Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
File: sQG1q1GcKuZKv61qVvhD3AmQqFM.mft (raw, json)
Hash identifier: EhHmg7HEB8obzkRR4cbQ5am5ShdLnN5iRWc3kg2NDes=
Subject key identifier: 84:2F:CC:FE:BD:13:FA:DE:14:57:55:67:2B:BF:20:05:44:DB:E4:1E
Authority key identifier: B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53
Certificate issuer: /CN=A919B06C/serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853
Certificate serial: 115A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
Manifest number: 1F3C
Signing time: Fri 28 Mar 2025 17:22:10 +0000
Manifest this update: Fri 28 Mar 2025 17:22:09 +0000
Manifest next update: Fri 04 Apr 2025 17:22:09 +0000
Files and hashes: 1: sQG1q1GcKuZKv61qVvhD3AmQqFM.crl (hash: Cqvo/4mnurXI8foVdNmY0nAShCXWVmm891hjN4ujgxI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4442 (0x115a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B06C
Validity
Not Before: Mar 28 17:22:09 2025 GMT
Not After : Apr 4 17:22:09 2025 GMT
Subject: CN=67e6dac1-f4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:dd:4d:e1:54:11:49:7c:b7:8d:8f:23:c8:
6b:86:ae:d5:b3:e7:8d:e7:f5:31:44:28:49:3c:4e:
73:d5:e2:9d:d8:92:3c:b0:43:89:a4:13:5d:58:df:
d4:0e:96:b7:3b:69:79:68:bd:23:48:f1:d6:38:c8:
2c:19:09:b2:72:63:3e:dd:29:59:d6:7c:9a:72:63:
48:83:6b:23:07:be:8e:7f:75:09:2c:f5:fe:6b:60:
c0:97:6c:ce:b5:fb:5b:b0:0b:81:c7:ad:1a:8c:de:
1b:9a:38:89:ce:4f:12:ee:2b:28:e7:60:e5:b5:ea:
47:4b:4b:3c:b0:d9:6f:a0:a6:06:eb:f4:d8:bd:21:
c9:4c:fb:c4:69:29:69:7b:20:26:67:d5:69:9b:e2:
43:4f:a4:c8:d6:a5:0d:4d:65:30:9e:b8:8b:2f:5e:
e2:aa:69:00:b3:18:ee:f8:91:f2:1c:58:73:0e:2e:
4b:7d:a0:6f:3e:9d:9d:1f:a6:15:f7:3c:68:1f:56:
de:7c:54:16:fb:7d:5c:71:b2:8e:22:5c:7e:fc:76:
33:e6:dd:14:a0:83:15:e1:bb:3b:5e:3b:4b:24:93:
6d:9b:e1:73:ff:5d:51:de:4f:a4:02:7e:03:91:3d:
54:67:d5:bc:ba:43:cf:71:02:4e:fd:f8:be:d3:2a:
d8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2F:CC:FE:BD:13:FA:DE:14:57:55:67:2B:BF:20:05:44:DB:E4:1E
X509v3 Authority Key Identifier:
keyid:B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:2f:b6:92:50:aa:55:18:21:b7:ab:74:66:c7:5b:38:76:27:
28:87:86:c2:d7:8e:8b:39:b4:21:68:78:82:71:d6:7a:0a:6f:
ff:94:c4:09:2e:27:7d:96:45:a6:a3:0b:0d:6f:23:e4:e4:53:
bc:1c:cd:4a:8c:d6:b2:a3:af:c1:87:15:a2:eb:cd:68:95:62:
40:92:ac:d1:25:96:fd:2b:74:f8:cd:8f:30:36:96:c0:10:df:
ac:87:b2:d7:37:03:2d:18:63:80:8e:b0:10:85:85:86:88:2f:
86:96:71:9d:1b:fb:c0:b8:3a:77:63:97:73:1a:50:2c:f5:f8:
96:a9:ff:91:6e:95:c6:7d:e4:35:4c:89:00:d4:20:ee:95:6d:
d0:62:97:b1:9c:66:57:91:66:4e:ba:11:57:ef:28:0d:c6:bd:
d7:fb:c4:ff:e7:45:cc:ea:fa:89:37:ca:db:5d:b9:dc:1b:27:
57:f5:89:9d:ee:1a:59:b5:58:77:ba:88:fc:d1:f4:47:a3:ee:
d9:db:61:6b:2d:09:de:51:da:22:de:90:50:b6:c7:33:1c:03:
54:86:5a:8a:cf:e3:fc:9a:2d:16:18:b1:47:66:21:a8:00:97:
98:e5:cc:ac:03:90:8b:a6:b5:89:35:27:82:36:b0:d3:4c:53:
7b:e2:52:ad
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUIwNkMxMTAvBgNVBAUTKEIxMDFCNUFCNTE5QzJBRTY0QUJGQUQ2QTU2Rjg0M0RD
MDk5MEE4NTMwHhcNMjUwMzI4MTcyMjA5WhcNMjUwNDA0MTcyMjA5WjAYMRYwFAYD
VQQDEw02N2U2ZGFjMS1mNGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzp/dTeFUEUl8t42PI8hrhq7Vs+eN5/UxRChJPE5z1eKd2JI8sEOJpBNdWN/U
Dpa3O2l5aL0jSPHWOMgsGQmycmM+3SlZ1nyacmNIg2sjB76Of3UJLPX+a2DAl2zO
tftbsAuBx60ajN4bmjiJzk8S7iso52DltepHS0s8sNlvoKYG6/TYvSHJTPvEaSlp
eyAmZ9Vpm+JDT6TI1qUNTWUwnriLL17iqmkAsxju+JHyHFhzDi5LfaBvPp2dH6YV
9zxoH1befFQW+31ccbKOIlx+/HYz5t0UoIMV4bs7XjtLJJNtm+Fz/11R3k+kAn4D
kT1UZ9W8ukPPcQJO/fi+0yrYlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQvzP69
E/reFFdVZyu/IAVE2+QeMB8GA1UdIwQYMBaAFLEBtatRnCrmSr+talb4Q9wJkKhT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF
QUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1Wkt2NjFxVnZoRDNBbVFx
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NRRzFxMUdjS3VaS3Y2MXFWdmhEM0FtUXFGTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1
Wkt2NjFxVnZoRDNBbVFxRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAVL7aSUKpVGCG3q3Rmx1s4dicoh4bC146LObQhaHiCcdZ6Cm//lMQJ
Lid9lkWmowsNbyPk5FO8HM1KjNayo6/BhxWi681olWJAkqzRJZb9K3T4zY8wNpbA
EN+sh7LXNwMtGGOAjrAQhYWGiC+GlnGdG/vAuDp3Y5dzGlAs9fiWqf+RbpXGfeQ1
TIkA1CDulW3QYpexnGZXkWZOuhFX7ygNxr3X+8T/50XM6vqJN8rbXbncGydX9Ymd
7hpZtVh3uoj80fRHo+7Z22FrLQneUdoi3pBQtsczHANUhlqKz+P8mi0WGLFHZiGo
AJeY5cysA5CLprWJNSeCNrDTTFN74lKt
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:36 2025 by rpki-client