Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft
File: DldBdtqmrGyXcGxmecfiTnC6rVc.mft (raw, json)
Hash identifier: 9b05vROpkGqcweIk5Wky4SlG7dGfcwgEzuam5g0yZV4=
Subject key identifier: 09:DB:DA:5A:14:72:90:14:A2:F0:65:2F:D7:60:2B:D9:A8:D2:B2:7C
Authority key identifier: 0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57
Certificate issuer: /CN=A91C0BDE/serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57
Certificate serial: 097C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft
Manifest number: 1231
Signing time: Fri 28 Mar 2025 20:23:58 +0000
Manifest this update: Fri 28 Mar 2025 20:23:58 +0000
Manifest next update: Fri 04 Apr 2025 20:23:58 +0000
Files and hashes: 1: DldBdtqmrGyXcGxmecfiTnC6rVc.crl (hash: 6k75ePQ62fR/cRyTrmX4UT9LAxbcGLWbgMoZMrG/6EM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2428 (0x97c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0BDE
Validity
Not Before: Mar 28 20:23:58 2025 GMT
Not After : Apr 4 20:23:58 2025 GMT
Subject: CN=67e7055e-9524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fc:43:03:cb:0b:f0:a3:22:2f:38:da:e8:8d:
ca:31:1f:99:c3:fc:28:1a:87:42:55:2c:c1:68:95:
1d:d3:14:cc:37:60:6f:41:c6:d7:5e:df:ad:49:c2:
e2:df:a3:a9:b6:21:be:5b:a4:4d:38:f5:8c:fd:a9:
fd:a1:c5:7e:c3:3a:7b:38:f7:da:de:4a:d3:54:5c:
cc:8e:22:18:3c:99:df:12:1e:03:e8:8f:c3:a7:02:
30:e6:06:05:9d:f7:cc:f3:a1:e1:e9:1d:d4:81:a6:
26:a2:65:ee:c7:44:89:13:ea:a8:75:15:aa:14:b5:
5e:f2:21:4a:8b:7e:df:d8:fc:e0:e6:b2:00:69:57:
23:90:86:c7:59:f8:dd:ed:af:01:c6:c7:f0:7e:b3:
75:1f:0d:7e:86:56:eb:47:d6:59:35:9e:cd:73:0f:
a1:df:da:83:b8:95:29:ae:0b:42:b0:72:e8:3d:b4:
32:b1:af:6e:0d:e2:c6:73:5a:c4:54:13:0c:9f:56:
71:66:b9:9e:03:34:09:6e:f3:3e:c5:36:fb:f8:44:
60:26:a7:3a:c7:8f:2a:80:d7:1c:2c:ed:93:88:f6:
f7:4d:e4:f9:c6:fb:60:85:38:89:d8:1a:48:4b:b7:
35:95:08:44:4b:d1:5e:85:7f:a2:b7:5f:ff:95:d3:
37:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DB:DA:5A:14:72:90:14:A2:F0:65:2F:D7:60:2B:D9:A8:D2:B2:7C
X509v3 Authority Key Identifier:
keyid:0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b7:08:62:45:0a:27:60:76:11:a3:4d:7b:f7:f5:a3:cb:59:
f8:ec:18:f6:19:a2:6a:4c:07:42:63:98:f4:f5:ad:fa:04:97:
05:0a:30:b6:77:2e:2c:ae:fb:12:bb:af:a7:ec:50:20:22:39:
9b:88:ba:50:fc:a8:cd:b5:d3:89:6b:49:54:24:3f:82:5b:3d:
be:36:09:b2:f4:4d:42:72:32:36:81:88:40:b8:df:be:92:d4:
a7:ed:4b:0f:0e:33:66:3d:ec:02:53:c4:76:d8:1b:dd:ab:e8:
11:bc:c2:1a:d9:7e:67:0f:da:52:94:d1:dc:d2:29:e2:b8:8c:
00:67:a7:3c:22:91:44:35:2f:b5:86:14:a7:31:7d:a4:cc:45:
43:3d:a3:50:cc:44:7c:6e:97:90:0e:f2:71:bc:7f:7b:ab:3d:
b0:95:ce:04:73:e4:5c:9e:06:fe:7e:6c:a2:a3:34:bd:35:78:
db:53:e1:1e:0e:ba:2b:88:03:a0:e6:07:6d:7b:f7:ff:16:e2:
8d:81:be:09:c9:dd:81:1c:dd:55:d2:f9:0f:b4:25:c0:b4:ad:
d5:cb:47:e9:9d:bb:9c:82:e5:96:3e:c7:fe:88:87:07:b8:a8:
e4:9b:0c:a6:fb:a1:dc:8e:51:0f:37:62:fa:71:47:de:0a:7c:
96:70:42:ce
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBCREUxMTAvBgNVBAUTKDBFNTc0MTc2REFBNkFDNkM5NzcwNkM2Njc5QzdFMjRF
NzBCQUFENTcwHhcNMjUwMzI4MjAyMzU4WhcNMjUwNDA0MjAyMzU4WjAYMRYwFAYD
VQQDEw02N2U3MDU1ZS05NTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoPxDA8sL8KMiLzja6I3KMR+Zw/woGodCVSzBaJUd0xTMN2BvQcbXXt+tScLi
36OptiG+W6RNOPWM/an9ocV+wzp7OPfa3krTVFzMjiIYPJnfEh4D6I/DpwIw5gYF
nffM86Hh6R3UgaYmomXux0SJE+qodRWqFLVe8iFKi37f2Pzg5rIAaVcjkIbHWfjd
7a8BxsfwfrN1Hw1+hlbrR9ZZNZ7Ncw+h39qDuJUprgtCsHLoPbQysa9uDeLGc1rE
VBMMn1ZxZrmeAzQJbvM+xTb7+ERgJqc6x48qgNccLO2TiPb3TeT5xvtghTiJ2BpI
S7c1lQhES9FehX+it1//ldM3twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnb2loU
cpAUovBlL9dgK9mo0rJ8MB8GA1UdIwQYMBaAFA5XQXbapqxsl3BsZnnH4k5wuq1X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5
NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJHeVhjR3htZWNmaVRuQzZy
VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RsZEJkdHFtckd5WGNHeG1lY2ZpVG5DNnJWYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJH
eVhjR3htZWNmaVRuQzZyVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrtwhiRQonYHYRo0179/Wjy1n47Bj2GaJqTAdCY5j09a36BJcFCjC2
dy4srvsSu6+n7FAgIjmbiLpQ/KjNtdOJa0lUJD+CWz2+Ngmy9E1CcjI2gYhAuN++
ktSn7UsPDjNmPewCU8R22Bvdq+gRvMIa2X5nD9pSlNHc0iniuIwAZ6c8IpFENS+1
hhSnMX2kzEVDPaNQzER8bpeQDvJxvH97qz2wlc4Ec+Rcngb+fmyiozS9NXjbU+Ee
DroriAOg5gdte/f/FuKNgb4Jyd2BHN1V0vkPtCXAtK3Vy0fpnbucguWWPsf+iIcH
uKjkmwym+6HcjlEPN2L6cUfeCnyWcELO
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:14 2025 by rpki-client