Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
File: t9PrYcwCjDi_0_eigPNpBGhlWwY.mft (raw, json)
Hash identifier: zEajNdWkCZGlA2klWvDFHxNKiEkyRmPdfHQ2USAKzWk=
Subject key identifier: D9:95:43:60:38:E4:D9:07:EC:AB:37:DB:40:48:75:6F:3B:DC:DB:C5
Authority key identifier: B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06
Certificate issuer: /CN=A91FED7C/serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06
Certificate serial: 0909
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
Manifest number: 0904
Signing time: Fri 28 Mar 2025 20:36:33 +0000
Manifest this update: Fri 28 Mar 2025 20:36:32 +0000
Manifest next update: Fri 04 Apr 2025 20:36:32 +0000
Files and hashes: 1: t9PrYcwCjDi_0_eigPNpBGhlWwY.crl (hash: CsvbmR9v7aKLGWEXX2W+hLEGzcFhNk/MQhzOmOIQIgU=)
2: E5DA330E9FF411EABA55D530C4F9AE02.roa (hash: WPNbmXIljXf5DGJzTyP9mhxu+4YyVGP6cfR3qyAMYCc=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2313 (0x909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FED7C
Validity
Not Before: Mar 28 20:36:32 2025 GMT
Not After : Apr 4 20:36:32 2025 GMT
Subject: CN=67e70850-f5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d2:27:81:12:dc:4f:48:f5:ee:52:a6:25:4d:
33:92:f6:21:35:18:6c:25:c6:17:07:0d:be:0a:84:
f6:ec:62:cf:32:80:d4:4d:4e:31:86:ba:1c:a9:3f:
97:82:0f:47:f2:b3:00:c4:ec:48:01:df:23:92:45:
ac:bf:75:9e:5d:bf:2c:b0:79:4d:fa:b0:87:82:20:
8a:26:74:40:d0:0a:0c:61:d6:ed:42:b0:c8:e3:b1:
c4:0d:49:1d:14:55:fe:f7:c8:c7:83:21:5d:4e:b4:
1e:88:92:0e:a7:50:aa:69:fd:04:83:45:4a:e2:42:
19:d1:b3:cf:7b:8d:d0:bb:1d:68:fc:43:01:2e:b1:
8f:07:5e:41:f4:83:26:90:9a:d9:21:52:b2:7e:7f:
d4:5b:f2:ee:cc:ca:70:86:84:46:70:3b:82:88:08:
44:c9:d6:cf:20:61:d3:cd:9e:9f:5c:62:85:ab:70:
59:eb:fe:81:b4:d2:12:d2:f9:de:70:32:ef:f2:26:
c7:56:20:76:84:de:d4:b0:13:28:f4:fd:0c:f4:27:
13:da:ee:98:98:c4:fd:6f:d0:d5:27:f2:60:12:4b:
ed:4a:20:17:30:3e:d1:f3:87:de:d6:0e:73:c4:28:
5d:ba:b9:9f:da:35:51:67:4f:33:dc:5c:83:05:a2:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:95:43:60:38:E4:D9:07:EC:AB:37:DB:40:48:75:6F:3B:DC:DB:C5
X509v3 Authority Key Identifier:
keyid:B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:99:eb:c1:30:6f:41:32:6e:e0:4d:7c:ff:3c:74:6a:f4:b7:
f1:5c:15:bb:d3:2b:f9:ce:52:c7:52:89:a1:6a:cf:aa:8c:f6:
21:61:be:28:2f:9e:3b:82:23:c5:f6:b1:f3:d7:f5:bf:a3:7f:
e5:c9:97:f5:5e:21:ac:6c:33:9c:5a:f0:f5:6f:ec:7c:f5:f5:
fc:37:97:8a:13:8d:e4:6f:e6:a2:fa:7e:53:49:0c:15:7e:ac:
b1:32:02:6e:76:c0:f6:fd:ca:1a:24:7b:d9:24:b3:69:0f:72:
6b:7f:f9:6d:cc:d8:db:4d:b3:a9:30:12:e2:d6:aa:ea:50:ba:
7c:34:1b:38:af:2f:bc:fa:c4:74:ef:93:c4:7f:b5:f6:50:ee:
70:9e:c2:75:a7:22:05:18:ba:99:ae:d6:bf:a9:17:2d:64:16:
f2:41:d0:e8:17:96:f5:73:09:2a:06:62:56:05:a1:bf:ca:77:
47:42:8b:b5:e8:16:dd:bc:bf:64:5b:7a:60:63:73:cc:23:55:
31:e3:df:d3:7d:f6:bc:f4:44:ea:14:38:e8:3e:ce:3a:37:ec:
8d:e1:af:e1:37:54:68:9a:62:eb:58:9a:40:4b:94:97:ed:20:
3e:1e:c6:fc:48:9e:10:0f:a0:9f:14:6a:84:ad:a6:42:9b:8c:
86:f8:84:04
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkVEN0MxMTAvBgNVBAUTKEI3RDNFQjYxQ0MwMjhDMzhCRkQzRjdBMjgwRjM2OTA0
Njg2NTVCMDYwHhcNMjUwMzI4MjAzNjMyWhcNMjUwNDA0MjAzNjMyWjAYMRYwFAYD
VQQDEw02N2U3MDg1MC1mNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA69IngRLcT0j17lKmJU0zkvYhNRhsJcYXBw2+CoT27GLPMoDUTU4xhrocqT+X
gg9H8rMAxOxIAd8jkkWsv3WeXb8ssHlN+rCHgiCKJnRA0AoMYdbtQrDI47HEDUkd
FFX+98jHgyFdTrQeiJIOp1Cqaf0Eg0VK4kIZ0bPPe43Qux1o/EMBLrGPB15B9IMm
kJrZIVKyfn/UW/LuzMpwhoRGcDuCiAhEydbPIGHTzZ6fXGKFq3BZ6/6BtNIS0vne
cDLv8ibHViB2hN7UsBMo9P0M9CcT2u6YmMT9b9DVJ/JgEkvtSiAXMD7R84fe1g5z
xChdurmf2jVRZ08z3FyDBaIHpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmVQ2A4
5NkH7Ks320BIdW873NvFMB8GA1UdIwQYMBaAFLfT62HMAow4v9P3ooDzaQRoZVsG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUQ3Qy9GRkQzQjNGRTlG
RjIxMUVBOERCMjY3MkNDNEY5QUUwMi90OVByWWN3Q2pEaV8wX2VpZ1BOcEJHaGxX
d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q5UHJZY3dDakRpXzBfZWlnUE5wQkdobFd3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RUQ3Qy9GRkQzQjNGRTlGRjIxMUVBOERCMjY3MkNDNEY5QUUwMi90OVByWWN3Q2pE
aV8wX2VpZ1BOcEJHaGxXd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBUmevBMG9BMm7gTXz/PHRq9LfxXBW70yv5zlLHUomhas+qjPYhYb4o
L547giPF9rHz1/W/o3/lyZf1XiGsbDOcWvD1b+x89fX8N5eKE43kb+ai+n5TSQwV
fqyxMgJudsD2/coaJHvZJLNpD3Jrf/ltzNjbTbOpMBLi1qrqULp8NBs4ry+8+sR0
75PEf7X2UO5wnsJ1pyIFGLqZrta/qRctZBbyQdDoF5b1cwkqBmJWBaG/yndHQou1
6BbdvL9kW3pgY3PMI1Ux49/Tffa89ETqFDjoPs46N+yN4a/hN1RommLrWJpAS5SX
7SA+Hsb8SJ4QD6CfFGqEraZCm4yG+IQE
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:51 2025 by rpki-client