Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft
File: GLHIjO5o9jwhzWoMsbgx1db11s8.mft (raw, json)
Hash identifier: oG3yXHoYjorCp3IiwFielqfEGgiPIoGQu8MBe/9i7Y8=
Subject key identifier: B4:1C:0C:F9:91:62:D3:C5:5C:4F:31:7D:A0:BE:9C:56:3B:AF:25:F2
Authority key identifier: 18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF
Certificate issuer: /CN=A91DAFA2/serialNumber=18B1C88CEE68F63C21CD6A0CB1B831D5D6F5D6CF
Certificate serial: 1BE5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft
Manifest number: 1BDA
Signing time: Fri 28 Mar 2025 16:19:30 +0000
Manifest this update: Fri 28 Mar 2025 16:19:29 +0000
Manifest next update: Fri 04 Apr 2025 16:19:29 +0000
Files and hashes: 1: GLHIjO5o9jwhzWoMsbgx1db11s8.crl (hash: NPkSKvN1Dv7YLC8GDB5ILkT9bseqLdrX5G1PTGtkZpg=)
2: 02FB1DCAEF6A11E69A4AD551C4F9AE02.roa (hash: 87Eagj9nbEvxROvw6iIl3FH0KdIVxp+aZzvllNFI0J8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7141 (0x1be5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DAFA2
Validity
Not Before: Mar 28 16:19:29 2025 GMT
Not After : Apr 4 16:19:29 2025 GMT
Subject: CN=67e6cc11-2d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:4e:5c:10:94:38:40:61:78:98:e7:ed:9d:
f9:e2:9b:cc:4e:d2:48:eb:92:13:c8:43:4b:5a:76:
79:97:d8:94:c4:e6:0f:78:28:0a:46:ab:4e:87:1d:
f8:98:34:6d:85:b1:69:9c:42:08:d8:67:85:9d:4d:
07:5a:14:4b:b4:eb:f9:07:14:3d:1f:6d:da:05:40:
b5:dc:93:de:68:d8:e7:e0:21:ff:6b:ed:fe:b3:92:
4b:45:84:ee:a2:1d:b2:0c:fb:17:7b:13:7a:bf:6f:
6d:0e:cc:d2:9c:d3:d2:a2:9e:d3:8a:9f:d8:97:79:
f0:6a:6b:fe:e5:ca:c6:41:fa:92:2c:39:a0:ea:e8:
15:db:84:79:7f:54:3b:77:97:99:4b:f6:4d:e4:a3:
6b:4f:be:21:c7:21:ee:3a:d9:fe:a4:0f:c6:82:c4:
ea:4f:3b:63:d1:7a:e2:7e:37:c6:a8:12:72:f3:8b:
a6:55:8b:9e:5e:ab:ca:2f:eb:26:07:8e:ac:e8:4a:
10:a0:75:6c:c4:0b:c2:8f:8d:fe:8f:62:71:23:18:
48:2c:75:7b:62:b6:72:e4:0f:f4:bb:17:79:a0:80:
00:3c:fb:e8:af:e9:6a:bc:dd:48:e0:16:f3:c0:01:
74:ba:2d:86:59:90:c3:a8:55:8a:02:29:fd:28:7b:
d5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1C:0C:F9:91:62:D3:C5:5C:4F:31:7D:A0:BE:9C:56:3B:AF:25:F2
X509v3 Authority Key Identifier:
keyid:18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:c6:5b:92:c9:44:7b:f3:18:58:db:b1:11:b0:51:fa:a3:e0:
98:5d:28:73:da:33:d4:75:76:d0:a6:34:74:27:83:f4:56:58:
e5:76:10:68:08:65:9d:de:08:79:95:86:72:19:11:f6:70:21:
3e:2b:f8:00:e7:6b:76:22:98:19:ac:21:bb:a8:55:0b:39:fc:
76:ef:26:48:f6:e0:6b:ce:68:98:f4:7a:1e:e0:7c:e5:57:3c:
06:ec:9f:7d:60:7b:9b:21:c7:0b:77:14:65:5b:5b:46:b2:ca:
f6:29:92:e8:bd:c2:6d:53:f1:2d:6f:38:3b:fd:b0:21:76:d2:
6c:14:82:45:96:29:f4:f1:18:8c:c6:53:29:d6:5d:e7:27:24:
4b:4b:f9:88:22:81:77:59:ee:d5:ec:8b:96:19:7b:e5:c4:8f:
35:2a:a1:8b:c3:bb:01:57:fb:41:3e:90:90:39:b9:65:0e:06:
a6:6c:ab:93:cf:e1:f3:8d:a4:0f:f6:93:26:9b:35:8c:fc:f4:
f0:0c:46:d6:07:0a:0c:7b:6e:dd:26:7a:e3:48:f1:d1:1d:57:
01:fc:d9:f8:3d:99:31:0b:dd:c5:f0:b7:bf:fe:57:4c:af:5b:
52:74:a7:c8:9d:79:a1:dc:4b:ab:b0:cd:46:0d:85:1b:69:38:
bc:fc:86:35
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICG+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REFGQTIxMTAvBgNVBAUTKDE4QjFDODhDRUU2OEY2M0MyMUNENkEwQ0IxQjgzMUQ1
RDZGNUQ2Q0YwHhcNMjUwMzI4MTYxOTI5WhcNMjUwNDA0MTYxOTI5WjAYMRYwFAYD
VQQDEw02N2U2Y2MxMS0yZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw/9OXBCUOEBheJjn7Z354pvMTtJI65ITyENLWnZ5l9iUxOYPeCgKRqtOhx34
mDRthbFpnEII2GeFnU0HWhRLtOv5BxQ9H23aBUC13JPeaNjn4CH/a+3+s5JLRYTu
oh2yDPsXexN6v29tDszSnNPSop7Tip/Yl3nwamv+5crGQfqSLDmg6ugV24R5f1Q7
d5eZS/ZN5KNrT74hxyHuOtn+pA/GgsTqTztj0XrifjfGqBJy84umVYueXqvKL+sm
B46s6EoQoHVsxAvCj43+j2JxIxhILHV7YrZy5A/0uxd5oIAAPPvor+lqvN1I4Bbz
wAF0ui2GWZDDqFWKAin9KHvVUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQcDPmR
YtPFXE8xfaC+nFY7ryXyMB8GA1UdIwQYMBaAFBixyIzuaPY8Ic1qDLG4MdXW9dbP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUZBMi9CN0I2Nzc2MEVG
NjkxMUU2QkQ3M0M2NTFDNEY5QUUwMi9HTEhJak81bzlqd2h6V29Nc2JneDFkYjEx
czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dMSElqTzVvOWp3aHpXb01zYmd4MWRiMTFzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QUZBMi9CN0I2Nzc2MEVGNjkxMUU2QkQ3M0M2NTFDNEY5QUUwMi9HTEhJak81bzlq
d2h6V29Nc2JneDFkYjExczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4xluSyUR78xhY27ERsFH6o+CYXShz2jPUdXbQpjR0J4P0VljldhBo
CGWd3gh5lYZyGRH2cCE+K/gA52t2IpgZrCG7qFULOfx27yZI9uBrzmiY9Hoe4Hzl
VzwG7J99YHubIccLdxRlW1tGssr2KZLovcJtU/Etbzg7/bAhdtJsFIJFlin08RiM
xlMp1l3nJyRLS/mIIoF3We7V7IuWGXvlxI81KqGLw7sBV/tBPpCQObllDgambKuT
z+HzjaQP9pMmmzWM/PTwDEbWBwoMe27dJnrjSPHRHVcB/Nn4PZkxC93F8Le//ldM
r1tSdKfInXmh3EursM1GDYUbaTi8/IY1
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:09 2025 by rpki-client