Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
File: DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft (raw, json)
Hash identifier: jxfpGNcKd+bvZxfC08HISRumxBJdjUI5hW0EIb75Fg0=
Subject key identifier: B4:64:BE:D5:9F:61:D7:C2:65:93:42:C2:94:BE:FF:36:0E:7C:F6:93
Authority key identifier: 0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D
Certificate issuer: /CN=A91E8161/serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D
Certificate serial: 1699
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
Manifest number: 168E
Signing time: Fri 28 Mar 2025 16:47:39 +0000
Manifest this update: Fri 28 Mar 2025 16:47:39 +0000
Manifest next update: Fri 04 Apr 2025 16:47:39 +0000
Files and hashes: 1: DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl (hash: Yg/DzXfkUowH7WhAFfFDnezUJpcnRS8iYBwvKRcsKGU=)
2: C109FFF4FC0511E7BAFB3E48C4F9AE02.roa (hash: hwBxWiPVp4f2tvl+TO1kwaPXm0WY1KDdijTAJsRcx7Y=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5785 (0x1699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8161
Validity
Not Before: Mar 28 16:47:39 2025 GMT
Not After : Apr 4 16:47:39 2025 GMT
Subject: CN=67e6d2ab-414c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:6b:a5:6f:3e:dd:26:02:b7:9e:c3:74:4d:
0f:38:60:2a:13:68:db:6f:09:5c:3c:b4:59:37:e0:
36:c7:56:81:4c:6d:c7:e4:ba:2f:2f:c5:1f:ca:5c:
45:9e:96:d6:46:a4:be:7e:6e:71:be:3a:f1:f3:72:
f9:da:43:f5:88:76:f4:93:b8:1f:85:54:09:ba:f2:
c3:d0:ed:aa:c6:b9:27:1e:20:4a:61:d8:a3:a9:75:
04:19:b1:4f:d6:1e:ff:25:59:13:a9:26:c1:0b:d1:
c1:38:72:c6:9e:dc:2e:34:e5:45:09:fa:36:e1:4c:
02:3e:eb:4c:af:21:86:42:df:0d:16:64:23:e6:62:
fe:b0:f0:49:b9:53:b2:8b:1d:83:d6:98:ca:c2:bb:
4e:f8:62:eb:7f:e7:b7:a7:c5:36:a1:62:87:83:30:
e5:ae:bd:f6:56:49:7e:86:b1:58:4c:84:9e:eb:6d:
be:2a:96:d5:9d:fe:d7:04:d7:c2:0f:ea:e8:18:84:
e0:98:9f:97:56:62:15:90:14:48:72:2b:f0:44:98:
bb:00:f3:51:4b:73:4b:88:50:0a:ca:91:28:ef:f7:
fe:24:7d:b2:ad:b7:87:50:c8:ae:38:b0:ba:46:36:
ef:a0:09:b5:9d:7e:94:9e:06:cc:50:15:07:c8:08:
1e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:64:BE:D5:9F:61:D7:C2:65:93:42:C2:94:BE:FF:36:0E:7C:F6:93
X509v3 Authority Key Identifier:
keyid:0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:80:5b:3e:db:a0:83:36:56:9a:7c:25:8a:1d:3a:94:00:fe:
83:cc:4e:b0:60:6f:ac:33:34:b2:77:a4:b2:79:b7:aa:e8:60:
d9:91:56:a0:e7:04:3c:ff:cf:ec:f5:05:d9:10:f5:48:04:8e:
e8:ca:dc:21:1d:cb:ca:54:11:ce:29:26:00:ab:60:e7:b3:88:
28:e1:07:b0:e2:31:7a:d6:e5:1a:a0:90:c5:1a:25:13:7c:74:
1b:dc:20:d1:81:51:f0:42:4f:7c:69:a3:2c:50:a1:a6:fa:15:
a8:bf:84:41:97:5e:d2:86:ee:fb:38:1c:fa:37:ee:e3:b8:53:
69:0e:3e:60:19:4b:62:f5:72:34:63:3e:b0:ed:4a:06:93:06:
9b:e1:3e:4e:b6:0a:72:d1:12:58:60:03:53:06:e1:b2:d7:6e:
b1:61:87:bd:3d:08:b9:cb:4a:54:5b:27:13:44:72:36:d5:7e:
1a:a7:6e:5e:98:07:83:70:bc:36:0b:ce:c9:3b:fa:1d:1f:86:
a0:be:75:73:82:d6:29:45:84:bf:ee:b8:fa:3e:3e:e4:43:09:
fb:c3:54:ad:98:4f:04:9e:cc:40:76:64:5f:5a:e3:c4:64:a4:
df:4f:24:7a:de:0c:56:56:56:90:7d:58:06:72:4b:fa:13:09:
a3:ee:87:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgxNjExMTAvBgNVBAUTKDBGMEJDRUUxNUFEQjZENTdEMDJDRDA0QjQ1MjIzQUI4
MDY2QTU0NUQwHhcNMjUwMzI4MTY0NzM5WhcNMjUwNDA0MTY0NzM5WjAYMRYwFAYD
VQQDEw02N2U2ZDJhYi00MTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwedrpW8+3SYCt57DdE0POGAqE2jbbwlcPLRZN+A2x1aBTG3H5LovL8UfylxF
npbWRqS+fm5xvjrx83L52kP1iHb0k7gfhVQJuvLD0O2qxrknHiBKYdijqXUEGbFP
1h7/JVkTqSbBC9HBOHLGntwuNOVFCfo24UwCPutMryGGQt8NFmQj5mL+sPBJuVOy
ix2D1pjKwrtO+GLrf+e3p8U2oWKHgzDlrr32Vkl+hrFYTISe622+KpbVnf7XBNfC
D+roGITgmJ+XVmIVkBRIcivwRJi7APNRS3NLiFAKypEo7/f+JH2yrbeHUMiuOLC6
RjbvoAm1nX6UngbMUBUHyAge1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRkvtWf
YdfCZZNCwpS+/zYOfPaTMB8GA1UdIwQYMBaAFA8LzuFa221X0CzQS0UiOrgGalRd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODE2MS82NzA2MTJCMEZB
NjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJWZlFMTkJMUlNJNnVBWnFW
RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0R3dk80VnJiYlZmUUxOQkxSU0k2dUFacVZGMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODE2MS82NzA2MTJCMEZBNjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJW
ZlFMTkJMUlNJNnVBWnFWRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAwgFs+26CDNlaafCWKHTqUAP6DzE6wYG+sMzSyd6Syebeq6GDZkVag
5wQ8/8/s9QXZEPVIBI7oytwhHcvKVBHOKSYAq2Dns4go4Qew4jF61uUaoJDFGiUT
fHQb3CDRgVHwQk98aaMsUKGm+hWov4RBl17Shu77OBz6N+7juFNpDj5gGUti9XI0
Yz6w7UoGkwab4T5Otgpy0RJYYANTBuGy126xYYe9PQi5y0pUWycTRHI21X4ap25e
mAeDcLw2C87JO/odH4agvnVzgtYpRYS/7rj6Pj7kQwn7w1StmE8EnsxAdmRfWuPE
ZKTfTyR63gxWVlaQfVgGckv6Ewmj7odV
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:52 2025 by rpki-client