Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
File: acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json)
Hash identifier: 1WOEoQZ1eiRLaY1YpkiqjL9PYwxAkpBwhFKWYZNY9O8=
Subject key identifier: 28:D8:A5:F8:BE:E3:B7:4F:47:5F:52:CB:76:07:C2:F5:B9:A2:3A:80
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Certificate issuer: /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial: 0B36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
Manifest number: 0B2A
Signing time: Fri 28 Mar 2025 19:23:01 +0000
Manifest this update: Fri 28 Mar 2025 19:23:01 +0000
Manifest next update: Fri 04 Apr 2025 19:23:01 +0000
Files and hashes: 1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: aYtjaf9UJXpqf+4oZHp56MHLeUD3+E23yvv4b6Slv4o=)
2: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: It+EzOgB+4GwVpz41BOeTUKf/RikBUyvJSCbvGF22zE=)
3: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: m2mZEmy+jYi2Exf5MsZvNb+d8UP/lXqWFf7D/THaytE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2870 (0xb36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4F66
Validity
Not Before: Mar 28 19:23:01 2025 GMT
Not After : Apr 4 19:23:01 2025 GMT
Subject: CN=67e6f715-4859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:31:d7:20:de:0c:56:bd:df:d5:80:4f:da:da:
db:76:e6:96:dc:cc:0e:d5:34:28:b6:ed:00:27:c1:
a0:d9:98:5b:92:bd:b2:7e:1f:72:5c:31:5e:2c:a1:
7c:e9:6a:c0:b9:df:08:f2:3e:dd:77:30:9a:fb:9c:
d2:fb:73:bb:62:50:f2:14:ac:b9:cd:18:0b:ad:cf:
78:10:ee:61:bc:11:16:6b:c1:ab:ed:6c:d3:fc:a1:
d5:22:ea:3b:33:08:f2:f0:09:f4:aa:69:e9:ba:43:
44:fe:d4:b6:1b:44:9a:ba:bd:1e:b9:17:33:fe:96:
7a:cd:14:3b:d2:65:3c:44:11:d7:84:41:06:9d:0f:
31:1b:2a:2e:4e:a4:20:54:b6:c7:19:d4:78:e6:14:
77:15:a2:66:56:9e:4a:80:8e:db:5b:46:db:2b:f9:
b9:e9:cf:6a:5b:e5:48:46:fb:c6:d2:09:95:9a:9f:
75:97:11:f1:b1:3d:c9:63:3c:50:1d:bf:1e:e9:d8:
a2:63:be:f9:40:90:b4:63:46:c5:39:b2:4a:00:69:
6c:6d:f2:e1:58:fb:8d:d6:20:30:74:f5:1e:0f:37:
29:f8:7b:f7:4d:52:4c:88:f2:d1:25:56:1a:a6:7c:
00:83:e5:35:8e:50:b8:d8:1f:d9:8f:e7:38:cf:0b:
05:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D8:A5:F8:BE:E3:B7:4F:47:5F:52:CB:76:07:C2:F5:B9:A2:3A:80
X509v3 Authority Key Identifier:
keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:22:5c:f9:7c:b8:e1:fc:18:c0:82:d4:5d:67:2c:db:c6:43:
1f:67:cc:09:cd:01:62:7a:0b:01:83:67:33:27:2f:88:c4:f0:
eb:8f:47:77:b6:76:4b:56:96:a0:77:9e:fc:86:99:81:aa:88:
cc:09:fb:4c:21:21:6d:34:76:4d:a6:9a:f7:cb:7d:bc:6c:3a:
b2:7c:78:26:46:3b:c8:3a:4f:b9:09:fa:02:09:25:fe:c7:b9:
8c:c7:00:1d:ee:b7:58:0d:d5:a4:bc:de:27:c4:78:34:99:d3:
f1:6d:ab:ca:fb:0d:5e:64:04:b0:1e:82:22:c6:d1:10:76:e5:
f3:0e:d0:b3:9a:c8:57:f9:db:29:2b:4f:11:3e:33:c5:5f:5e:
12:24:2c:ac:a6:12:41:b2:87:15:00:46:d6:11:87:f0:a7:75:
56:c9:22:0b:46:14:2a:62:64:13:d6:cb:ac:1a:e3:cc:47:68:
fb:33:9a:81:d3:b0:73:bf:e1:67:71:2e:d8:1b:9d:24:dc:ef:
83:d9:f5:07:18:e5:78:9d:2f:ed:b3:e9:35:54:62:62:d6:30:
ab:f5:b9:90:7a:c8:dc:79:7e:5b:0b:9d:ae:88:e3:7d:7b:58:
e3:dd:c2:ba:a7:50:2b:47:cd:4a:84:50:26:d1:19:80:1d:f6:
0c:48:62:a2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRGNjYxMTAvBgNVBAUTKDY5QzgxOThCREEzRkQwOTA1M0Y0MjU1M0Q3M0VFQTE1
MTIxRDI0MUMwHhcNMjUwMzI4MTkyMzAxWhcNMjUwNDA0MTkyMzAxWjAYMRYwFAYD
VQQDEw02N2U2ZjcxNS00ODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3THXIN4MVr3f1YBP2trbduaW3MwO1TQotu0AJ8Gg2Zhbkr2yfh9yXDFeLKF8
6WrAud8I8j7ddzCa+5zS+3O7YlDyFKy5zRgLrc94EO5hvBEWa8Gr7WzT/KHVIuo7
Mwjy8An0qmnpukNE/tS2G0Saur0euRcz/pZ6zRQ70mU8RBHXhEEGnQ8xGyouTqQg
VLbHGdR45hR3FaJmVp5KgI7bW0bbK/m56c9qW+VIRvvG0gmVmp91lxHxsT3JYzxQ
Hb8e6diiY775QJC0Y0bFObJKAGlsbfLhWPuN1iAwdPUeDzcp+Hv3TVJMiPLRJVYa
pnwAg+U1jlC42B/Zj+c4zwsFsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjYpfi+
47dPR19Sy3YHwvW5ojqAMB8GA1UdIwQYMBaAFGnIGYvaP9CQU/QlU9c+6hUSHSQc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEY2Ni9FNUY2NThBQTM2
OEExMUVBQjU3NDkyNzJDNEY5QUUwMi9hY2daaTlvXzBKQlQ5Q1ZUMXo3cUZSSWRK
QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FjZ1ppOW9fMEpCVDlDVlQxejdxRlJJZEpCdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NEY2Ni9FNUY2NThBQTM2OEExMUVBQjU3NDkyNzJDNEY5QUUwMi9hY2daaTlvXzBK
QlQ5Q1ZUMXo3cUZSSWRKQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCiIlz5fLjh/BjAgtRdZyzbxkMfZ8wJzQFiegsBg2czJy+IxPDrj0d3
tnZLVpagd578hpmBqojMCftMISFtNHZNppr3y328bDqyfHgmRjvIOk+5CfoCCSX+
x7mMxwAd7rdYDdWkvN4nxHg0mdPxbavK+w1eZASwHoIixtEQduXzDtCzmshX+dsp
K08RPjPFX14SJCysphJBsocVAEbWEYfwp3VWySILRhQqYmQT1susGuPMR2j7M5qB
07Bzv+FncS7YG50k3O+D2fUHGOV4nS/ts+k1VGJi1jCr9bmQesjceX5bC52uiON9
e1jj3cK6p1ArR81KhFAm0RmAHfYMSGKi
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:30:00 2025 by rpki-client