Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.mft
File: uwftRksoDVf6dxhB939S6n1QeSc.mft (raw, json)
Hash identifier: 6c21JOa0rivsmNBg6C+YUzpzENZo/0kpj4J4I0gXCA8=
Subject key identifier: 2C:E7:DD:A9:2B:7E:FE:33:76:21:D2:33:55:3C:4E:8C:51:C9:24:97
Authority key identifier: BB:07:ED:46:4B:28:0D:57:FA:77:18:41:F7:7F:52:EA:7D:50:79:27
Certificate issuer: /CN=A9193D85/serialNumber=BB07ED464B280D57FA771841F77F52EA7D507927
Certificate serial: 1034
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwftRksoDVf6dxhB939S6n1QeSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.mft
Manifest number: 101A
Signing time: Fri 28 Mar 2025 17:33:29 +0000
Manifest this update: Fri 28 Mar 2025 17:33:28 +0000
Manifest next update: Fri 04 Apr 2025 17:33:28 +0000
Files and hashes: 1: uwftRksoDVf6dxhB939S6n1QeSc.crl (hash: oK+WlNcZnRTBMtaXQdJSvJ0/XjcmFrV4vhVBTPL6Vys=)
2: AB2D69A4217A11EA9AB7211BC4F9AE02.roa (hash: hPa4OatTYIMb+8b6uDB3EXHHSfu/EbUrHJIf5q9LY6E=)
3: 52138B923FCA11E9AB28853CC4F9AE02.roa (hash: F7eiYk5VKF5lCSCN/hKOx3267YakxI+D95C5/M/ItF4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4148 (0x1034)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193D85
Validity
Not Before: Mar 28 17:33:28 2025 GMT
Not After : Apr 4 17:33:28 2025 GMT
Subject: CN=67e6dd68-56f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:00:63:fc:3a:3b:c1:98:72:17:77:b9:2f:
87:8c:f5:ba:16:24:eb:c7:22:55:84:2d:ff:62:03:
70:b0:ea:24:4f:28:00:51:dc:8d:ec:94:3d:84:3f:
a9:97:1f:df:f3:0b:16:c1:53:cb:e0:13:00:20:88:
0e:dd:6a:f2:3e:a7:4e:05:c1:9f:44:cb:e9:fb:a1:
ef:d9:be:8d:f5:56:09:03:f4:47:60:c5:df:6f:f0:
54:f7:82:7f:70:e8:1c:66:fb:23:aa:5f:a0:e6:db:
74:7a:85:a2:9b:8a:b1:2e:e6:ac:dd:ff:8d:16:bb:
7f:d7:09:a7:fe:a6:9f:cd:be:7a:11:03:57:25:3f:
42:7e:d6:d8:1a:22:e0:1f:1b:53:38:da:80:cf:1f:
6c:1e:8b:69:a1:99:56:62:58:59:2c:85:28:36:ec:
9d:bd:1b:a9:e2:19:cd:9f:73:25:76:94:05:56:a9:
f1:17:69:52:ef:6a:19:dc:f0:2d:db:bd:05:b3:46:
76:98:2e:f6:c2:30:dd:61:bc:24:4e:cd:88:a2:c4:
b5:bd:b2:ae:fc:6d:e0:9b:b5:2b:27:d1:4b:b5:13:
80:48:80:b9:08:ad:f6:99:70:bb:86:41:ae:90:aa:
b3:95:98:50:2a:f3:a3:eb:69:90:ca:e3:c8:10:9f:
59:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E7:DD:A9:2B:7E:FE:33:76:21:D2:33:55:3C:4E:8C:51:C9:24:97
X509v3 Authority Key Identifier:
keyid:BB:07:ED:46:4B:28:0D:57:FA:77:18:41:F7:7F:52:EA:7D:50:79:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwftRksoDVf6dxhB939S6n1QeSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:16:58:d0:1e:c5:34:c4:88:0b:e4:65:86:34:f7:2f:5c:ec:
3b:7c:3a:97:a9:1e:27:dc:b8:3c:ce:c6:ec:02:e8:fe:0e:52:
dc:22:54:56:d8:8b:26:0c:1e:48:3e:5e:78:cf:9c:e2:5f:c4:
1f:2b:3d:10:ec:62:29:4a:ed:f8:dc:cb:d8:4c:bc:06:5b:66:
24:30:04:ad:e5:3b:67:93:89:64:fe:4d:c1:36:98:47:e1:d6:
26:22:d2:f1:b8:65:ce:55:40:da:21:ab:35:c2:29:ac:2a:69:
21:e0:c6:7b:c5:69:ba:bc:74:4a:d6:75:5a:b3:30:c7:cc:2a:
ed:ce:a2:59:a6:42:42:21:cf:80:5c:23:dd:a3:48:68:78:8e:
f2:ae:8f:ef:12:92:27:c9:e2:a3:6c:2e:33:4b:a2:55:1f:ac:
39:de:e0:f0:df:dd:fa:a4:64:8d:0d:23:04:b7:e7:48:00:35:
63:fd:a9:27:29:5b:77:75:79:c6:b8:65:2b:6c:75:60:cb:f4:
a9:f1:cd:5c:76:79:28:96:d7:7e:3c:69:09:09:e2:d4:41:3a:
7e:e8:e8:23:13:90:2d:d2:19:ae:b6:37:80:e2:1e:30:0d:44:
e7:3d:23:7a:73:9e:3c:e9:c0:c9:31:f6:26:bc:1a:8c:fe:00:
88:2f:94:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTNEODUxMTAvBgNVBAUTKEJCMDdFRDQ2NEIyODBENTdGQTc3MTg0MUY3N0Y1MkVB
N0Q1MDc5MjcwHhcNMjUwMzI4MTczMzI4WhcNMjUwNDA0MTczMzI4WjAYMRYwFAYD
VQQDEw02N2U2ZGQ2OC01NmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq+MAY/w6O8GYchd3uS+HjPW6FiTrxyJVhC3/YgNwsOokTygAUdyN7JQ9hD+p
lx/f8wsWwVPL4BMAIIgO3WryPqdOBcGfRMvp+6Hv2b6N9VYJA/RHYMXfb/BU94J/
cOgcZvsjql+g5tt0eoWim4qxLuas3f+NFrt/1wmn/qafzb56EQNXJT9CftbYGiLg
HxtTONqAzx9sHotpoZlWYlhZLIUoNuydvRup4hnNn3MldpQFVqnxF2lS72oZ3PAt
270Fs0Z2mC72wjDdYbwkTs2IosS1vbKu/G3gm7UrJ9FLtROASIC5CK32mXC7hkGu
kKqzlZhQKvOj62mQyuPIEJ9ZjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzn3akr
fv4zdiHSM1U8ToxRySSXMB8GA1UdIwQYMBaAFLsH7UZLKA1X+ncYQfd/Uup9UHkn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Q4NS85MTUzMjUyMDNG
QzkxMUU5OTc5QkI4M0JDNEY5QUUwMi91d2Z0Umtzb0RWZjZkeGhCOTM5UzZuMVFl
U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V3ZnRSa3NvRFZmNmR4aEI5MzlTNm4xUWVTYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
M0Q4NS85MTUzMjUyMDNGQzkxMUU5OTc5QkI4M0JDNEY5QUUwMi91d2Z0Umtzb0RW
ZjZkeGhCOTM5UzZuMVFlU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCaFljQHsU0xIgL5GWGNPcvXOw7fDqXqR4n3Lg8zsbsAuj+DlLcIlRW
2IsmDB5IPl54z5ziX8QfKz0Q7GIpSu343MvYTLwGW2YkMASt5Ttnk4lk/k3BNphH
4dYmItLxuGXOVUDaIas1wimsKmkh4MZ7xWm6vHRK1nVaszDHzCrtzqJZpkJCIc+A
XCPdo0hoeI7yro/vEpInyeKjbC4zS6JVH6w53uDw3936pGSNDSMEt+dIADVj/akn
KVt3dXnGuGUrbHVgy/Sp8c1cdnkoltd+PGkJCeLUQTp+6OgjE5At0hmutjeA4h4w
DUTnPSN6c5486cDJMfYmvBqM/gCIL5QP
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:40:11 2025 by rpki-client