Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft
File: QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft (raw, json)
Hash identifier: 3BOPsUDW/p69jhCfSdq07KrJi6gt98kNhiEV6ZFqd7M=
Subject key identifier: 06:2E:8E:BF:20:F4:34:8C:B7:43:68:AE:F9:EB:C7:02:7D:DA:33:E4
Authority key identifier: 41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03
Certificate issuer: /CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403
Certificate serial: 083A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft
Manifest number: 0829
Signing time: Fri 28 Mar 2025 21:05:22 +0000
Manifest this update: Fri 28 Mar 2025 21:05:21 +0000
Manifest next update: Fri 04 Apr 2025 21:05:21 +0000
Files and hashes: 1: QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl (hash: EGbOxpy2cZVon5rzIHVC7FeYQfSvF5tadtrIpUcpEXM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2106 (0x83a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914740F
Validity
Not Before: Mar 28 21:05:21 2025 GMT
Not After : Apr 4 21:05:21 2025 GMT
Subject: CN=67e70f12-da22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:85:ce:c2:fd:e7:c1:13:2d:f2:62:9f:80:f1:
95:7d:f8:0b:28:e2:d8:82:fc:92:22:55:75:f9:7a:
00:18:9d:22:02:29:34:96:f8:76:a7:18:05:f7:91:
61:10:bc:a2:e4:a7:30:c4:00:b0:cf:2b:04:47:c4:
ce:d0:15:64:d1:81:ea:6b:a0:4f:0c:59:4d:9b:45:
ad:8d:cb:25:9b:77:2b:33:0c:8a:26:cf:7c:a4:94:
70:61:96:54:4d:aa:bd:12:66:91:3d:00:d6:73:40:
4c:d6:99:49:6c:f0:eb:f8:3d:2f:ea:47:6f:c1:d6:
02:af:7e:71:a1:7a:58:ea:98:b3:2b:46:db:a4:9f:
9a:9c:27:e2:88:31:44:72:90:5a:46:74:3a:52:7a:
07:e1:15:83:88:9d:36:bc:00:8d:04:84:ef:f4:e6:
99:69:1a:2a:a6:8c:e8:d5:20:f2:c4:9a:42:44:e0:
3f:46:00:b7:5e:da:e6:b6:e2:0c:42:89:ec:5d:b0:
bb:8a:a6:13:52:09:82:01:6c:10:a4:b1:1e:9a:64:
3d:46:19:c1:20:ec:99:07:93:96:65:96:7e:d9:46:
74:2a:e5:83:d2:2f:4d:45:6d:6b:d7:da:34:a8:aa:
51:7f:b8:6e:22:25:ef:51:96:0d:c1:c0:64:1b:dc:
30:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2E:8E:BF:20:F4:34:8C:B7:43:68:AE:F9:EB:C7:02:7D:DA:33:E4
X509v3 Authority Key Identifier:
keyid:41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:bd:bf:79:bf:87:c2:e6:0a:d6:be:d3:a7:bc:96:52:13:b6:
52:27:34:9c:bc:c8:d5:a0:dc:a7:44:36:78:47:8d:eb:10:c1:
68:26:8e:72:86:35:f4:96:d7:74:27:9f:3d:10:63:39:82:ff:
60:95:a4:96:84:36:a5:a0:f1:4b:9a:08:38:ca:ea:4c:d4:42:
e3:d3:da:4d:70:65:d3:2a:d4:7a:68:92:29:f9:bb:f2:2f:b5:
63:ce:2d:59:c6:99:31:94:53:c4:5f:9c:bb:28:32:15:4d:c3:
77:e8:c4:f4:83:3d:b1:ed:78:8d:68:3d:1c:68:0f:e6:2c:5e:
78:e0:77:9a:b0:e0:ce:81:2c:be:a6:9a:d1:32:75:25:3a:5b:
c8:89:77:e5:88:f7:3e:6e:6a:f5:af:4e:ed:63:57:3d:68:0d:
dd:1e:43:9f:a6:91:35:13:8f:2a:1f:c8:6c:8e:2c:4a:48:f6:
09:5e:10:e8:dd:1c:f4:85:de:06:01:1e:eb:44:41:5f:45:36:
2c:55:bf:5a:99:5c:90:32:be:81:39:1c:cc:3b:43:4b:37:80:
7f:aa:8c:d4:81:1f:a6:a8:39:98:1b:b9:d8:a1:71:16:95:a0:
29:5d:7b:c7:87:db:f6:e4:79:fe:07:ab:84:8a:4a:d9:ca:43:
f7:2f:6e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:03 2025 by rpki-client