Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft
File: -Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft (raw, json)
Hash identifier: C6+c5WwdEsb71PRy3BLVanIo6PwzO8GmvgUKpKV5TsA=
Subject key identifier: D0:30:1A:78:FC:94:22:B4:23:0E:2F:8C:57:7A:92:B5:D1:AC:8B:1E
Authority key identifier: F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8
Certificate issuer: /CN=A91D3102/serialNumber=F91A3A98314384C403A8FF22A453BCA1A3BA6CD8
Certificate serial: 2DB7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft
Manifest number: 2D9F
Signing time: Fri 28 Mar 2025 15:35:54 +0000
Manifest this update: Fri 28 Mar 2025 15:35:53 +0000
Manifest next update: Fri 04 Apr 2025 15:35:53 +0000
Files and hashes: 1: -Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl (hash: CTe2nxVyv0QRDdQiJB/Q2EtGCfbfr+fE/Li394yBMcA=)
2: 611D8094B13D11E59299870AC4F9AE02.roa (hash: Ge8zFlpjpqEtuKQN0h56H1Urr1O0D0HMkBD9jJfCPmM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11703 (0x2db7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3102
Validity
Not Before: Mar 28 15:35:53 2025 GMT
Not After : Apr 4 15:35:53 2025 GMT
Subject: CN=67e6c1da-a388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:38:35:c2:69:dc:14:6a:e1:df:d1:b0:35:
2e:1a:9e:81:b5:06:67:85:a0:0e:2a:84:3e:46:bd:
29:a6:65:6a:b6:72:c0:80:c5:9c:07:8c:d6:d5:ff:
ac:4b:65:61:98:43:dc:c9:42:87:25:af:6e:68:ae:
67:7c:b4:90:ed:0e:6e:46:39:85:53:3f:04:10:6d:
fb:f0:75:bc:3b:11:83:55:52:d2:f1:f5:55:d5:46:
70:c6:f5:f4:6c:ec:5b:8c:67:80:8b:fa:02:ff:a6:
7a:4c:89:8f:94:4e:56:e8:68:57:13:82:bd:3d:39:
3c:01:ad:95:44:8a:80:e7:e2:97:33:7c:d2:69:7e:
b7:bd:66:4f:f6:6c:78:27:41:a1:73:3f:44:07:a9:
0a:55:9d:a3:b3:fe:3a:1e:08:1e:6a:4a:67:10:fd:
f7:0c:dc:5f:0d:14:9d:8b:6a:34:d8:6e:d2:6b:64:
cf:39:64:d4:57:cd:9f:ba:f5:42:ec:92:e7:f0:20:
8d:86:35:e1:94:fb:2e:19:d8:ce:29:06:fa:0e:37:
cc:ac:a7:fe:93:13:e0:51:f8:52:9a:9f:ae:d7:33:
d1:a5:8d:e1:c2:72:b6:d8:6a:ed:ba:01:08:28:1c:
fe:02:6d:4d:8a:81:be:8e:d0:b1:ae:79:9c:c2:cf:
de:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:30:1A:78:FC:94:22:B4:23:0E:2F:8C:57:7A:92:B5:D1:AC:8B:1E
X509v3 Authority Key Identifier:
keyid:F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4f:25:62:f8:40:89:9d:ca:43:0b:cc:62:df:62:43:7c:71:
f0:f0:08:77:5d:60:73:67:4a:9c:9a:fb:06:33:2f:6e:4c:e7:
d9:2d:3f:aa:14:90:15:34:45:04:11:3e:da:df:be:01:94:82:
cc:5f:54:b0:44:65:7a:9e:71:6d:23:5f:8f:dd:33:e2:37:cd:
6b:b7:71:04:c9:93:37:0d:84:24:98:04:dc:50:47:25:3e:1e:
e4:9f:16:cc:8d:d2:45:e2:7f:1b:e6:a2:40:cb:6c:6b:2c:3f:
4f:74:6f:39:11:77:e6:47:2a:87:8d:f3:86:30:9c:64:b2:e5:
59:b9:e9:7a:f5:6c:9c:8a:c7:3a:c1:83:76:1f:6e:42:cc:d8:
e0:11:8d:b2:eb:a8:d5:4c:bd:08:34:45:fc:72:50:4b:9e:a7:
a5:3b:12:f2:87:79:dc:ea:59:02:d3:44:89:d1:07:b3:e9:1c:
3c:91:b3:25:47:f1:1d:80:a8:35:dd:9d:d5:13:75:f2:da:57:
cf:a5:f4:0a:6f:44:e4:c7:3e:f9:ff:c3:b1:cc:fa:02:dd:ff:
17:cc:be:e1:79:78:05:f7:5f:3c:92:91:24:3c:ce:8a:fd:ff:
34:0b:f9:d6:93:80:be:f5:ab:cf:fd:ef:5c:a8:07:b3:ca:e9:
cb:13:2f:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICLbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDMxMDIxMTAvBgNVBAUTKEY5MUEzQTk4MzE0Mzg0QzQwM0E4RkYyMkE0NTNCQ0Ex
QTNCQTZDRDgwHhcNMjUwMzI4MTUzNTUzWhcNMjUwNDA0MTUzNTUzWjAYMRYwFAYD
VQQDEw02N2U2YzFkYS1hMzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtEk4NcJp3BRq4d/RsDUuGp6BtQZnhaAOKoQ+Rr0ppmVqtnLAgMWcB4zW1f+s
S2VhmEPcyUKHJa9uaK5nfLSQ7Q5uRjmFUz8EEG378HW8OxGDVVLS8fVV1UZwxvX0
bOxbjGeAi/oC/6Z6TImPlE5W6GhXE4K9PTk8Aa2VRIqA5+KXM3zSaX63vWZP9mx4
J0Ghcz9EB6kKVZ2js/46HggeakpnEP33DNxfDRSdi2o02G7Sa2TPOWTUV82fuvVC
7JLn8CCNhjXhlPsuGdjOKQb6DjfMrKf+kxPgUfhSmp+u1zPRpY3hwnK22GrtugEI
KBz+Am1NioG+jtCxrnmcws/eawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAwGnj8
lCK0Iw4vjFd6krXRrIseMB8GA1UdIwQYMBaAFPkaOpgxQ4TEA6j/IqRTvKGjumzY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzEwMi9ENEFFRTJDODc2
OEUxMUUzOTlBOTU3NDU1OTExRUEzMi8tUm82bURGRGhNUURxUDhpcEZPOG9hTzZi
TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1SbzZtREZEaE1RRHFQOGlwRk84b2FPNmJOZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MzEwMi9ENEFFRTJDODc2OEUxMUUzOTlBOTU3NDU1OTExRUEzMi8tUm82bURGRGhN
UURxUDhpcEZPOG9hTzZiTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCiTyVi+ECJncpDC8xi32JDfHHw8Ah3XWBzZ0qcmvsGMy9uTOfZLT+q
FJAVNEUEET7a374BlILMX1SwRGV6nnFtI1+P3TPiN81rt3EEyZM3DYQkmATcUEcl
Ph7knxbMjdJF4n8b5qJAy2xrLD9PdG85EXfmRyqHjfOGMJxksuVZuel69Wycisc6
wYN2H25CzNjgEY2y66jVTL0INEX8clBLnqelOxLyh3nc6lkC00SJ0Qez6Rw8kbMl
R/EdgKg13Z3VE3Xy2lfPpfQKb0Tkxz75/8OxzPoC3f8XzL7heXgF9188kpEkPM6K
/f80C/nWk4C+9avP/e9cqAezyunLEy8Q
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:31:50 2025 by rpki-client