Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
File: gyzAVuI-OIrjeBpSC92RFpY25Zs.mft (raw, json)
Hash identifier: UX3dV3JT5/ULOFD17jhgWvsU8Zfc5IMOVWg8GBOUnkA=
Subject key identifier: FB:2F:C2:DC:97:CF:18:06:79:E8:67:A1:A3:4E:02:38:CB:72:29:DB
Authority key identifier: 83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B
Certificate issuer: /CN=A91F1029/serialNumber=832CC056E23E388AE3781A520BDD91169636E59B
Certificate serial: 0718
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
Manifest number: 0712
Signing time: Fri 28 Mar 2025 22:08:39 +0000
Manifest this update: Fri 28 Mar 2025 22:08:38 +0000
Manifest next update: Fri 04 Apr 2025 22:08:38 +0000
Files and hashes: 1: gyzAVuI-OIrjeBpSC92RFpY25Zs.crl (hash: q54SACODjK3MuvhO/xU5P11DpkCQBcG5D+sHO1edQkw=)
2: B2790B3C2FB111EB89A04D37C4F9AE02.roa (hash: cbi8nIiFu7yZyu87usC4sqYN/jQpg6I6lG7FiVSdUVI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1816 (0x718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1029
Validity
Not Before: Mar 28 22:08:38 2025 GMT
Not After : Apr 4 22:08:38 2025 GMT
Subject: CN=67e71de7-7837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cb:71:1b:ef:af:b1:d7:15:49:2a:b5:44:57:
94:03:85:b7:4d:73:52:60:70:64:94:72:d8:38:a6:
7f:24:d0:f8:e8:58:d7:18:d7:6c:02:65:72:b0:67:
b9:38:c3:c2:43:09:23:0a:30:d0:31:4e:c1:b9:3b:
f2:72:fd:59:63:75:4d:2d:ef:8b:1f:dc:d0:96:94:
e2:cd:ac:87:76:19:d6:bd:d2:25:ec:44:65:f5:19:
9c:48:8e:06:4e:76:5a:f1:a3:0a:03:1f:1c:3e:e4:
44:ed:3a:ef:c6:12:e7:b5:9b:a6:09:5f:e3:95:53:
42:fc:b0:4a:b3:1e:b4:20:77:a1:0f:31:2a:4f:8b:
78:78:fd:27:68:2c:c2:ed:e7:e4:b1:99:51:0e:a1:
8b:89:cb:dd:d7:f4:ea:d7:94:f8:1b:80:8a:af:81:
af:ef:8e:51:65:8c:2b:1b:60:2f:12:18:ec:26:92:
a3:3a:b0:57:c2:be:a4:2d:d6:50:f9:7c:86:45:5a:
53:eb:ed:0b:de:c9:43:26:89:c6:94:1e:8c:2a:ce:
39:d9:c7:5a:26:d3:aa:fa:44:8d:d4:9d:81:4c:bd:
1f:10:33:93:3e:b0:04:98:1b:3d:34:1c:6d:b5:e9:
27:49:c2:cb:d2:56:fd:e7:6f:0e:43:a9:08:d9:b4:
19:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2F:C2:DC:97:CF:18:06:79:E8:67:A1:A3:4E:02:38:CB:72:29:DB
X509v3 Authority Key Identifier:
keyid:83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:0d:8a:55:d4:df:05:5d:e6:0e:a4:ef:75:dd:39:e7:30:f6:
53:a8:49:99:9b:f4:26:eb:a5:83:8d:f3:ed:32:d2:99:45:04:
4b:eb:6a:be:af:57:33:0f:c7:57:d4:22:93:50:66:3c:29:a3:
b2:a4:d9:92:9f:f2:d1:86:6c:ce:ed:dc:d0:dc:0a:e0:e6:2b:
05:f6:86:27:a3:da:e5:02:e8:cc:9e:1c:ad:ea:bb:84:c9:9b:
99:28:f5:42:37:64:99:1f:d5:ae:c0:d4:af:0a:11:12:b6:2e:
ed:84:47:62:1f:05:17:f8:67:2c:6e:87:f0:f3:3f:48:bd:8d:
00:9c:bd:93:34:fb:cd:24:39:d5:b5:c9:ed:18:81:87:83:88:
8d:58:c6:f0:c0:56:24:77:1c:26:cd:f5:66:1c:ab:17:a7:c0:
d0:a6:75:ae:90:4c:d4:b2:98:35:35:d3:41:9b:7f:62:36:e3:
77:e3:89:59:6a:5b:8e:20:bb:80:e8:b9:85:20:52:3b:ed:4a:
f1:66:0c:0b:51:fa:0a:52:90:69:8a:28:d2:49:6f:de:eb:f7:
90:b3:0e:61:b3:94:8d:73:6c:9a:86:7e:1e:ea:3d:78:99:ca:
e8:e3:d2:02:35:89:45:e5:37:cb:b9:d2:8b:97:4b:f9:68:73:
df:3a:79:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjEwMjkxMTAvBgNVBAUTKDgzMkNDMDU2RTIzRTM4OEFFMzc4MUE1MjBCREQ5MTE2
OTYzNkU1OUIwHhcNMjUwMzI4MjIwODM4WhcNMjUwNDA0MjIwODM4WjAYMRYwFAYD
VQQDEw02N2U3MWRlNy03ODM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA38txG++vsdcVSSq1RFeUA4W3TXNSYHBklHLYOKZ/JND46FjXGNdsAmVysGe5
OMPCQwkjCjDQMU7BuTvycv1ZY3VNLe+LH9zQlpTizayHdhnWvdIl7ERl9RmcSI4G
TnZa8aMKAx8cPuRE7TrvxhLntZumCV/jlVNC/LBKsx60IHehDzEqT4t4eP0naCzC
7efksZlRDqGLicvd1/Tq15T4G4CKr4Gv745RZYwrG2AvEhjsJpKjOrBXwr6kLdZQ
+XyGRVpT6+0L3slDJonGlB6MKs452cdaJtOq+kSN1J2BTL0fEDOTPrAEmBs9NBxt
teknScLL0lb9528OQ6kI2bQZmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsvwtyX
zxgGeehnoaNOAjjLcinbMB8GA1UdIwQYMBaAFIMswFbiPjiK43gaUgvdkRaWNuWb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTAyOS8xMDg5N0IzMjJG
QjAxMUVCQTg2NkNGMzRDNEY5QUUwMi9neXpBVnVJLU9JcmplQnBTQzkyUkZwWTI1
WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d5ekFWdUktT0lyamVCcFNDOTJSRnBZMjVacy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MTAyOS8xMDg5N0IzMjJGQjAxMUVCQTg2NkNGMzRDNEY5QUUwMi9neXpBVnVJLU9J
cmplQnBTQzkyUkZwWTI1WnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4DYpV1N8FXeYOpO913TnnMPZTqEmZm/Qm66WDjfPtMtKZRQRL62q+
r1czD8dX1CKTUGY8KaOypNmSn/LRhmzO7dzQ3Arg5isF9oYno9rlAujMnhyt6ruE
yZuZKPVCN2SZH9WuwNSvChESti7thEdiHwUX+Gcsbofw8z9IvY0AnL2TNPvNJDnV
tcntGIGHg4iNWMbwwFYkdxwmzfVmHKsXp8DQpnWukEzUspg1NdNBm39iNuN344lZ
aluOILuA6LmFIFI77UrxZgwLUfoKUpBpiijSSW/e6/eQsw5hs5SNc2yahn4e6j14
mcro49ICNYlF5TfLudKLl0v5aHPfOnkv
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:33 2025 by rpki-client