Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A918C2870000/0/8DE36DE00AD6C58EE63BE8708533D568D59F03ED.mft
File: 8DE36DE00AD6C58EE63BE8708533D568D59F03ED.mft (raw, json)
Hash identifier: 5Kvl2iV8MtIzvm5kJUqpeRttKEY1391mZaNTiEtOYQ4=
Subject key identifier: 55:A6:0B:25:9C:AF:E6:95:37:89:94:C7:21:9B:AE:19:3D:8E:EB:3F
Authority key identifier: 8D:E3:6D:E0:0A:D6:C5:8E:E6:3B:E8:70:85:33:D5:68:D5:9F:03:ED
Certificate issuer: /CN=A918C2870000/serialNumber=8DE36DE00AD6C58EE63BE8708533D568D59F03ED
Certificate serial: 46440C4C6AFE71F34FBAD9AF0AEFDC1AC022693A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeNt4ArWxY7mO-hwhTPVaNWfA-0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A918C2870000/0/8DE36DE00AD6C58EE63BE8708533D568D59F03ED.mft
Manifest number: 1A
Signing time: Sun 26 Oct 2025 15:14:51 +0000
Manifest this update: Sun 26 Oct 2025 15:09:51 +0000
Manifest next update: Mon 27 Oct 2025 17:58:51 +0000
Files and hashes: 1: 3230332e3137362e3138392e302f32342d3234203d3e203634343939.roa (hash: cc8VyDqhkEa1zP4MPtaFm5Nq0t+jvQdkIXFmrwtTX4Q=)
2: 3230332e3137362e3138392e302f32352d3235203d3e203634343939.roa (hash: oaWk0P7quIWY48JUJJgD8BGzFYbWfjuctlxnugarjPc=)
3: 8DE36DE00AD6C58EE63BE8708533D568D59F03ED.crl (hash: X0+7ewhcjv71DwpXXEW/h0wQelshGZWzdfb1V2lbQIU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:44:0c:4c:6a:fe:71:f3:4f:ba:d9:af:0a:ef:dc:1a:c0:22:69:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C2870000, serialNumber=8DE36DE00AD6C58EE63BE8708533D568D59F03ED
Validity
Not Before: Oct 26 15:09:51 2025 GMT
Not After : Oct 27 17:58:51 2025 GMT
Subject: CN=55A60B259CAFE695378994C7219BAE193D8EEB3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:cb:9d:17:c1:45:13:a5:ff:56:f2:9e:5e:
87:e7:29:fd:36:f3:12:35:74:08:dc:56:52:5a:e5:
ae:fe:4c:03:7f:fb:c0:94:0e:cf:23:70:75:8f:16:
78:02:66:91:72:08:07:dc:67:9c:fe:03:33:9e:55:
16:8e:62:d9:7c:6b:d3:56:95:2f:a1:df:fc:ae:20:
a0:08:43:d0:2b:ea:62:d5:bf:42:cc:bf:8b:cf:b0:
53:05:1a:74:b0:77:80:2f:14:4c:33:50:e6:62:8e:
69:d6:5a:86:93:1c:28:1b:31:b0:54:0d:78:25:9d:
b6:6b:c7:6e:0e:b5:3b:82:6d:e0:c4:b1:a8:a5:b3:
eb:fa:97:ff:5c:da:6f:d1:69:3a:4d:27:01:e5:76:
8d:0d:3b:01:e4:b6:e9:4f:95:89:a5:0c:40:f6:8b:
df:c4:ad:7e:eb:df:36:19:a5:e4:e6:2a:35:14:b1:
94:da:44:b6:1f:1a:e1:4c:ad:d1:9b:e5:23:67:46:
8f:ae:bd:b9:96:6e:6d:28:24:3f:95:05:30:0d:b7:
2f:d6:fc:87:7b:b1:07:0f:ec:35:77:bd:24:01:44:
0b:af:27:22:eb:41:8e:25:e7:95:5a:25:b6:f8:b5:
ab:2b:85:6f:2e:24:bd:73:a2:55:e2:db:6e:af:87:
2d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A6:0B:25:9C:AF:E6:95:37:89:94:C7:21:9B:AE:19:3D:8E:EB:3F
X509v3 Authority Key Identifier:
keyid:8D:E3:6D:E0:0A:D6:C5:8E:E6:3B:E8:70:85:33:D5:68:D5:9F:03:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/8DE36DE00AD6C58EE63BE8708533D568D59F03ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeNt4ArWxY7mO-hwhTPVaNWfA-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/8DE36DE00AD6C58EE63BE8708533D568D59F03ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:12:04:9b:74:7c:15:38:b7:8c:35:31:77:6f:eb:80:b2:44:
7e:4b:31:d2:e2:bf:d8:8a:90:42:9e:da:ae:72:96:ad:46:27:
2f:85:93:77:ad:1f:34:0f:77:a9:ed:d1:f8:77:b7:a9:1a:f2:
3b:4a:82:5c:73:f3:66:30:bd:ad:68:7d:84:f9:fc:ae:6d:3f:
09:69:53:cd:20:65:90:5c:a4:1c:9d:b2:7b:d0:9d:29:ef:79:
aa:55:fc:c1:6e:f5:ac:2a:03:0c:4e:7a:e6:26:4d:2e:ef:d1:
e8:56:66:ba:bd:1d:98:2c:05:29:65:15:2f:d3:32:31:8b:b1:
39:eb:58:3f:db:7b:0d:89:46:a0:23:41:65:fb:d5:c0:52:6a:
11:c6:f8:57:c8:c1:e4:b7:a9:9b:e8:48:e5:af:92:8a:bd:5e:
44:36:33:ca:91:8d:34:ce:a4:59:d8:bf:d1:2b:cd:a8:96:16:
68:ba:a4:5a:87:ab:67:af:97:63:1f:a2:5d:ee:e5:52:41:12:
8f:cd:cf:d5:3c:55:e4:53:1b:19:8e:04:df:2f:7f:d3:16:dd:
5a:fb:d3:53:67:80:a1:b1:4f:91:c7:86:fc:a1:e5:8a:e2:83:
81:65:34:f4:18:99:52:b5:a8:d7:c4:16:80:4f:da:04:bf:91:
f2:be:fc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:09:46 2025 by rpki-client