Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
File: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft (raw, json)
Hash identifier: SK2dmUjzEGi0P8/n0ilFDkyUf+9B9M3X7jSsIquv1Y4=
Subject key identifier: A8:8F:F3:13:92:EC:9F:20:96:69:2C:E9:02:2F:54:81:1E:BC:70:0F
Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D
Certificate issuer: /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D
Certificate serial: 01A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
Manifest number: 0198
Signing time: Sat 29 Mar 2025 03:00:24 +0000
Manifest this update: Sat 29 Mar 2025 03:00:24 +0000
Manifest next update: Sat 05 Apr 2025 03:00:24 +0000
Files and hashes: 1: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl (hash: bmLTzx7ZkYSNpwpM0hxjFDp/XLwlQYx9BRxBXHYyYZ4=)
2: EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (hash: 60VgyL7DaGetkQSPDqdUeNAT7JTTWsCniqM1ifeH4YQ=)
3: F548379631A011EE9F9D0D4DC4F9AE02.roa (hash: agT8B/KOnCHYQpfkAexNJsFp5T4PhjfgQqzkODGUs5w=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0FC6
Validity
Not Before: Mar 29 03:00:24 2025 GMT
Not After : Apr 5 03:00:24 2025 GMT
Subject: CN=67e76248-ea73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:72:9c:8e:d1:a1:45:f6:24:08:a7:6c:a1:
82:13:ac:57:df:63:e7:cb:f8:9a:13:1b:eb:0a:1d:
f0:ba:ef:c0:67:8f:ec:99:10:cb:c2:31:a7:21:95:
47:ec:77:ae:54:fe:01:ed:91:f8:dc:42:68:7f:ae:
fb:2f:50:9b:85:c6:b1:9a:49:cd:4f:cd:6a:06:7e:
8e:b7:8c:46:2a:9c:3d:2a:27:34:ad:12:a5:45:07:
35:94:70:cd:d1:c5:7e:89:29:f2:eb:de:e0:92:f8:
a1:9a:66:14:4e:67:dc:1d:fd:c3:6e:dd:42:37:ff:
81:92:5d:1b:d3:14:51:26:bc:d1:b3:04:07:88:4f:
e7:99:c0:64:e0:1e:8e:c2:31:7d:91:97:6b:1e:fc:
65:89:a1:c9:09:c7:2b:89:63:0f:8b:50:4a:48:92:
9e:ab:80:45:15:36:ad:19:f0:18:77:f0:16:df:ee:
d4:14:2d:67:64:3a:9c:94:66:ba:26:7d:c4:5c:b2:
ca:22:37:1f:a0:d6:ee:9b:0e:76:1a:58:50:51:2e:
8d:c4:fc:31:b4:1e:0f:f1:93:f9:1b:10:0d:ba:f8:
b9:be:67:de:20:a1:1e:3b:c4:df:a5:bc:0c:90:46:
63:8c:22:dc:7d:da:94:86:ee:e0:29:89:11:66:6c:
d4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8F:F3:13:92:EC:9F:20:96:69:2C:E9:02:2F:54:81:1E:BC:70:0F
X509v3 Authority Key Identifier:
keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:a1:2e:94:58:3f:63:20:b5:70:d0:62:d7:19:1a:2f:c9:01:
d1:33:b3:b5:19:da:11:35:5d:eb:8d:95:ca:46:3f:4a:ed:99:
57:d3:66:f7:44:78:57:e0:c2:29:02:68:f5:de:c7:09:c9:35:
3e:fe:0b:6d:5f:71:a7:f6:d7:a0:76:94:45:8d:2c:05:09:bb:
bd:fa:e2:09:54:7a:ec:84:a7:fe:c7:99:30:b6:db:da:9a:e7:
24:30:87:a0:19:97:be:66:2a:a1:70:90:2b:d7:13:67:c2:db:
e4:75:d2:8b:2b:92:7f:0c:5e:96:e2:9b:13:d7:10:28:e4:84:
82:70:7a:aa:b3:01:9e:11:62:f4:75:9e:3d:d5:cf:3b:c8:1c:
49:1f:53:38:14:4b:b2:a4:c7:40:cc:ee:17:07:06:2c:6d:f8:
72:dc:70:5b:42:51:ba:57:19:69:84:da:21:2c:cf:64:28:94:
0b:aa:5d:87:5f:ad:5e:84:be:7d:d1:2c:b7:2b:fc:c3:c6:63:
41:2b:11:6d:c6:54:ad:4a:e8:af:11:b4:18:b3:f7:58:51:0c:
c2:ed:a9:95:de:e1:50:1e:98:a4:55:ee:bb:61:8a:ff:bd:3f:
b3:ea:2d:50:1d:92:f7:fb:7b:8c:aa:38:97:64:ba:c9:88:8f:
20:a3:9a:80
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjBGQzYxMTAvBgNVBAUTKDY2RTZGNkY4RkRDRTNEOTU0QTc3RTVCMEEzRTI1MEND
MjYyRTVENUQwHhcNMjUwMzI5MDMwMDI0WhcNMjUwNDA1MDMwMDI0WjAYMRYwFAYD
VQQDEw02N2U3NjI0OC1lYTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1HVynI7RoUX2JAinbKGCE6xX32Pny/iaExvrCh3wuu/AZ4/smRDLwjGnIZVH
7HeuVP4B7ZH43EJof677L1CbhcaxmknNT81qBn6Ot4xGKpw9Kic0rRKlRQc1lHDN
0cV+iSny697gkvihmmYUTmfcHf3Dbt1CN/+Bkl0b0xRRJrzRswQHiE/nmcBk4B6O
wjF9kZdrHvxliaHJCccriWMPi1BKSJKeq4BFFTatGfAYd/AW3+7UFC1nZDqclGa6
Jn3EXLLKIjcfoNbumw52GlhQUS6NxPwxtB4P8ZP5GxANuvi5vmfeIKEeO8TfpbwM
kEZjjCLcfdqUhu7gKYkRZmzUfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiP8xOS
7J8glmks6QIvVIEevHAPMB8GA1UdIwQYMBaAFGbm9vj9zj2VSnflsKPiUMwmLl1d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZDNi8xRDlGM0UwOEE3
NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1BaVktkLVd3by1KUXpDWXVY
VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p1YjItUDNPUFpWS2QtV3dvLUpRekNZdVhWMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MEZDNi8xRDlGM0UwOEE3NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1Ba
VktkLVd3by1KUXpDWXVYVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB3oS6UWD9jILVw0GLXGRovyQHRM7O1GdoRNV3rjZXKRj9K7ZlX02b3
RHhX4MIpAmj13scJyTU+/gttX3Gn9tegdpRFjSwFCbu9+uIJVHrshKf+x5kwttva
muckMIegGZe+ZiqhcJAr1xNnwtvkddKLK5J/DF6W4psT1xAo5ISCcHqqswGeEWL0
dZ491c87yBxJH1M4FEuypMdAzO4XBwYsbfhy3HBbQlG6VxlphNohLM9kKJQLql2H
X61ehL590Sy3K/zDxmNBKxFtxlStSuivEbQYs/dYUQzC7amV3uFQHpikVe67YYr/
vT+z6i1QHZL3+3uMqjiXZLrJiI8go5qA
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:10 2025 by rpki-client