Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
File: 2fwVW2_aEGxpmlabEgOEkJWKoy8.mft (raw, json)
Hash identifier: u4AftW5hXwcM6DkPoDxdRgbuk5v7ejsCGsXlpNGg4TA=
Subject key identifier: 4B:9A:EE:BF:E7:6F:9F:92:7F:7A:3C:C4:49:75:2E:C1:C0:A3:FD:4A
Authority key identifier: D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F
Certificate issuer: /CN=A91B53A5/serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F
Certificate serial: 1A2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
Manifest number: 1A12
Signing time: Fri 28 Mar 2025 16:28:55 +0000
Manifest this update: Fri 28 Mar 2025 16:28:54 +0000
Manifest next update: Fri 04 Apr 2025 16:28:54 +0000
Files and hashes: 1: 2fwVW2_aEGxpmlabEgOEkJWKoy8.crl (hash: UbY/ToxS4iU280qVrLUVUeOu5Gf7p5XzvdMEnFJfxbU=)
2: C443D86A55A311E7896BED09C4F9AE02.roa (hash: RAjaQS5QbqXtrUMbAxpVJSZQfE94i9hS979yM5B3+jI=)
3: A9286C0E6D4411E7AF539270C4F9AE02.roa (hash: CvwZ78Bx6JW2ZSeXfa9JVVvETeg0+qlUbSWAQnUGr1k=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6699 (0x1a2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B53A5
Validity
Not Before: Mar 28 16:28:54 2025 GMT
Not After : Apr 4 16:28:54 2025 GMT
Subject: CN=67e6ce46-24e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:42:a7:23:aa:59:f8:fc:f4:5f:0b:39:08:
0d:2d:ee:f8:dc:64:82:ec:4d:a1:eb:45:50:bf:45:
c5:bc:8b:ce:aa:21:50:19:97:f7:21:be:e0:5e:03:
02:52:9c:8c:96:8b:bb:6e:54:14:f9:5d:c7:dd:d4:
f5:3a:b3:3c:c6:22:4d:78:c0:7a:a7:1e:46:42:db:
20:05:c0:b1:2f:da:e9:49:98:8f:73:ef:2c:af:17:
51:02:fd:e9:16:5c:e8:35:60:56:8e:01:09:04:fd:
19:6d:cd:5a:1f:67:4e:0b:12:81:93:7a:82:39:e2:
4e:f3:55:8e:dc:9b:80:6a:e1:25:9b:dc:14:05:70:
43:86:eb:51:4d:af:9b:9e:f2:c3:47:c7:42:13:ec:
ec:2b:c6:5e:bf:10:f4:13:f9:6c:34:5e:54:8e:4b:
31:fd:06:3b:a3:3a:f7:c6:e4:84:05:77:6d:e7:ce:
20:81:37:cc:fb:12:58:7a:5e:6d:56:52:fd:b7:7b:
d4:6a:d0:96:f5:fd:a1:ad:33:1c:54:f7:98:38:29:
88:8b:56:0a:cb:42:26:81:e4:86:40:0d:db:e5:82:
f1:d9:bb:a5:a2:1f:2d:40:30:4d:c8:a9:10:66:79:
ef:e1:fb:f2:23:1e:c7:79:51:6a:1e:2f:ac:7e:75:
ff:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9A:EE:BF:E7:6F:9F:92:7F:7A:3C:C4:49:75:2E:C1:C0:A3:FD:4A
X509v3 Authority Key Identifier:
keyid:D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:b4:5e:7b:92:8e:96:85:a6:5c:f6:d7:e4:44:a7:a4:d0:f7:
c7:32:c9:aa:66:bf:c9:26:35:93:6e:b1:dc:7d:e6:2e:ef:6d:
61:8a:78:66:46:92:f9:c9:5c:f7:14:2c:60:b8:c9:fe:b0:0c:
05:95:87:74:bc:65:a9:1c:ea:b3:a1:0b:a2:dc:5c:45:44:3f:
09:60:a0:73:39:b3:a7:37:9a:5e:d1:6e:e2:35:37:24:88:a5:
e2:26:3d:30:4b:5e:71:fd:e1:da:89:a1:47:fe:3c:a0:2d:f4:
63:c0:51:ee:b2:af:2e:9f:ad:7c:87:45:42:63:62:9a:03:9d:
99:82:7b:f3:40:fd:ec:dc:31:ef:c7:11:a5:87:d6:e3:46:55:
86:40:78:57:bb:d2:03:61:8e:d6:35:0a:39:d0:82:ed:75:c4:
d1:dd:6d:c3:4c:dd:4d:ec:fc:23:34:76:77:52:a2:c9:4b:c5:
99:d0:9f:02:37:b8:83:98:a9:ae:fb:75:b7:9e:0a:04:1c:a7:
ea:22:43:41:1f:03:e2:6d:d7:af:19:1e:5a:cd:46:75:a2:87:
03:6c:9d:f1:eb:39:aa:a5:7b:a1:e7:b4:a1:cb:0a:13:bf:6e:
b2:26:9e:b5:2d:a9:c4:eb:d2:76:be:10:42:88:15:f0:c2:3d:
11:fb:45:4a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjUzQTUxMTAvBgNVBAUTKEQ5RkMxNTVCNkZEQTEwNkM2OTlBNTY5QjEyMDM4NDkw
OTU4QUEzMkYwHhcNMjUwMzI4MTYyODU0WhcNMjUwNDA0MTYyODU0WjAYMRYwFAYD
VQQDEw02N2U2Y2U0Ni0yNGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmb5CpyOqWfj89F8LOQgNLe743GSC7E2h60VQv0XFvIvOqiFQGZf3Ib7gXgMC
UpyMlou7blQU+V3H3dT1OrM8xiJNeMB6px5GQtsgBcCxL9rpSZiPc+8srxdRAv3p
FlzoNWBWjgEJBP0Zbc1aH2dOCxKBk3qCOeJO81WO3JuAauElm9wUBXBDhutRTa+b
nvLDR8dCE+zsK8ZevxD0E/lsNF5Ujksx/QY7ozr3xuSEBXdt584ggTfM+xJYel5t
VlL9t3vUatCW9f2hrTMcVPeYOCmIi1YKy0ImgeSGQA3b5YLx2buloh8tQDBNyKkQ
Znnv4fvyIx7HeVFqHi+sfnX/NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEua7r/n
b5+Sf3o8xEl1LsHAo/1KMB8GA1UdIwQYMBaAFNn8FVtv2hBsaZpWmxIDhJCViqMv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBNS8yNTgwQThENjRC
NjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVHeHBtbGFiRWdPRWtKV0tv
eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJmd1ZXMl9hRUd4cG1sYWJFZ09Fa0pXS295OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NTNBNS8yNTgwQThENjRCNjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVH
eHBtbGFiRWdPRWtKV0tveTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYtF57ko6WhaZc9tfkRKek0PfHMsmqZr/JJjWTbrHcfeYu721hinhm
RpL5yVz3FCxguMn+sAwFlYd0vGWpHOqzoQui3FxFRD8JYKBzObOnN5pe0W7iNTck
iKXiJj0wS15x/eHaiaFH/jygLfRjwFHusq8un618h0VCY2KaA52ZgnvzQP3s3DHv
xxGlh9bjRlWGQHhXu9IDYY7WNQo50ILtdcTR3W3DTN1N7PwjNHZ3UqLJS8WZ0J8C
N7iDmKmu+3W3ngoEHKfqIkNBHwPibdevGR5azUZ1oocDbJ3x6zmqpXuh57ShywoT
v26yJp61LanE69J2vhBCiBXwwj0R+0VK
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:56 2025 by rpki-client