Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft
File: oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft (raw, json)
Hash identifier: OvqSn8h85Gmi/fydk+6AsQ93lHc6cyTOOE3em3v/wcU=
Subject key identifier: 6F:7E:65:6D:A3:2D:DA:73:DA:8C:08:36:0A:05:C7:40:A6:BE:81:9C
Authority key identifier: A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1
Certificate issuer: /CN=A91FA024/serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1
Certificate serial: 07C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft
Manifest number: 07B8
Signing time: Fri 28 Mar 2025 21:23:48 +0000
Manifest this update: Fri 28 Mar 2025 21:23:48 +0000
Manifest next update: Fri 04 Apr 2025 21:23:48 +0000
Files and hashes: 1: oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl (hash: 60lb8s+NTK0x8P9ovUyriE+zqoS70OxItQKh0bvUgCo=)
2: FE1FDB12BCD011EC8283681EC4F9AE02.roa (hash: 2wuY0yDKdmJN9ZQKTlSwz2efwa28k+u+9dd3owV3hlg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1984 (0x7c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA024
Validity
Not Before: Mar 28 21:23:48 2025 GMT
Not After : Apr 4 21:23:48 2025 GMT
Subject: CN=67e71364-4ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1a:76:5e:50:a0:5f:a2:07:e3:c9:9b:be:5f:
34:5b:1e:86:e1:f8:8a:17:ac:04:2f:70:f9:d6:70:
37:b3:ca:4a:20:58:37:14:83:3e:5b:72:b9:c1:e5:
dc:e5:71:0f:fc:71:53:82:2d:b0:d5:78:22:33:0a:
09:d7:0d:5e:fe:28:1c:85:42:e7:63:50:7d:69:44:
81:05:4a:6b:5c:cf:7c:bf:08:2c:58:f9:89:c3:0f:
60:83:48:e8:64:cb:b5:b1:a6:f3:50:98:b7:9d:7c:
29:0f:42:3b:90:a8:b1:72:d7:f5:ba:52:1f:90:8b:
9a:ed:d6:08:5e:32:f6:e9:26:80:54:40:d4:d2:4d:
dd:dc:bc:2a:e4:a5:3b:e2:97:b0:00:63:01:3a:dd:
ed:2e:e2:a7:d9:35:d8:d5:ed:ca:79:d4:f9:09:6a:
72:df:92:7a:59:a5:39:9c:87:22:c6:6f:21:a7:26:
96:35:05:11:fe:60:37:90:30:42:7d:2e:13:71:06:
ef:d5:8f:f5:ab:75:35:57:d4:94:6f:a3:ba:78:10:
74:0e:18:b4:ff:79:8b:d9:ca:76:fa:fd:2c:31:e3:
88:48:37:1a:bf:84:68:4f:39:c2:8b:a9:3f:31:e2:
b7:62:00:80:94:15:5d:bb:d6:9c:7d:3b:d9:85:98:
44:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7E:65:6D:A3:2D:DA:73:DA:8C:08:36:0A:05:C7:40:A6:BE:81:9C
X509v3 Authority Key Identifier:
keyid:A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:49:b1:0a:0e:32:48:2c:6f:42:4d:fc:ef:32:aa:9a:ea:f7:
7a:a9:bc:c5:d7:b2:86:d7:7e:95:7f:17:a0:2d:9b:a6:f5:2f:
6b:87:28:a2:4e:d5:44:ea:aa:16:25:b8:9c:ed:17:cd:d6:28:
66:d6:a6:03:4a:82:ea:fa:7a:e8:19:79:38:64:87:35:17:17:
ff:bf:7f:86:cb:dd:6d:7d:f3:3c:3c:fd:29:d6:d7:93:6c:5b:
14:2d:87:44:ed:37:68:f3:4b:14:2e:b1:fa:a9:03:60:3b:c9:
a4:fa:b4:49:54:99:94:1e:75:15:98:30:2c:64:f2:17:87:f1:
6c:38:49:44:d4:19:ae:b7:54:c2:e2:8d:95:7c:78:54:71:ef:
1e:81:e6:9f:13:66:b0:d9:f7:a9:54:cb:ac:0f:c5:93:c4:e9:
a0:9c:5a:9c:44:7d:0c:1b:b0:2a:aa:09:c3:29:8b:ff:0a:d2:
11:cf:f1:c1:f0:01:25:86:69:c4:c5:ac:fa:d7:a2:f6:e1:f0:
e9:ac:e5:a3:36:64:40:b1:bd:47:6b:bb:ae:cd:57:32:f0:59:
05:1c:de:b2:34:b9:ad:54:71:87:c5:8b:32:cb:c2:5c:b3:c2:
af:2a:a3:0e:5d:ea:16:2f:41:8d:89:be:21:19:b4:a0:68:9c:
92:f0:4d:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkEwMjQxMTAvBgNVBAUTKEEwQUM0MjdFOTU3QjM3NEQwMjY3RkE3NjQ4REQzRkY4
NTcwMkRBQjEwHhcNMjUwMzI4MjEyMzQ4WhcNMjUwNDA0MjEyMzQ4WjAYMRYwFAYD
VQQDEw02N2U3MTM2NC00YWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxRp2XlCgX6IH48mbvl80Wx6G4fiKF6wEL3D51nA3s8pKIFg3FIM+W3K5weXc
5XEP/HFTgi2w1XgiMwoJ1w1e/igchULnY1B9aUSBBUprXM98vwgsWPmJww9gg0jo
ZMu1sabzUJi3nXwpD0I7kKixctf1ulIfkIua7dYIXjL26SaAVEDU0k3d3Lwq5KU7
4pewAGMBOt3tLuKn2TXY1e3KedT5CWpy35J6WaU5nIcixm8hpyaWNQUR/mA3kDBC
fS4TcQbv1Y/1q3U1V9SUb6O6eBB0Dhi0/3mL2cp2+v0sMeOISDcav4RoTznCi6k/
MeK3YgCAlBVdu9acfTvZhZhE+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9+ZW2j
Ldpz2owINgoFx0CmvoGcMB8GA1UdIwQYMBaAFKCsQn6VezdNAmf6dkjdP/hXAtqx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAyNC9EMzNBNDc5NEYx
ODgxMUVBOUU4MEY3MUVDNEY5QUUwMi9vS3hDZnBWN04wMENaX3AyU04wXy1GY0My
ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29LeENmcFY3TjAwQ1pfcDJTTjBfLUZjQzJyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTAyNC9EMzNBNDc5NEYxODgxMUVBOUU4MEY3MUVDNEY5QUUwMi9vS3hDZnBWN04w
MENaX3AyU04wXy1GY0MyckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBvSbEKDjJILG9CTfzvMqqa6vd6qbzF17KG136VfxegLZum9S9rhyii
TtVE6qoWJbic7RfN1ihm1qYDSoLq+nroGXk4ZIc1Fxf/v3+Gy91tffM8PP0p1teT
bFsULYdE7Tdo80sULrH6qQNgO8mk+rRJVJmUHnUVmDAsZPIXh/FsOElE1Bmut1TC
4o2VfHhUce8egeafE2aw2fepVMusD8WTxOmgnFqcRH0MG7AqqgnDKYv/CtIRz/HB
8AElhmnExaz616L24fDprOWjNmRAsb1Ha7uuzVcy8FkFHN6yNLmtVHGHxYsyy8Jc
s8KvKqMOXeoWL0GNib4hGbSgaJyS8E1M
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:51 2025 by rpki-client