Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft
File: KB6VPa5xcoChbkvFbkE1LoR2PLw.mft (raw, json)
Hash identifier: npBYPKh/tvLzqrz9VexcAkWqJgFahV8i27/KVcxvi0g=
Subject key identifier: 6B:79:F0:10:73:C4:A3:A3:54:EA:CD:AA:98:F2:74:20:29:86:2B:C5
Authority key identifier: 28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC
Certificate issuer: /CN=A91EEA4D/serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC
Certificate serial: 080B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft
Manifest number: 12CC
Signing time: Fri 28 Mar 2025 19:38:23 +0000
Manifest this update: Fri 28 Mar 2025 19:38:23 +0000
Manifest next update: Fri 04 Apr 2025 19:38:23 +0000
Files and hashes: 1: KB6VPa5xcoChbkvFbkE1LoR2PLw.crl (hash: 3wKSJSJ0/OsG/8jIQumTk7drk8BBtAwdruyIl+8sbos=)
2: 08ADD496B19E11EC86ADF246C4F9AE02.roa (hash: yGqCF5v+KObB7qjgr+mXcAd6zcIwQYt5WbjRgGaPcCk=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2059 (0x80b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEA4D
Validity
Not Before: Mar 28 19:38:23 2025 GMT
Not After : Apr 4 19:38:23 2025 GMT
Subject: CN=67e6faaf-b173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:93:df:25:99:c4:e9:fc:ca:49:74:18:3d:b0:
94:28:cf:a3:fb:41:28:15:a8:12:ba:04:5e:94:c6:
ec:55:49:98:f7:1e:ba:c6:39:db:e8:7e:b8:aa:de:
04:81:4d:2b:9e:d6:ba:24:a1:9f:dc:98:74:72:62:
7a:ea:83:11:3d:36:f0:28:87:80:10:91:c9:f2:a4:
bc:de:b5:23:0f:a2:2a:57:06:07:ed:73:d8:b9:3a:
b7:7b:14:0e:41:d4:b6:ed:a8:c5:e7:68:37:fd:bc:
97:5f:7d:0f:ff:95:40:d0:92:bc:3b:da:42:8a:6c:
a7:3e:f3:da:ba:22:bf:72:de:6a:8d:3e:58:3d:5d:
17:b6:72:bf:3a:45:38:aa:23:cd:b7:59:cb:92:4f:
9c:bd:d2:d5:f2:f6:20:85:62:2d:5f:21:b6:1c:1f:
e3:26:42:5d:a1:21:cf:83:19:b4:d4:ad:eb:68:a5:
37:39:ab:a0:a8:4e:39:c4:e9:ad:9d:a4:d9:f8:c6:
3b:22:8b:6f:5e:85:36:64:08:dc:8e:05:f0:eb:a4:
23:0d:e2:15:e0:d5:60:8e:b7:e9:31:2e:11:68:88:
7f:af:ad:5a:8a:06:a9:f7:cb:38:e2:e3:09:56:be:
15:e9:e0:cd:fa:7b:a4:36:e6:51:cf:18:d9:a2:82:
b2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:79:F0:10:73:C4:A3:A3:54:EA:CD:AA:98:F2:74:20:29:86:2B:C5
X509v3 Authority Key Identifier:
keyid:28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:03:81:bc:5d:87:44:0d:36:da:9e:ed:41:33:44:b5:b8:62:
9d:ec:ac:c4:b5:5d:35:21:bb:af:24:67:79:22:c6:48:c1:8c:
68:67:f9:4d:e3:1d:3b:43:91:73:0d:01:a2:6a:ca:51:03:29:
b8:1f:bf:08:ad:0f:d1:8a:ac:fe:5d:38:5c:d5:e8:14:ef:7b:
d3:8b:f6:6e:4a:53:a6:53:16:fe:74:68:ab:c5:0a:34:19:cc:
65:b2:39:62:37:90:14:8e:8c:48:e0:ec:48:4e:06:83:08:0d:
f6:57:29:94:31:cf:cb:0e:36:fd:c4:de:59:7e:24:71:d4:00:
86:0d:af:e3:f7:82:0e:82:a2:0f:ec:85:20:1d:3e:da:e7:46:
f5:f4:77:b0:5f:f3:de:8e:67:80:cc:61:97:2e:8c:84:a6:5f:
61:8b:67:d7:f9:ff:03:6c:5e:36:7a:ee:25:62:e5:99:f7:ee:
a4:cc:b3:87:61:ef:e3:37:11:a2:58:44:38:a4:83:84:cb:39:
a7:27:9f:d4:34:a1:73:cd:de:67:f0:53:7e:ad:eb:77:58:a2:
c7:00:f0:0b:fc:b8:94:af:62:c4:61:18:b8:97:d6:80:36:70:
40:77:64:c1:ec:84:76:e7:bd:95:d2:89:0e:55:1e:df:7b:b9:
bb:18:59:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVBNEQxMTAvBgNVBAUTKDI4MUU5NTNEQUU3MTcyODBBMTZFNEJDNTZFNDEzNTJF
ODQ3NjNDQkMwHhcNMjUwMzI4MTkzODIzWhcNMjUwNDA0MTkzODIzWjAYMRYwFAYD
VQQDEw02N2U2ZmFhZi1iMTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuJPfJZnE6fzKSXQYPbCUKM+j+0EoFagSugRelMbsVUmY9x66xjnb6H64qt4E
gU0rnta6JKGf3Jh0cmJ66oMRPTbwKIeAEJHJ8qS83rUjD6IqVwYH7XPYuTq3exQO
QdS27ajF52g3/byXX30P/5VA0JK8O9pCimynPvPauiK/ct5qjT5YPV0XtnK/OkU4
qiPNt1nLkk+cvdLV8vYghWItXyG2HB/jJkJdoSHPgxm01K3raKU3OaugqE45xOmt
naTZ+MY7IotvXoU2ZAjcjgXw66QjDeIV4NVgjrfpMS4RaIh/r61aigap98s44uMJ
Vr4V6eDN+nukNuZRzxjZooKy2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGt58BBz
xKOjVOrNqpjydCAphivFMB8GA1UdIwQYMBaAFCgelT2ucXKAoW5LxW5BNS6Edjy8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3
MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNvQ2hia3ZGYmtFMUxvUjJQ
THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tCNlZQYTV4Y29DaGJrdkZia0UxTG9SMlBMdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNv
Q2hia3ZGYmtFMUxvUjJQTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC3A4G8XYdEDTbanu1BM0S1uGKd7KzEtV01IbuvJGd5IsZIwYxoZ/lN
4x07Q5FzDQGiaspRAym4H78IrQ/Riqz+XThc1egU73vTi/ZuSlOmUxb+dGirxQo0
GcxlsjliN5AUjoxI4OxITgaDCA32VymUMc/LDjb9xN5ZfiRx1ACGDa/j94IOgqIP
7IUgHT7a50b19HewX/PejmeAzGGXLoyEpl9hi2fX+f8DbF42eu4lYuWZ9+6kzLOH
Ye/jNxGiWEQ4pIOEyzmnJ5/UNKFzzd5n8FN+ret3WKLHAPAL/LiUr2LEYRi4l9aA
NnBAd2TB7IR2572V0okOVR7fe7m7GFlL
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:46 2025 by rpki-client