Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft
File: z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json)
Hash identifier: xA0Zojf2qFfaL2a91KEYjXXYsYWpZZhtd0gH7TL2Is4=
Subject key identifier: 7D:7F:B1:9D:BF:BF:30:F6:37:C4:F7:C5:F5:7B:59:F5:C9:FF:8D:D6
Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50
Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950
Certificate serial: 2482
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft
Manifest number: 2469
Signing time: Fri 28 Mar 2025 15:52:31 +0000
Manifest this update: Fri 28 Mar 2025 15:52:30 +0000
Manifest next update: Fri 04 Apr 2025 15:52:30 +0000
Files and hashes: 1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: V4fFMVDrm6iXSbhqbaXODkl1A+HivTMfMyzXCI5vQmA=)
2: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: BdOiTbzqh5XSdUEde1pJSh9jcSbYou4UnLUcs5Z11Mw=)
3: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: OW7j0FFz0XfQbm3/I5GoSRUOzPWQeOb92johNE2e0dM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9346 (0x2482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F916A
Validity
Not Before: Mar 28 15:52:30 2025 GMT
Not After : Apr 4 15:52:30 2025 GMT
Subject: CN=67e6c5be-be3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e5:46:65:7e:e0:e3:f6:58:52:97:33:05:1a:
d5:07:a6:10:c7:89:cf:66:02:c7:48:fc:56:ed:5c:
47:93:57:55:a3:58:66:be:08:a6:19:af:13:cc:69:
fc:f6:c1:8a:15:bb:81:af:2e:70:45:d6:fc:d7:b2:
4a:5a:27:ea:d2:f3:30:39:d0:61:69:ac:92:b4:65:
c7:33:72:f7:d6:e5:91:a6:f4:db:d4:6b:af:4f:ff:
92:aa:2d:4c:ae:a8:f5:7f:d8:ce:1d:de:e7:0f:16:
3f:6d:0d:b3:3d:8e:e4:07:c0:75:cf:74:34:14:a6:
61:11:5a:9e:46:9b:ce:9a:00:71:42:2f:34:a4:e9:
11:07:65:32:5f:94:24:72:aa:24:b1:7d:2d:98:49:
bf:09:70:df:3d:cc:62:37:51:82:e8:8b:2e:ac:8d:
4b:c4:e6:67:b1:51:c3:2b:38:75:df:d4:3c:e3:88:
72:84:34:06:e8:db:89:8d:e3:13:8d:46:f2:7f:76:
ce:4a:aa:0e:60:be:65:72:0c:7a:fe:b6:8b:46:68:
51:20:36:0c:fa:5f:6c:d8:bc:8d:69:f4:8b:e9:72:
a7:9e:9e:0d:2a:f9:fc:6a:6f:7e:44:84:98:a7:dd:
67:4f:72:4a:bc:c5:d7:7d:e3:54:c6:f5:2e:08:1b:
9e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7F:B1:9D:BF:BF:30:F6:37:C4:F7:C5:F5:7B:59:F5:C9:FF:8D:D6
X509v3 Authority Key Identifier:
keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:c8:65:00:9c:75:83:12:f7:38:a4:d2:7d:14:21:62:09:03:
eb:44:53:6e:f2:24:bb:30:4f:31:41:81:b5:d6:dc:1b:eb:21:
a7:9c:65:09:6f:57:50:7e:ab:e9:c4:6e:4a:d4:cc:dd:0c:ca:
6b:9a:48:c9:a9:21:d7:9a:cb:66:3e:bc:8b:0d:fa:4e:f7:08:
e1:0e:f9:1f:0e:4d:76:09:57:fc:0a:9f:ca:30:dc:df:99:95:
08:1e:4f:bd:c6:f1:6e:d2:29:66:47:5d:41:d4:3f:16:ba:f4:
26:ea:ba:39:a0:23:46:6f:09:c8:cb:9c:7a:c9:8a:2f:1e:97:
d3:4a:74:1f:81:ed:20:39:78:9f:c5:b2:b7:1d:ec:23:f2:96:
dd:0f:12:29:95:c5:6b:a5:1d:03:f8:c1:69:9b:04:a5:b4:96:
2a:76:96:5c:17:71:1d:c1:c1:f3:ed:1c:76:99:0f:33:9d:f6:
19:36:56:56:81:db:06:2f:1d:5f:59:20:73:01:9b:1a:62:2e:
9d:25:fb:17:f3:90:6a:79:1f:eb:b2:db:a9:2a:fe:0c:d9:ed:
39:d5:47:ae:c1:78:dd:1e:b7:25:42:d7:01:ba:43:81:90:a9:
62:7e:60:f6:14:03:9e:bf:4d:e3:9d:b3:59:80:c4:b2:24:36:
91:76:a1:9a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2
NTdFMEM5NTAwHhcNMjUwMzI4MTU1MjMwWhcNMjUwNDA0MTU1MjMwWjAYMRYwFAYD
VQQDEw02N2U2YzViZS1iZTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAneVGZX7g4/ZYUpczBRrVB6YQx4nPZgLHSPxW7VxHk1dVo1hmvgimGa8TzGn8
9sGKFbuBry5wRdb817JKWifq0vMwOdBhaayStGXHM3L31uWRpvTb1GuvT/+Sqi1M
rqj1f9jOHd7nDxY/bQ2zPY7kB8B1z3Q0FKZhEVqeRpvOmgBxQi80pOkRB2UyX5Qk
cqoksX0tmEm/CXDfPcxiN1GC6IsurI1LxOZnsVHDKzh139Q844hyhDQG6NuJjeMT
jUbyf3bOSqoOYL5lcgx6/raLRmhRIDYM+l9s2LyNafSL6XKnnp4NKvn8am9+RISY
p91nT3JKvMXXfeNUxvUuCBueBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1/sZ2/
vzD2N8T3xfV7WfXJ/43WMB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1
OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5
VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OTE2QS8xRDdBRDBCQTQ1OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNW
Z29jQVpEQUhaWVJsZmd5VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAVyGUAnHWDEvc4pNJ9FCFiCQPrRFNu8iS7ME8xQYG11twb6yGnnGUJ
b1dQfqvpxG5K1MzdDMprmkjJqSHXmstmPryLDfpO9wjhDvkfDk12CVf8Cp/KMNzf
mZUIHk+9xvFu0ilmR11B1D8WuvQm6ro5oCNGbwnIy5x6yYovHpfTSnQfge0gOXif
xbK3Hewj8pbdDxIplcVrpR0D+MFpmwSltJYqdpZcF3EdwcHz7Rx2mQ8znfYZNlZW
gdsGLx1fWSBzAZsaYi6dJfsX85BqeR/rstupKv4M2e051UeuwXjdHrclQtcBukOB
kKlifmD2FAOev03jnbNZgMSyJDaRdqGa
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:58 2025 by rpki-client