Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft
File: ccY9WQk_BNBLObseorRpLN_Rb-E.mft (raw, json)
Hash identifier: /vZm0CPSaIXh3C0xxrJWGGqgRB6nAN0tQqbLc1+s4HQ=
Subject key identifier: A0:9A:8F:86:BD:A4:3D:31:32:D5:73:17:71:01:6D:AB:CE:B9:34:A4
Authority key identifier: 71:C6:3D:59:09:3F:04:D0:4B:39:BB:1E:A2:B4:69:2C:DF:D1:6F:E1
Certificate issuer: /CN=A91D6721/serialNumber=71C63D59093F04D04B39BB1EA2B4692CDFD16FE1
Certificate serial: 08DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft
Manifest number: 08D6
Signing time: Fri 28 Mar 2025 20:41:15 +0000
Manifest this update: Fri 28 Mar 2025 20:41:14 +0000
Manifest next update: Fri 04 Apr 2025 20:41:14 +0000
Files and hashes: 1: ccY9WQk_BNBLObseorRpLN_Rb-E.crl (hash: yDoYJXcSThyae5TVAcAbNE8aMWdFq0htGsmzfuI5Jls=)
2: CD77D766287911ED93621A30C4F9AE02.roa (hash: 9wjECpQxMHiWIScEWQz9Aw6dt/TmNOFZhpVGY5NdNQY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2269 (0x8dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6721
Validity
Not Before: Mar 28 20:41:14 2025 GMT
Not After : Apr 4 20:41:14 2025 GMT
Subject: CN=67e7096b-24be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:a0:1b:87:8d:c4:aa:3b:0d:bd:b8:38:de:
16:ac:64:68:24:36:fd:1b:69:4a:ad:df:7f:3f:ab:
b0:bb:27:6f:41:3f:29:38:3c:78:3c:cc:1e:21:12:
61:c1:c6:bd:b4:f2:d4:63:e8:a3:c4:df:f0:05:d6:
4b:78:cd:2b:fe:c2:2b:bc:6e:07:22:7e:ad:36:7e:
54:41:64:56:6c:da:9a:dc:1a:5c:cc:d5:cd:fb:8b:
7d:a0:74:99:4f:04:d4:c9:e0:34:33:7a:8e:f3:6c:
52:b5:90:56:b5:1d:14:bd:44:99:ed:5e:e1:ac:26:
b0:71:85:38:1b:ae:2d:06:8c:a7:ae:8f:f0:02:cf:
df:77:c6:fb:d7:9e:8d:da:1b:6e:3c:19:06:d5:3e:
f2:2a:a2:54:95:cc:49:7e:ff:38:0d:39:99:ee:76:
b7:d2:e8:fc:60:16:a1:ad:cd:ee:eb:d9:09:27:48:
61:d0:f3:2b:72:60:22:2c:b1:bb:59:aa:d5:e4:03:
ff:73:49:41:8a:bf:8e:ec:c7:d8:dd:68:61:db:d7:
de:06:e7:fa:af:85:59:e2:05:61:c9:32:b0:33:f3:
03:77:be:19:4f:8e:80:ff:55:b0:a5:13:3e:3a:07:
6e:49:de:73:f5:8d:52:2a:d9:67:1c:75:5c:54:e1:
df:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9A:8F:86:BD:A4:3D:31:32:D5:73:17:71:01:6D:AB:CE:B9:34:A4
X509v3 Authority Key Identifier:
keyid:71:C6:3D:59:09:3F:04:D0:4B:39:BB:1E:A2:B4:69:2C:DF:D1:6F:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:48:1f:11:41:31:8b:e7:5a:d7:b3:fc:b6:e0:6e:a2:91:6c:
71:24:18:d0:95:34:1e:c6:58:1b:d0:21:3d:17:7d:ea:b5:a1:
55:fe:1b:41:1b:67:2a:44:02:18:88:b5:ef:7d:e6:54:c8:90:
2c:4d:47:66:99:78:49:ed:07:ee:1c:61:75:4a:f4:96:b2:89:
01:15:57:66:2d:2e:dc:a4:3e:71:47:66:bb:13:ff:2f:52:2e:
7d:6c:14:0b:72:53:6a:d3:9d:b2:22:93:81:f8:e1:84:8f:05:
3f:40:06:87:28:cd:57:5a:95:29:90:d6:2f:bb:46:70:3b:89:
d1:c5:b1:12:40:05:a0:3e:1c:c0:d4:96:d7:71:90:1e:e8:43:
71:bb:fe:1a:3b:1b:ca:15:44:f5:1e:33:95:29:5f:12:4c:42:
8f:7c:5b:00:59:6c:81:c0:b2:04:af:92:b9:5d:05:db:67:6e:
c7:51:c3:97:0f:fe:57:3c:6d:f1:a7:07:ec:09:25:3a:bc:59:
27:71:f5:33:ba:a9:13:9e:f1:c1:6e:7a:26:77:a9:c3:20:59:
62:ca:73:e2:0e:2c:e2:cf:18:7c:1c:73:89:40:3e:d0:57:fa:
c2:09:10:fb:75:93:42:b3:59:7e:48:84:e7:5c:6f:56:13:f9:
86:0d:ec:42
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDY3MjExMTAvBgNVBAUTKDcxQzYzRDU5MDkzRjA0RDA0QjM5QkIxRUEyQjQ2OTJD
REZEMTZGRTEwHhcNMjUwMzI4MjA0MTE0WhcNMjUwNDA0MjA0MTE0WjAYMRYwFAYD
VQQDEw02N2U3MDk2Yi0yNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxeGgG4eNxKo7Db24ON4WrGRoJDb9G2lKrd9/P6uwuydvQT8pODx4PMweIRJh
wca9tPLUY+ijxN/wBdZLeM0r/sIrvG4HIn6tNn5UQWRWbNqa3BpczNXN+4t9oHSZ
TwTUyeA0M3qO82xStZBWtR0UvUSZ7V7hrCawcYU4G64tBoynro/wAs/fd8b7156N
2htuPBkG1T7yKqJUlcxJfv84DTmZ7na30uj8YBahrc3u69kJJ0hh0PMrcmAiLLG7
WarV5AP/c0lBir+O7MfY3Whh29feBuf6r4VZ4gVhyTKwM/MDd74ZT46A/1WwpRM+
OgduSd5z9Y1SKtlnHHVcVOHfkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCaj4a9
pD0xMtVzF3EBbavOuTSkMB8GA1UdIwQYMBaAFHHGPVkJPwTQSzm7HqK0aSzf0W/h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjcyMS9BM0MwNkFENkE5
QkYxMUVBQTMwNEEwMjNDNEY5QUUwMi9jY1k5V1FrX0JOQkxPYnNlb3JScExOX1Ji
LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NjWTlXUWtfQk5CTE9ic2VvclJwTE5fUmItRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NjcyMS9BM0MwNkFENkE5QkYxMUVBQTMwNEEwMjNDNEY5QUUwMi9jY1k5V1FrX0JO
QkxPYnNlb3JScExOX1JiLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBqSB8RQTGL51rXs/y24G6ikWxxJBjQlTQexlgb0CE9F33qtaFV/htB
G2cqRAIYiLXvfeZUyJAsTUdmmXhJ7QfuHGF1SvSWsokBFVdmLS7cpD5xR2a7E/8v
Ui59bBQLclNq052yIpOB+OGEjwU/QAaHKM1XWpUpkNYvu0ZwO4nRxbESQAWgPhzA
1JbXcZAe6ENxu/4aOxvKFUT1HjOVKV8STEKPfFsAWWyBwLIEr5K5XQXbZ27HUcOX
D/5XPG3xpwfsCSU6vFkncfUzuqkTnvHBbnomd6nDIFliynPiDizizxh8HHOJQD7Q
V/rCCRD7dZNCs1l+SITnXG9WE/mGDexC
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:47 2025 by rpki-client