Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft
File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json)
Hash identifier: yx9Zif4m9ollbTYC3j1FxdD/n9P7U56KkfxJ4SWujXY=
Subject key identifier: 6A:6A:D5:01:02:5C:81:EF:CF:B9:B6:AA:9C:79:1C:D9:5A:8B:FB:78
Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5
Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5
Certificate serial: 09B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft
Manifest number: 0991
Signing time: Fri 28 Mar 2025 20:26:10 +0000
Manifest this update: Fri 28 Mar 2025 20:26:09 +0000
Manifest next update: Fri 04 Apr 2025 20:26:09 +0000
Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: OOZU/B7KWiZKUI0meJUadU636fxCZ2eK2obM7E9F+mI=)
2: 2ABC9DCAE70111EE8CBD5443C4F9AE02.roa (hash: XqCmEMVbctn80tZMWt9KBtSYiAl81CKhVgV+0CIH65c=)
3: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: 5hNv554rReK06N20/FH9rDWPnZEfKsGbqYpiIu4Udbg=)
4: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: SpBt7sDt3PRONHBV0bfhwVMq6dMRxKdSE97eOEgTO/c=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2489 (0x9b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6943
Validity
Not Before: Mar 28 20:26:09 2025 GMT
Not After : Apr 4 20:26:09 2025 GMT
Subject: CN=67e705e1-9b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:18:83:ba:7a:b4:23:0a:61:3f:f6:30:06:2c:
4a:ff:cd:4f:42:a2:59:d9:ef:f8:5d:21:79:5f:7d:
3d:50:8f:bd:a1:ac:24:7a:bd:cd:97:4c:ff:c3:f3:
03:d4:04:66:bd:30:36:5f:c6:13:38:98:f4:57:d4:
67:ce:a7:6f:ac:1a:c1:79:f3:f8:2b:bf:64:b7:13:
98:a7:b6:a3:c5:e9:fa:6b:b2:1b:e2:51:f0:8d:27:
df:92:74:03:f7:20:be:f1:f6:02:46:bb:6f:8d:10:
64:e3:0c:b0:49:4f:7c:11:8c:05:29:ca:f3:45:1e:
41:50:84:c5:11:d4:0a:8f:29:b0:81:30:06:f3:c7:
6f:1e:50:65:97:dd:ee:c9:da:45:a0:a8:a6:fa:7f:
87:a0:d2:e3:81:bd:89:89:8b:e0:5f:49:c2:e2:f6:
52:6e:36:b2:28:93:f0:03:a0:68:81:a7:62:a5:2d:
07:06:9d:9f:e1:16:15:a0:a6:15:7b:98:04:5e:9f:
8c:a0:af:bf:14:a5:cd:3a:2a:b5:ef:97:d0:05:05:
ae:aa:c4:bb:c1:bc:43:bc:e7:3e:db:75:32:a3:e8:
10:3d:dc:b4:a7:57:89:ba:91:82:96:0a:ed:d4:62:
a1:5a:3e:0b:59:ce:4c:f8:35:00:5d:0f:10:1b:f3:
ed:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6A:D5:01:02:5C:81:EF:CF:B9:B6:AA:9C:79:1C:D9:5A:8B:FB:78
X509v3 Authority Key Identifier:
keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e9:53:7a:e9:a4:27:92:eb:e6:9d:2c:7f:65:fa:0c:c4:ba:
2c:ba:ef:62:be:84:c6:24:1f:8c:99:9e:6a:72:79:76:13:66:
e4:54:87:2e:0a:c8:c6:c4:31:08:79:31:ea:df:76:81:c9:ee:
8e:74:eb:86:21:12:c4:03:b4:ba:1c:fb:bf:b5:eb:a5:fd:ae:
c1:41:f3:98:73:c5:fe:ac:32:ff:be:0c:cf:94:69:31:07:03:
44:52:34:2c:b1:4c:5e:4f:1f:cf:97:2d:e6:a4:f3:ab:cf:d3:
f2:75:79:3e:0d:55:0e:92:d9:15:a7:36:a2:d4:0f:10:1b:37:
b9:32:a7:e7:bc:12:b3:a8:7b:e7:50:e0:8d:ff:9e:86:d4:c4:
0d:f0:62:71:e7:ce:3d:ab:34:1f:9c:78:33:ee:2f:65:a0:d8:
33:67:33:c3:4f:3c:ee:50:fe:dc:d8:cb:0b:09:0d:e7:a5:53:
a1:6e:a3:f4:76:23:9f:bf:ab:54:32:ac:d8:93:8f:c3:87:ce:
b5:2f:e6:05:9a:ca:06:d2:12:4d:fb:71:c6:c1:3d:35:62:81:
6b:64:88:8a:22:da:d3:83:4a:50:21:d5:a1:aa:26:b7:1e:21:
ca:35:64:b1:a0:ea:5c:14:64:36:ac:9c:42:eb:27:5c:eb:49:
ce:52:2a:19
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy
MzYwRkQwRjUwHhcNMjUwMzI4MjAyNjA5WhcNMjUwNDA0MjAyNjA5WjAYMRYwFAYD
VQQDEw02N2U3MDVlMS05YjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnhiDunq0IwphP/YwBixK/81PQqJZ2e/4XSF5X309UI+9oawker3Nl0z/w/MD
1ARmvTA2X8YTOJj0V9RnzqdvrBrBefP4K79ktxOYp7ajxen6a7Ib4lHwjSffknQD
9yC+8fYCRrtvjRBk4wywSU98EYwFKcrzRR5BUITFEdQKjymwgTAG88dvHlBll93u
ydpFoKim+n+HoNLjgb2JiYvgX0nC4vZSbjayKJPwA6BogadipS0HBp2f4RYVoKYV
e5gEXp+MoK+/FKXNOiq175fQBQWuqsS7wbxDvOc+23Uyo+gQPdy0p1eJupGClgrt
1GKhWj4LWc5M+DUAXQ8QG/PtPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpq1QEC
XIHvz7m2qpx5HNlai/t4MB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE
NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw
UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t
QzV3RVJ3ejdHMndqWVAwUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCz6VN66aQnkuvmnSx/ZfoMxLosuu9ivoTGJB+MmZ5qcnl2E2bkVIcu
CsjGxDEIeTHq33aBye6OdOuGIRLEA7S6HPu/teul/a7BQfOYc8X+rDL/vgzPlGkx
BwNEUjQssUxeTx/Ply3mpPOrz9PydXk+DVUOktkVpzai1A8QGze5MqfnvBKzqHvn
UOCN/56G1MQN8GJx5849qzQfnHgz7i9loNgzZzPDTzzuUP7c2MsLCQ3npVOhbqP0
diOfv6tUMqzYk4/Dh861L+YFmsoG0hJN+3HGwT01YoFrZIiKItrTg0pQIdWhqia3
HiHKNWSxoOpcFGQ2rJxC6ydc60nOUioZ
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:40:16 2025 by rpki-client