Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
File: 30356EF46D594DA57C7697011183ACFFE04613E0.mft (raw, json)
Hash identifier: azdr/polMPPpZbrWMYYgEDRAXaUXdxPo3oZYoPrF/IY=
Subject key identifier: 46:7C:B3:C7:39:76:4A:E3:11:74:59:70:56:18:B4:7D:88:92:65:0A
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Certificate issuer: /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial: 6C2CB97EF78F0F6E46CFA4F4E1FA35766495828F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
Manifest number: 0634
Signing time: Tue 04 Mar 2025 02:16:06 +0000
Manifest this update: Tue 04 Mar 2025 02:11:06 +0000
Manifest next update: Wed 05 Mar 2025 04:28:06 +0000
Files and hashes: 1: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (hash: /+sJT+4M3YxlKiSTmSS+QE+W2EVnE9RJ/vLKVPLkgic=)
2: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (hash: L0lWQ5cza5vzg//b4IOx6GUQ2FbNhEwtk8QfgcTn3pQ=)
3: 30356EF46D594DA57C7697011183ACFFE04613E0.crl (hash: AZIYIuk1WaBKtSW9v5BvypGRVwTF7wNkkDGMDwpeoTs=)
4: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (hash: yogL8/81axQDf/PWzTASWBYKmDx9+f4U8iWDqKSfbiU=)
5: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (hash: OFQUaZfxmar8QdwOWotCs19NcWRunbT96cEQtkG/1Oc=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:2c:b9:7e:f7:8f:0f:6e:46:cf:a4:f4:e1:fa:35:76:64:95:82:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91905300000
Validity
Not Before: Mar 4 02:11:06 2025 GMT
Not After : Mar 5 04:28:06 2025 GMT
Subject: CN=467CB3C739764AE3117459705618B47D8892650A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:dd:2c:7f:d6:5d:ea:72:f5:e7:05:15:b6:8c:
71:29:0c:7b:6b:52:49:3d:15:f0:ec:d6:1e:aa:2a:
b2:32:2d:c2:be:95:ac:c5:03:bf:4c:a9:82:3f:2c:
56:8f:d9:ca:9a:6c:15:04:ec:a5:83:d8:ee:39:a1:
07:b3:a5:ab:02:d9:7b:1f:25:fa:78:b4:40:f5:87:
6b:2e:06:ac:56:32:ad:2d:76:9c:06:6e:39:37:66:
27:42:dd:cd:95:4f:e0:1f:dc:ba:1e:ab:fc:aa:b6:
46:f0:c9:6e:82:56:94:ba:6f:00:bd:0f:b6:eb:00:
5d:f2:c7:86:cb:65:ae:24:18:a8:2d:7b:9f:0e:95:
96:37:27:c1:fa:6d:95:0c:ec:63:f7:3a:8e:88:a3:
2c:11:87:3e:b3:1b:ff:f7:09:e1:1d:6c:06:1a:e6:
34:9d:ca:4f:02:c7:40:2e:2d:ad:1e:30:66:97:dd:
b8:4c:5f:0b:6f:d8:c4:cd:2a:e8:3e:4c:e5:22:f0:
b1:53:e2:e7:b3:a5:e5:64:de:c6:fd:3f:ba:47:04:
65:e7:b7:de:55:a2:5c:e8:e6:17:0a:7e:42:98:2a:
85:2d:e7:41:31:cb:ac:d5:54:a2:f6:ea:af:fe:41:
a7:43:77:68:e3:61:55:05:41:9d:ef:ff:76:51:08:
59:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7C:B3:C7:39:76:4A:E3:11:74:59:70:56:18:B4:7D:88:92:65:0A
X509v3 Authority Key Identifier:
keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:03:2c:fc:54:da:fe:60:db:83:a9:d7:f9:7d:ca:58:66:0f:
ab:51:46:19:a0:43:b7:ff:d9:5b:af:a0:f3:cb:7f:18:af:04:
ad:9f:8b:71:2e:a6:f6:42:02:6f:6e:56:00:7f:73:cb:8a:ee:
05:6b:ea:d1:2c:33:31:12:30:70:5d:10:fc:6e:d0:21:39:2a:
ed:8b:2e:3a:3e:96:2e:dc:bf:02:f0:45:3d:a0:b8:41:a8:cb:
8d:ad:7a:c3:48:bb:54:e6:75:ec:87:d6:ca:64:0e:28:10:3f:
48:cc:58:39:ea:6b:c9:7a:30:b5:bc:e0:47:28:cc:92:d6:80:
68:41:10:4e:d1:23:40:00:19:71:b6:72:18:be:24:32:cb:e7:
8e:54:c9:d2:9b:50:e7:65:48:71:ad:35:39:bf:16:80:e8:35:
47:55:5d:48:85:9a:eb:52:98:2d:be:94:29:de:42:8f:62:bc:
f9:e1:e5:83:bf:a9:ad:d9:84:a9:ed:c6:e6:d9:70:fa:38:ac:
d5:95:d9:56:44:67:e0:5b:b1:bd:3d:0a:78:ae:5d:7e:dc:9a:
f1:50:3d:69:87:18:1f:0a:eb:16:32:96:c1:73:82:19:91:e6:
a8:fb:cb:db:30:5c:62:7e:bd:69:f3:10:0a:b7:f0:e7:55:6c:
be:5f:47:20
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUbCy5fvePD25Gz6T04fo1dmSVgo8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTA1MzAwMDAwMTEwLwYDVQQFEygzMDM1NkVGNDZE
NTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwMB4XDTI1MDMwNDAyMTEwNloX
DTI1MDMwNTA0MjgwNlowMzExMC8GA1UEAxMoNDY3Q0IzQzczOTc2NEFFMzExNzQ1
OTcwNTYxOEI0N0Q4ODkyNjUwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIfdLH/WXepy9ecFFbaMcSkMe2tSST0V8OzWHqoqsjItwr6VrMUDv0ypgj8s
Vo/ZyppsFQTspYPY7jmhB7OlqwLZex8l+ni0QPWHay4GrFYyrS12nAZuOTdmJ0Ld
zZVP4B/cuh6r/Kq2RvDJboJWlLpvAL0PtusAXfLHhstlriQYqC17nw6Vljcnwfpt
lQzsY/c6joijLBGHPrMb//cJ4R1sBhrmNJ3KTwLHQC4trR4wZpfduExfC2/YxM0q
6D5M5SLwsVPi57Ol5WTexv0/ukcEZee33lWiXOjmFwp+QpgqhS3nQTHLrNVUovbq
r/5Bp0N3aONhVQVBne//dlEIWScCAwEAAaOCAhswggIXMB0GA1UdDgQWBBRGfLPH
OXZK4xF0WXBWGLR9iJJlCjAfBgNVHSMEGDAWgBQwNW70bVlNpXx2lwERg6z/4EYT
4DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMC8zMDM1NkVG
NDZENTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NRFZ1OUcxWlRh
VjhkcGNCRVlPc18tQkdFLUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz
MDAwMDAvMC8zMDM1NkVGNDZENTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0Uw
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEApQMs/FTa/mDbg6nX+X3KWGYPq1FGGaBDt//ZW6+g88t/GK8E
rZ+LcS6m9kICb25WAH9zy4ruBWvq0SwzMRIwcF0Q/G7QITkq7YsuOj6WLty/AvBF
PaC4QajLja16w0i7VOZ17IfWymQOKBA/SMxYOepryXowtbzgRyjMktaAaEEQTtEj
QAAZcbZyGL4kMsvnjlTJ0ptQ52VIca01Ob8WgOg1R1VdSIWa61KYLb6UKd5Cj2K8
+eHlg7+prdmEqe3G5tlw+jis1ZXZVkRn4FuxvT0KeK5dftya8VA9aYcYHwrrFjKW
wXOCGZHmqPvL2zBcYn69afMQCrfw51Vsvl9HIA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:17:51 2025 by rpki-client