Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
File: GAee5DmNZxvWR_yoKieU5QowR70.mft (raw, json)
Hash identifier: PShu5sjeOQVVQKtdk955lMDmbszpgJUB0fAOUhGfpyM=
Subject key identifier: D2:22:5A:00:3B:33:B9:DF:FD:92:5A:B2:97:E2:53:E8:D7:E3:38:34
Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
Certificate issuer: /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Certificate serial: 0A18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
Manifest number: 0A0F
Signing time: Fri 28 Mar 2025 20:05:14 +0000
Manifest this update: Fri 28 Mar 2025 20:05:13 +0000
Manifest next update: Fri 04 Apr 2025 20:05:13 +0000
Files and hashes: 1: GAee5DmNZxvWR_yoKieU5QowR70.crl (hash: U9AQEz3KYnP0N69R+EkLXmCMp56I8dXrglO76hlG4F8=)
2: F23D65727CAF11ED87752A6BC4F9AE02.roa (hash: 4R+T9ichUclKYc2esjqc1J6rnOewSsSbS/PRV1Yw9jc=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2584 (0xa18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFBE1
Validity
Not Before: Mar 28 20:05:13 2025 GMT
Not After : Apr 4 20:05:13 2025 GMT
Subject: CN=67e700fa-7d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:09:b0:be:11:e0:fc:fc:54:44:b5:1e:75:df:
76:fe:50:b9:19:6e:34:4a:4d:d7:f0:ef:6f:6a:8d:
11:05:5a:85:9a:69:f6:a4:3e:a7:5f:22:74:72:1e:
c7:e9:51:c6:86:c7:38:7a:f0:39:04:c9:5d:e1:d7:
bd:6e:9c:d2:3b:20:2b:7b:c3:3f:61:eb:f6:fa:96:
1b:a2:d9:e0:04:4c:65:8a:19:33:5a:f8:d4:2f:1c:
b6:e8:34:0c:bb:03:20:00:6f:c5:b3:f8:d0:a6:8d:
3f:4c:93:65:1e:ae:b8:bb:63:fb:bf:18:a2:ca:d1:
c2:1e:46:10:1f:05:37:f4:f9:53:58:24:9f:61:4e:
0b:89:85:a4:bd:f7:9f:8d:1a:c4:33:53:50:d5:80:
62:d5:bd:e3:b5:e6:60:d9:25:f7:bd:92:66:11:98:
fe:9a:d5:29:c4:c9:1f:97:ca:dd:42:b5:ef:5d:48:
84:e3:fd:89:25:54:61:55:7e:4b:c5:ef:2c:3e:de:
31:29:c8:84:9d:1b:29:47:a5:13:18:2d:4f:a1:84:
00:dd:63:d8:07:3c:7a:a3:83:bb:a3:d3:82:de:5b:
3b:93:5d:60:48:74:c8:d2:a9:d0:c0:f3:34:89:fd:
93:dc:d1:12:f0:90:d5:56:2e:e6:e4:c4:05:18:ed:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:22:5A:00:3B:33:B9:DF:FD:92:5A:B2:97:E2:53:E8:D7:E3:38:34
X509v3 Authority Key Identifier:
keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:60:17:a1:cf:11:31:2b:87:87:2a:98:bc:72:00:54:94:80:
58:ea:e6:1d:08:d2:e0:5d:25:a3:cf:79:b8:e0:ee:2c:e2:1d:
45:2d:35:af:01:98:27:dd:8f:a3:65:fa:b1:b6:68:6a:74:0c:
a3:e4:db:7d:83:7e:c6:e2:84:e8:90:cd:e1:43:cb:ad:d8:28:
d6:05:9c:d6:35:4c:57:d7:13:c0:cd:23:3f:0b:dd:bd:ea:5c:
86:52:64:e1:9a:52:6c:4c:62:95:c8:f8:a8:70:ac:f7:ca:12:
0a:4d:b6:b7:36:ea:e9:7d:32:21:c9:75:92:a0:dc:29:43:28:
9f:ef:1b:e3:99:af:69:7d:a2:c9:20:31:f4:5e:d6:89:c2:0e:
58:98:b1:90:d7:40:cb:96:6a:3e:9a:56:22:d7:cd:6e:f4:4a:
e7:ce:9d:53:f6:62:de:c3:b4:6b:f5:c9:ed:3f:28:ea:ba:de:
72:da:5b:d1:2c:59:4d:b0:57:24:ac:e1:44:34:af:4c:c4:54:
fe:3f:03:82:e6:74:67:f0:1f:2e:f8:a5:53:9e:af:e4:c9:c2:
87:83:da:e3:cd:54:5c:c8:ed:6f:ca:17:ec:8f:26:8c:a8:a8:
3e:29:45:e0:a5:be:87:4f:4b:54:15:df:a6:cc:d4:4d:59:9e:
b7:7b:9e:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICChgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REZCRTExMTAvBgNVBAUTKDE4MDc5RUU0Mzk4RDY3MUJENjQ3RkNBODJBMjc5NEU1
MEEzMDQ3QkQwHhcNMjUwMzI4MjAwNTEzWhcNMjUwNDA0MjAwNTEzWjAYMRYwFAYD
VQQDEw02N2U3MDBmYS03ZDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2QmwvhHg/PxURLUedd92/lC5GW40Sk3X8O9vao0RBVqFmmn2pD6nXyJ0ch7H
6VHGhsc4evA5BMld4de9bpzSOyAre8M/Yev2+pYbotngBExlihkzWvjULxy26DQM
uwMgAG/Fs/jQpo0/TJNlHq64u2P7vxiiytHCHkYQHwU39PlTWCSfYU4LiYWkvfef
jRrEM1NQ1YBi1b3jteZg2SX3vZJmEZj+mtUpxMkfl8rdQrXvXUiE4/2JJVRhVX5L
xe8sPt4xKciEnRspR6UTGC1PoYQA3WPYBzx6o4O7o9OC3ls7k11gSHTI0qnQwPM0
if2T3NES8JDVVi7m5MQFGO3aTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIiWgA7
M7nf/ZJaspfiU+jX4zg0MB8GA1UdIwQYMBaAFBgHnuQ5jWcb1kf8qConlOUKMEe9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkJFMS9BN0U3MUVGNjZF
QTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4dldSX3lvS2llVTVRb3dS
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dBZWU1RG1OWnh2V1JfeW9LaWVVNVFvd1I3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RkJFMS9BN0U3MUVGNjZFQTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4
dldSX3lvS2llVTVRb3dSNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+YBehzxExK4eHKpi8cgBUlIBY6uYdCNLgXSWjz3m44O4s4h1FLTWv
AZgn3Y+jZfqxtmhqdAyj5Nt9g37G4oTokM3hQ8ut2CjWBZzWNUxX1xPAzSM/C929
6lyGUmThmlJsTGKVyPiocKz3yhIKTba3NurpfTIhyXWSoNwpQyif7xvjma9pfaLJ
IDH0XtaJwg5YmLGQ10DLlmo+mlYi181u9Ernzp1T9mLew7Rr9cntPyjqut5y2lvR
LFlNsFckrOFENK9MxFT+PwOC5nRn8B8u+KVTnq/kycKHg9rjzVRcyO1vyhfsjyaM
qKg+KUXgpb6HT0tUFd+mzNRNWZ63e56Y
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:48 2025 by rpki-client