Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
File: pGg4Xjj11YpziCOPLtMFVXig7V4.mft (raw, json)
Hash identifier: r4g+7kKSCtdyXCnRNgu9nDzcCfwITxXG4K0Z15ADKI8=
Subject key identifier: DA:99:BF:CE:D8:66:D2:AD:83:77:4F:57:E3:EF:C2:58:EC:61:E0:88
Authority key identifier: A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E
Certificate issuer: /CN=A91C5ED0/serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E
Certificate serial: 07E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
Manifest number: 294F
Signing time: Fri 28 Mar 2025 17:06:25 +0000
Manifest this update: Fri 28 Mar 2025 17:06:24 +0000
Manifest next update: Fri 04 Apr 2025 17:06:24 +0000
Files and hashes: 1: pGg4Xjj11YpziCOPLtMFVXig7V4.crl (hash: PTSu8S6r6LCYppVoSPsqrjkkbUFX9bSHxvKKi1TMckQ=)
2: 54E2A752E17211ECA8128235C4F9AE02.roa (hash: gbmWhKuExbHxGm8suMn+9Fw+reSjRg+IHpYr9CQ3RBU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2021 (0x7e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5ED0
Validity
Not Before: Mar 28 17:06:24 2025 GMT
Not After : Apr 4 17:06:24 2025 GMT
Subject: CN=67e6d710-4af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9a:f6:25:ea:f4:96:81:7a:83:f3:be:50:f5:
25:9a:7c:70:96:90:88:c4:5e:f6:50:8f:3f:eb:d1:
de:c0:67:93:33:64:92:e5:47:f9:16:d2:fd:b2:c3:
af:93:e3:1b:4d:97:79:ec:23:b3:9a:80:85:57:05:
98:b1:59:59:6a:5e:bb:88:40:7f:c8:42:14:1c:c8:
cb:e9:6b:0a:fe:ec:a7:21:8e:5e:80:00:8e:66:63:
9e:ec:46:b4:c1:4f:f2:2f:23:56:a7:7f:0b:f6:86:
61:a2:86:6a:b9:cd:1f:fd:f9:3d:bd:5a:b2:24:e2:
00:31:b3:87:8c:d5:29:e9:12:a2:aa:fb:dc:41:4f:
a3:be:15:3b:8d:05:15:cb:35:ac:73:41:d1:a0:49:
10:1d:05:89:47:a0:3e:6d:f7:e9:1a:36:c7:58:15:
98:44:f7:d9:7b:88:ce:07:4a:73:85:83:a1:47:7f:
79:61:53:d9:5a:01:5c:e0:54:8e:95:e4:50:0e:8d:
a0:c1:32:91:95:54:15:9b:7e:d7:a5:9e:23:21:e0:
df:0e:22:d4:98:04:7d:62:c6:dc:60:78:71:0d:e5:
5a:88:e1:3d:15:39:ab:5e:da:e0:62:92:87:bb:7f:
c3:27:5c:b1:f0:e0:dd:4f:ab:f5:77:79:00:23:ef:
cb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:99:BF:CE:D8:66:D2:AD:83:77:4F:57:E3:EF:C2:58:EC:61:E0:88
X509v3 Authority Key Identifier:
keyid:A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8f:f0:76:74:5c:7a:f7:7f:61:73:df:14:6d:1a:41:44:dd:
b3:b4:e4:0a:f5:60:2c:f0:a2:5d:dd:0c:fe:56:05:22:c0:59:
31:11:32:68:a7:e6:1d:d8:4d:cc:74:6f:45:c4:78:f3:64:60:
c9:d0:51:fc:36:f1:69:a0:cb:d7:ee:41:df:56:83:6e:8d:62:
fb:71:62:26:2e:6b:8f:a0:98:48:fd:e6:d5:a0:eb:58:f6:05:
d1:c5:c2:ed:18:8a:1a:73:7a:b9:74:96:c1:87:64:49:aa:d3:
9a:56:ea:2d:6b:46:d5:20:62:be:23:e3:c0:52:1c:69:fb:ed:
be:33:81:6f:d4:50:3e:ca:95:d0:5a:aa:ad:ee:fd:7f:53:14:
9f:9f:f3:f5:c9:38:cb:30:15:50:a5:86:b2:4e:05:a8:22:85:
d6:d9:90:4b:66:17:e4:47:99:5a:a7:80:00:81:62:6a:54:44:
c8:b1:f5:af:07:da:d4:1e:1c:2f:28:a0:2c:ca:08:f5:48:95:
4b:9d:24:c2:af:0c:b3:75:c2:57:f8:8f:e6:86:52:16:87:f5:
bf:e8:05:c9:86:e3:1c:37:e5:4a:cc:09:73:20:82:a1:e9:f8:
32:32:eb:c5:da:c2:9a:9b:9f:1b:22:53:a2:d7:26:68:d0:a4:
b9:41:51:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzVFRDAxMTAvBgNVBAUTKEE0NjgzODVFMzhGNUQ1OEE3Mzg4MjM4RjJFRDMwNTU1
NzhBMEVENUUwHhcNMjUwMzI4MTcwNjI0WhcNMjUwNDA0MTcwNjI0WjAYMRYwFAYD
VQQDEw02N2U2ZDcxMC00YWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA55r2Jer0loF6g/O+UPUlmnxwlpCIxF72UI8/69HewGeTM2SS5Uf5FtL9ssOv
k+MbTZd57COzmoCFVwWYsVlZal67iEB/yEIUHMjL6WsK/uynIY5egACOZmOe7Ea0
wU/yLyNWp38L9oZhooZquc0f/fk9vVqyJOIAMbOHjNUp6RKiqvvcQU+jvhU7jQUV
yzWsc0HRoEkQHQWJR6A+bffpGjbHWBWYRPfZe4jOB0pzhYOhR395YVPZWgFc4FSO
leRQDo2gwTKRlVQVm37XpZ4jIeDfDiLUmAR9YsbcYHhxDeVaiOE9FTmrXtrgYpKH
u3/DJ1yx8ODdT6v1d3kAI+/LrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqZv87Y
ZtKtg3dPV+PvwljsYeCIMB8GA1UdIwQYMBaAFKRoOF449dWKc4gjjy7TBVV4oO1e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5
NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9wR2c0WGpqMTFZcHppQ09QTHRNRlZYaWc3
VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BHZzRYamoxMVlwemlDT1BMdE1GVlhpZzdWNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9wR2c0WGpqMTFZ
cHppQ09QTHRNRlZYaWc3VjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCnj/B2dFx6939hc98UbRpBRN2ztOQK9WAs8KJd3Qz+VgUiwFkxETJo
p+Yd2E3MdG9FxHjzZGDJ0FH8NvFpoMvX7kHfVoNujWL7cWImLmuPoJhI/ebVoOtY
9gXRxcLtGIoac3q5dJbBh2RJqtOaVuota0bVIGK+I+PAUhxp++2+M4Fv1FA+ypXQ
Wqqt7v1/UxSfn/P1yTjLMBVQpYayTgWoIoXW2ZBLZhfkR5lap4AAgWJqVETIsfWv
B9rUHhwvKKAsygj1SJVLnSTCrwyzdcJX+I/mhlIWh/W/6AXJhuMcN+VKzAlzIIKh
6fgyMuvF2sKam58bIlOi1yZo0KS5QVE0
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:22:10 2025 by rpki-client