Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
File: toWM6JkRXyxWHHZl74vgaIBoEJw.mft (raw, json)
Hash identifier: u5Uq+bg+0c8C5rxAXMmjt0sXvYMdSK6I0OjkFxzoN8s=
Subject key identifier: CB:62:0D:58:9A:EE:26:FC:38:8C:44:3A:C6:C2:EE:3F:B5:60:B8:70
Authority key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
Certificate issuer: /CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
Certificate serial: 0906
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
Manifest number: 08EE
Signing time: Fri 28 Mar 2025 20:39:57 +0000
Manifest this update: Fri 28 Mar 2025 20:39:57 +0000
Manifest next update: Fri 04 Apr 2025 20:39:57 +0000
Files and hashes: 1: toWM6JkRXyxWHHZl74vgaIBoEJw.crl (hash: q0UjXOuUN40ViikzPDul1zfJemIdn5NNP7bnG3d1WoY=)
2: 1A4ED0E8A71811EA80A77B1FC4F9AE02.roa (hash: o2ubabJQjRgkyeZ1KZmWpq8Ju1E6mRHeCYVqt6Eg9bc=)
3: 8C79CFC6A6FD11EAA1B00744C4F9AE02.roa (hash: ZhKJiPvJVpmKkzL+YkNpWQyHnorv+gyb0AmGgaJqcWs=)
4: 95DC9990D0A211EE9C97373FC4F9AE02.roa (hash: z6k7ctSWW62IFQe+RQT4sXA8JZqwDWiJbhhB0VFDnxM=)
5: 9C454274FB7711EDA78AAC1DC4F9AE02.roa (hash: ZvBB3zmKVUj3FoNo3LoHC19aHdg/tMgwEIpu4fehNZ4=)
6: 9D83F4E6FB7711EDA78AAC1DC4F9AE02.roa (hash: KelzcdHCtnxA0fy0V8HA1xyHStc3LVcSAxi6LwKWwLw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2310 (0x906)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D120D
Validity
Not Before: Mar 28 20:39:57 2025 GMT
Not After : Apr 4 20:39:57 2025 GMT
Subject: CN=67e7091d-b813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:18:41:3f:c3:89:69:69:7f:4f:bc:70:15:c6:
5d:bd:e6:85:d8:37:4c:b5:c1:b1:87:e8:b2:52:10:
5d:f6:04:9e:df:de:bb:71:ea:ab:15:53:fd:cf:5c:
4a:e4:bf:6f:c2:c2:d1:fd:b2:8a:49:ef:59:55:15:
6d:43:2d:14:e8:b1:2e:2c:32:3a:7c:f9:a7:13:c7:
83:b6:4e:b9:97:55:5a:7a:c3:09:e3:7a:d4:af:e5:
d6:2c:3b:43:eb:cd:90:a5:55:1b:84:b6:12:59:6d:
15:32:d0:04:b4:50:8a:f6:25:af:a2:96:46:dd:92:
48:d4:9c:82:ad:37:93:e2:8a:4f:87:45:47:5d:f6:
5a:b8:02:2f:73:47:57:91:66:eb:86:fc:22:5b:3b:
8d:55:d9:45:86:c6:1e:3c:c8:85:bb:fe:ca:0a:e3:
85:2f:20:f6:32:bb:44:b6:30:4c:8e:6c:1c:b4:8d:
03:a9:a7:98:4a:13:a0:c4:c2:88:00:07:fa:6b:0b:
06:64:07:63:93:36:94:2c:f1:56:d0:9e:ca:fd:7c:
87:98:a2:00:a2:64:5e:79:26:51:a5:7a:7c:c1:39:
43:5c:da:e2:f6:3a:33:dd:0d:9e:6a:99:f9:f6:43:
65:24:a2:f7:b0:98:a4:7a:13:41:49:4e:8d:74:6d:
20:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:62:0D:58:9A:EE:26:FC:38:8C:44:3A:C6:C2:EE:3F:B5:60:B8:70
X509v3 Authority Key Identifier:
keyid:B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:84:93:37:9a:be:b7:17:45:1f:01:6d:02:3c:2a:40:45:16:
d6:06:4d:2e:bc:69:cd:67:6e:77:69:fd:b6:5e:1a:c0:1d:48:
ae:bb:a1:4a:b9:6b:30:bc:ad:67:6d:26:0e:53:c6:4e:f8:2c:
44:25:da:3f:ef:37:09:c2:ef:b7:07:1e:45:8b:4b:5a:29:04:
ae:d9:f2:09:5d:ed:0e:bf:cd:86:d3:31:f3:e7:0b:73:c3:3b:
d2:9a:0f:90:0f:bf:47:7e:10:65:7a:09:9d:88:5e:01:a4:e8:
54:1a:5f:1e:dd:bc:d2:71:05:ee:24:9c:68:c6:19:a8:d8:4c:
d4:77:53:e0:93:3d:eb:0d:5a:8a:5d:bc:65:0c:ed:3a:8d:a9:
1f:4d:01:a0:d6:22:49:7e:16:1b:0b:0b:f2:a0:69:b1:6c:07:
3a:0c:d0:82:97:f5:a4:c4:4a:1e:e4:a6:0c:a5:2a:a9:a9:f2:
48:ba:a4:56:bd:6b:fe:ba:dd:e4:79:d4:ff:aa:b8:05:c7:72:
ae:34:20:7e:74:cf:7d:9b:0f:a7:32:50:25:77:ec:f4:d2:7b:
87:6d:7c:f6:45:2b:19:dd:71:b5:59:22:ae:82:38:04:6d:e5:
d8:92:7e:63:18:42:b7:89:0a:22:dc:94:9b:cd:b9:ef:49:79:
7f:54:e3:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDEyMEQxMTAvBgNVBAUTKEI2ODU4Q0U4OTkxMTVGMkM1NjFDNzY2NUVGOEJFMDY4
ODA2ODEwOUMwHhcNMjUwMzI4MjAzOTU3WhcNMjUwNDA0MjAzOTU3WjAYMRYwFAYD
VQQDEw02N2U3MDkxZC1iODEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0RhBP8OJaWl/T7xwFcZdveaF2DdMtcGxh+iyUhBd9gSe3967ceqrFVP9z1xK
5L9vwsLR/bKKSe9ZVRVtQy0U6LEuLDI6fPmnE8eDtk65l1VaesMJ43rUr+XWLDtD
682QpVUbhLYSWW0VMtAEtFCK9iWvopZG3ZJI1JyCrTeT4opPh0VHXfZauAIvc0dX
kWbrhvwiWzuNVdlFhsYePMiFu/7KCuOFLyD2MrtEtjBMjmwctI0DqaeYShOgxMKI
AAf6awsGZAdjkzaULPFW0J7K/XyHmKIAomReeSZRpXp8wTlDXNri9joz3Q2eapn5
9kNlJKL3sJikehNBSU6NdG0g9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtiDVia
7ib8OIxEOsbC7j+1YLhwMB8GA1UdIwQYMBaAFLaFjOiZEV8sVhx2Ze+L4GiAaBCc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIwRC81MUU4MEU5OEE2
RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkprUlh5eFdISFpsNzR2Z2FJQm9F
SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RvV002SmtSWHl4V0hIWmw3NHZnYUlCb0VKdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTIwRC81MUU4MEU5OEE2RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkprUlh5
eFdISFpsNzR2Z2FJQm9FSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQByhJM3mr63F0UfAW0CPCpARRbWBk0uvGnNZ253af22XhrAHUiuu6FK
uWswvK1nbSYOU8ZO+CxEJdo/7zcJwu+3Bx5Fi0taKQSu2fIJXe0Ov82G0zHz5wtz
wzvSmg+QD79HfhBlegmdiF4BpOhUGl8e3bzScQXuJJxoxhmo2EzUd1Pgkz3rDVqK
XbxlDO06jakfTQGg1iJJfhYbCwvyoGmxbAc6DNCCl/WkxEoe5KYMpSqpqfJIuqRW
vWv+ut3kedT/qrgFx3KuNCB+dM99mw+nMlAld+z00nuHbXz2RSsZ3XG1WSKugjgE
beXYkn5jGEK3iQoi3JSbzbnvSXl/VONV
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:05 2025 by rpki-client