3QkYzNkJCRjMzOTUzMjcx
NTlGMTRBODEwHhcNMjUwMzI4MTgzMDQzWhcNMjUwNDA0MTgzMDQzWjAYMRYwFAYD
VQQDEw02N2U2ZWFkNC1iZGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz08j7Qw6AfoxBrvomOGGhQWUlbT6T8kzJSm6q/2el5e+OJTnGAvkID7KpvCZ
0AjswhSSAd1PPSY/G7FwBvUkCVZxN1LbaTIefV9wB8yQPAm0AdHAo1I+LCP8qqNi
g23eVzo++bw0AB4QFWYNCnaZgnOfmB3DsO2R2eWL2sjKyQ35bcyTdrIXTB3KcZH7
0nu7rKgTNMV1BPFv+vKLJGiC81qMMhdMY/i7KvdQe8dLANrJCLt8K/mGdkoaS4B6
zmFOddQzsVFT943Jxgtob8jCUsav3eW6ygZ2wWNZ0+LEE7BPpwb5LMW4ERaCQp6j
lX360CHf2nBGT3j1Tp/gd61BzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNXTCfb
QUpvx7CKKiqRFPc/RbBmMB8GA1UdIwQYMBaAFFUR3sKdyu2he/NrvzOVMnFZ8UqB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjI0OC9DNzk4QTBGQUZG
MDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdhRjc4MnVfTTVVeWNWbnhT
b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZSSGV3cDNLN2FGNzgydV9NNVV5Y1ZueFNvRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjI0OC9DNzk4QTBGQUZGMDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdh
Rjc4MnVfTTVVeWNWbnhTb0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCn6DPQr4phJCPTw0cudRh5OMAFAbP4lEUgIN8+839qBTcpifyX+UIS
8/CwH1KV7k8OpxRhOv3rs4DdXAP7Oar+9kkMAkNwNLgrOVJKu9YIe74gv06Hm9q3
6K9SxG+EzTXSxlFxQseMaev5rujSazaKIUni5MA2Q7c0p5DR9wo07z8FcAWMQqwP
345qRiSXu215lQSsPIrWvo9D4r9Q2gQuOdeexHXyY94v9y4i1XdWUekMgT1CBtCC
BXVffu0cpvC6q+p+xSFc85e0xs+fZqnDD5lckjYrufun2NHnX9IqmFmMk4IShRuy
KJWSH3ePNRVdw4TcrTIgQ+K4zH2q7trV
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:11:36 2025 by rpki-client