Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
File: Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft (raw, json)
Hash identifier: vvWogZmosmfS4YcYzQZ51wcXVwZ0JcBHK/SKro4V/9I=
Subject key identifier: 9C:C8:8E:61:9F:25:19:77:BF:23:E4:F6:6E:AF:0A:1B:5C:B1:4E:DD
Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58
Certificate issuer: /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58
Certificate serial: 0C0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
Manifest number: 0C05
Signing time: Fri 28 Mar 2025 18:48:42 +0000
Manifest this update: Fri 28 Mar 2025 18:48:42 +0000
Manifest next update: Fri 04 Apr 2025 18:48:42 +0000
Files and hashes: 1: Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl (hash: 7enhojGMqc5oBezlf+aObNwfPgoLPY/XD8vMk/uQ9I4=)
2: A0E062260A8C11EAB25FD253C4F9AE02.roa (hash: 7xX6rH7i12z21iTWC8vTwBT7bsP1fB8No9Xtvt+ZVCA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3085 (0xc0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9D5D
Validity
Not Before: Mar 28 18:48:42 2025 GMT
Not After : Apr 4 18:48:42 2025 GMT
Subject: CN=67e6ef0a-e676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:03:40:94:80:a0:52:71:34:6a:be:27:31:9e:
ae:42:d0:43:3c:a5:2a:24:d1:73:35:0c:59:20:77:
cb:ee:b4:fa:0f:79:a1:bd:51:c8:9e:13:71:ba:e9:
27:aa:cf:0b:23:48:3a:91:3a:af:69:40:6a:74:0e:
28:86:08:13:62:b1:fa:e3:34:cc:b8:16:60:d5:8d:
61:25:0a:e0:08:a6:c5:51:8c:89:ae:50:2e:34:f4:
cc:1e:a6:44:ef:49:48:63:89:6d:29:25:d7:a5:99:
3a:5b:e6:60:a1:6f:6f:d4:a5:5d:ce:fb:6f:9d:73:
45:a8:1a:e1:b8:4e:f9:6f:28:1a:f2:19:a4:5a:94:
6d:23:34:91:dd:14:cb:f4:d3:c5:8c:61:6e:79:2d:
3a:24:fb:1c:63:c0:f3:b7:f4:8c:f0:12:3f:72:7b:
85:7a:d5:eb:60:71:18:97:f8:0d:cf:bf:48:3e:99:
b6:bf:42:fd:a5:65:22:84:25:02:71:80:fc:3d:48:
04:8b:08:1c:73:6d:51:ea:6c:cb:4f:95:6c:cf:e4:
a7:b7:fe:47:86:20:93:c1:26:69:48:3f:f2:84:11:
44:44:17:7e:e3:49:6a:15:5b:78:8f:8b:63:a8:a0:
89:8b:7b:b7:88:f4:bd:a9:a4:0a:56:04:6b:c1:6c:
2b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C8:8E:61:9F:25:19:77:BF:23:E4:F6:6E:AF:0A:1B:5C:B1:4E:DD
X509v3 Authority Key Identifier:
keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:8e:c5:82:3c:1d:7b:67:82:46:cd:8a:24:0b:f8:61:51:57:
10:ef:9a:99:f7:8d:2a:22:f1:e5:dc:cd:d1:f7:52:ac:9e:fb:
88:f1:98:72:f4:db:2e:21:da:1d:81:cb:09:3d:60:10:23:6d:
0a:75:37:21:55:3e:0a:12:25:fc:a2:69:57:ae:b7:70:a5:e1:
db:b9:2b:87:32:8e:1d:97:41:da:79:e9:0d:72:87:05:4b:9f:
95:79:32:dc:3e:e4:87:65:f1:83:cb:6a:1c:a2:89:5d:3d:2d:
7a:bd:8f:4d:08:50:4a:44:aa:a2:d4:d4:4a:a3:f1:f0:53:2a:
2d:7b:d9:f9:57:6c:7b:c1:f6:38:ef:2d:fc:3a:90:74:0b:a7:
ce:0d:55:13:d0:c7:0a:38:86:3f:6c:c7:8c:6f:5c:f1:df:02:
6f:a6:10:a9:be:d9:c9:bb:81:82:b4:06:46:fc:15:ea:8e:76:
d6:88:4f:e9:69:7d:f3:d3:1a:7f:14:47:52:fc:79:52:64:90:
30:98:df:8a:1d:c8:fa:78:e0:9e:54:ff:1d:a6:48:3f:d1:fc:
70:6b:ed:d4:5a:e8:33:c3:e5:70:45:04:f3:36:63:69:ec:d9:
93:e7:99:e2:ca:57:18:df:98:01:25:9b:b0:9f:ee:9f:76:0e:
21:57:dc:a8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlENUQxMTAvBgNVBAUTKDM3MkQ5MzZFMzhEOEI5Q0IxRjcwMTIyMTlGRjgyMTcy
QjkwQkVFNTgwHhcNMjUwMzI4MTg0ODQyWhcNMjUwNDA0MTg0ODQyWjAYMRYwFAYD
VQQDEw02N2U2ZWYwYS1lNjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAowNAlICgUnE0ar4nMZ6uQtBDPKUqJNFzNQxZIHfL7rT6D3mhvVHInhNxuukn
qs8LI0g6kTqvaUBqdA4ohggTYrH64zTMuBZg1Y1hJQrgCKbFUYyJrlAuNPTMHqZE
70lIY4ltKSXXpZk6W+ZgoW9v1KVdzvtvnXNFqBrhuE75byga8hmkWpRtIzSR3RTL
9NPFjGFueS06JPscY8Dzt/SM8BI/cnuFetXrYHEYl/gNz79IPpm2v0L9pWUihCUC
cYD8PUgEiwgcc21R6mzLT5Vsz+Snt/5HhiCTwSZpSD/yhBFERBd+40lqFVt4j4tj
qKCJi3u3iPS9qaQKVgRrwWwrIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzIjmGf
JRl3vyPk9m6vChtcsU7dMB8GA1UdIwQYMBaAFDctk2442LnLH3ASIZ/4IXK5C+5Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ1RC9ERDZGMjg3MjBB
OEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVjc2ZjQklobl9naGNya0w3
bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL055MlRiampZdWNzZmNCSWhuX2doY3JrTDdsZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUQ1RC9ERDZGMjg3MjBBOEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVj
c2ZjQklobl9naGNya0w3bGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCYjsWCPB17Z4JGzYokC/hhUVcQ75qZ940qIvHl3M3R91KsnvuI8Zhy
9NsuIdodgcsJPWAQI20KdTchVT4KEiX8omlXrrdwpeHbuSuHMo4dl0HaeekNcocF
S5+VeTLcPuSHZfGDy2ocooldPS16vY9NCFBKRKqi1NRKo/HwUyote9n5V2x7wfY4
7y38OpB0C6fODVUT0McKOIY/bMeMb1zx3wJvphCpvtnJu4GCtAZG/BXqjnbWiE/p
aX3z0xp/FEdS/HlSZJAwmN+KHcj6eOCeVP8dpkg/0fxwa+3UWugzw+VwRQTzNmNp
7NmT55niylcY35gBJZuwn+6fdg4hV9yo
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:07 2025 by rpki-client