Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
File: nE_-Zd6jUjPTnocCI4VlV03tRm4.mft (raw, json)
Hash identifier: 3tIKUvsDi5R8R4Qp1xHT1h86vg8vUhhTzAODHFepnhc=
Subject key identifier: C2:C2:CD:75:B2:E1:D7:8C:4A:87:AB:6A:29:43:42:5B:5B:8F:94:74
Authority key identifier: 9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E
Certificate issuer: /CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
Certificate serial: 0706
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
Manifest number: 1A06
Signing time: Fri 28 Mar 2025 17:09:15 +0000
Manifest this update: Fri 28 Mar 2025 17:09:14 +0000
Manifest next update: Fri 04 Apr 2025 17:09:14 +0000
Files and hashes: 1: nE_-Zd6jUjPTnocCI4VlV03tRm4.crl (hash: +TZ+0Y2AcJ3vAA9BqhL6QTSyfBRLaOuTg95ndtOiA2w=)
2: FFFE92D29CE611EE883A672FC4F9AE02.roa (hash: GWwckZ18h6sa8xUJU0MBnoisjDnt082CFlW4eSRU0Y4=)
3: 653DCD9ADEE811EF9DE2374CC4F9AE02.roa (hash: Mazx36+KDEkICPeaUfwJ/FcwJ2wGDeNl/2eEhKXlMWc=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1798 (0x706)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAA4E
Validity
Not Before: Mar 28 17:09:14 2025 GMT
Not After : Apr 4 17:09:14 2025 GMT
Subject: CN=67e6d7ba-3690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:65:3e:e3:a2:c2:62:97:61:d1:e6:46:73:
27:bf:8e:43:2b:19:f2:49:bc:03:62:a9:21:16:31:
71:f9:d2:af:6f:a5:8f:63:37:96:9f:11:a5:00:a7:
cb:1b:80:60:66:56:0b:d3:9c:d9:9b:ec:29:10:36:
b3:bf:dd:a1:61:77:11:bc:32:88:7f:da:80:a9:76:
aa:ce:85:e8:63:86:75:c5:4e:0b:2d:92:8d:8c:8c:
30:97:5b:16:76:0c:53:b2:4f:1a:a4:23:76:77:6a:
7b:19:87:31:46:63:51:c5:8c:12:77:5a:68:7e:59:
73:6a:62:d7:9f:e6:82:ab:da:9a:ce:17:96:8b:ad:
1d:df:fa:d5:36:e9:64:a6:58:9f:61:a7:7a:e1:24:
51:d0:c1:29:ee:b9:6a:1c:69:c5:7b:db:ac:c8:44:
da:31:25:44:7d:21:3c:c4:e0:3d:24:63:1d:2b:5f:
9c:da:ad:d3:46:bc:38:e4:d7:23:59:e6:a0:57:7b:
73:ae:af:a6:15:2f:7e:e5:a6:bb:53:1d:60:cc:59:
10:7b:de:b1:f2:16:11:23:61:11:15:ac:7c:b9:5f:
79:29:c2:61:21:d1:05:86:6d:a3:aa:3e:b7:15:64:
b6:15:e9:cf:41:77:61:8a:91:1a:93:8a:5b:31:5f:
27:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C2:CD:75:B2:E1:D7:8C:4A:87:AB:6A:29:43:42:5B:5B:8F:94:74
X509v3 Authority Key Identifier:
keyid:9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:53:c2:fa:d4:c5:3d:d0:cb:e3:1b:40:4e:1a:b2:3a:8b:0c:
d2:fb:25:aa:ae:a5:d6:0a:86:63:6c:2a:59:41:8a:64:d1:f1:
78:fc:c1:20:6c:8b:b9:9b:78:fd:d6:11:c0:ee:17:f1:77:e6:
64:96:89:d4:54:2e:e9:59:0d:a8:d4:b9:42:da:23:ba:bb:2e:
12:a9:e7:4e:ef:46:5c:90:1c:54:4c:a1:b7:35:28:4d:ff:61:
ec:f9:79:df:15:d6:1a:01:8c:84:5a:8e:b0:35:4b:9a:85:d9:
bf:4a:f2:38:0a:b3:86:47:60:e4:71:de:35:63:f1:6b:8e:43:
ee:43:7b:59:b2:f4:5a:4b:5a:27:da:51:98:aa:ba:d7:b8:cd:
8d:cc:de:1f:41:84:7d:4f:13:67:2f:3e:13:95:44:19:c6:d2:
8c:ae:8e:c8:7a:6e:50:83:17:0d:5a:bc:38:83:ab:3d:f5:9a:
75:e0:2d:11:f4:25:5e:dc:e9:89:2f:5d:62:1a:2f:6e:2b:c8:
36:89:94:11:90:7c:a7:04:9f:5d:b3:3b:e8:c5:a1:36:07:fc:
ef:d7:e3:e6:b7:d1:66:22:5d:73:00:f1:c9:24:20:c8:45:72:
16:0e:fd:7b:b0:db:f2:a7:5a:e6:3f:53:07:8a:0a:ee:f4:33:
4a:56:01:f1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0FBNEUxMTAvBgNVBAUTKDlDNEZGRTY1REVBMzUyMzNEMzlFODcwMjIzODU2NTU3
NERFRDQ2NkUwHhcNMjUwMzI4MTcwOTE0WhcNMjUwNDA0MTcwOTE0WjAYMRYwFAYD
VQQDEw02N2U2ZDdiYS0zNjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw4RlPuOiwmKXYdHmRnMnv45DKxnySbwDYqkhFjFx+dKvb6WPYzeWnxGlAKfL
G4BgZlYL05zZm+wpEDazv92hYXcRvDKIf9qAqXaqzoXoY4Z1xU4LLZKNjIwwl1sW
dgxTsk8apCN2d2p7GYcxRmNRxYwSd1pofllzamLXn+aCq9qazheWi60d3/rVNulk
plifYad64SRR0MEp7rlqHGnFe9usyETaMSVEfSE8xOA9JGMdK1+c2q3TRrw45Ncj
WeagV3tzrq+mFS9+5aa7Ux1gzFkQe96x8hYRI2ERFax8uV95KcJhIdEFhm2jqj63
FWS2FenPQXdhipEak4pbMV8nbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLCzXWy
4deMSoerailDQltbj5R0MB8GA1UdIwQYMBaAFJxP/mXeo1Iz056HAiOFZVdN7UZu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE0RS81NUU5Nzk1QUE5
NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9uRV8tWmQ2alVqUFRub2NDSTRWbFYwM3RS
bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25FXy1aZDZqVWpQVG5vY0NJNFZsVjAzdFJtNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QUE0RS81NUU5Nzk1QUE5NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9uRV8tWmQ2alVq
UFRub2NDSTRWbFYwM3RSbTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB9U8L61MU90MvjG0BOGrI6iwzS+yWqrqXWCoZjbCpZQYpk0fF4/MEg
bIu5m3j91hHA7hfxd+ZklonUVC7pWQ2o1LlC2iO6uy4SqedO70ZckBxUTKG3NShN
/2Hs+XnfFdYaAYyEWo6wNUuahdm/SvI4CrOGR2Dkcd41Y/FrjkPuQ3tZsvRaS1on
2lGYqrrXuM2NzN4fQYR9TxNnLz4TlUQZxtKMro7Iem5QgxcNWrw4g6s99Zp14C0R
9CVe3OmJL11iGi9uK8g2iZQRkHynBJ9dszvoxaE2B/zv1+Pmt9FmIl1zAPHJJCDI
RXIWDv17sNvyp1rmP1MHigru9DNKVgHx
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:31 2025 by rpki-client