Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.mft
File: QqvQ9dysTQxkACUczEnW_9l1Q78.mft (raw, json)
Hash identifier: NDy6OUT87bB1iZ1RkMpdE1ci/XbaDE6qBeofNyooh4Y=
Subject key identifier: C2:20:D4:0C:5C:B7:D8:8D:88:72:76:28:86:2E:E4:5A:94:01:8D:EA
Authority key identifier: 42:AB:D0:F5:DC:AC:4D:0C:64:00:25:1C:CC:49:D6:FF:D9:75:43:BF
Certificate issuer: /CN=A9147609/serialNumber=42ABD0F5DCAC4D0C6400251CCC49D6FFD97543BF
Certificate serial: 1513
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqvQ9dysTQxkACUczEnW_9l1Q78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.mft
Manifest number: 1D46
Signing time: Fri 28 Mar 2025 16:55:32 +0000
Manifest this update: Fri 28 Mar 2025 16:55:32 +0000
Manifest next update: Fri 04 Apr 2025 16:55:32 +0000
Files and hashes: 1: QqvQ9dysTQxkACUczEnW_9l1Q78.crl (hash: 70+A2oMcAD+ES8NK/qdAMQ868XyxZ4SJzMMBrw04OgU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5395 (0x1513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147609
Validity
Not Before: Mar 28 16:55:32 2025 GMT
Not After : Apr 4 16:55:32 2025 GMT
Subject: CN=67e6d484-543b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:ae:56:37:e5:a4:ef:35:7f:3d:f9:5d:a8:
a5:63:a0:a1:84:07:62:1f:17:e6:0d:be:d7:ae:f7:
6c:4c:41:f3:33:cf:b9:69:b1:00:de:93:f0:85:c6:
f4:87:b0:8d:69:02:2d:47:23:46:99:f0:41:a2:fe:
b6:b3:50:5b:26:38:e3:19:98:b9:c9:e1:4e:6e:74:
41:b3:32:b9:d0:25:09:8f:7d:11:54:ac:64:80:0d:
ee:df:96:3d:d3:6e:9a:5a:a6:d8:a6:90:88:e7:a8:
f3:86:ea:b8:2a:29:de:86:5f:22:d0:dd:2d:70:02:
61:11:1a:02:50:ae:d1:2a:b3:41:27:1e:bb:2b:d3:
78:b8:29:36:e3:80:1e:36:9a:79:71:c0:4d:18:fe:
2f:03:81:b5:58:a0:df:23:5f:4f:c0:e7:67:8f:dd:
34:42:79:6d:aa:a7:55:7b:fd:0c:de:7f:4c:df:c5:
e9:6e:9a:01:7e:21:e0:77:21:05:27:5a:20:97:02:
8c:e6:c1:de:cc:26:fc:b9:49:7d:e0:fb:7a:f7:f7:
35:0c:0f:df:f2:3a:9b:c3:bc:05:5b:92:1c:fa:40:
f1:bf:b1:8f:54:2d:7b:dc:cf:fd:d2:58:b6:57:22:
18:df:03:40:b2:b4:31:0e:d6:1f:60:77:a6:a7:4a:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:20:D4:0C:5C:B7:D8:8D:88:72:76:28:86:2E:E4:5A:94:01:8D:EA
X509v3 Authority Key Identifier:
keyid:42:AB:D0:F5:DC:AC:4D:0C:64:00:25:1C:CC:49:D6:FF:D9:75:43:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqvQ9dysTQxkACUczEnW_9l1Q78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:6e:ed:af:1e:40:1e:1d:87:c7:1c:2b:a3:1a:bf:03:49:f0:
ee:37:d6:e5:23:09:c7:8a:37:37:f2:2f:16:aa:7f:bd:c3:6b:
57:f9:7a:9b:31:99:f5:20:2c:54:db:fa:92:7a:80:e3:d2:be:
08:65:b5:7e:62:fb:a4:44:00:71:67:ce:9b:2b:ab:8e:fe:31:
7a:f7:72:c8:15:36:95:a9:5c:50:df:37:12:a3:ff:51:9d:6e:
42:4d:d9:e3:f9:f7:b8:5e:36:8c:96:d6:4a:ed:54:b9:e3:bf:
01:e0:6b:7e:51:8c:89:ef:92:26:04:33:27:17:d5:ad:c6:9c:
5b:e0:81:44:c9:98:04:e3:50:5e:7c:bb:43:a6:36:f9:a6:f4:
c1:ac:6e:87:76:64:b2:1d:63:9e:96:66:06:aa:63:51:b4:d0:
33:71:2e:a4:97:ac:b5:d0:d7:74:4c:c3:61:f5:1e:5d:19:22:
f1:4c:6b:10:78:7b:3d:2a:42:9d:c9:f0:14:a5:c3:e3:86:bc:
23:21:da:5c:1e:16:06:71:c4:cd:5b:d5:a0:96:01:75:e0:6b:
68:d2:76:a8:73:9e:7b:ac:a2:db:0c:fd:eb:fb:42:fa:09:2d:
41:a3:e3:57:64:45:6a:96:48:7c:99:47:ac:40:4f:1c:c7:e5:
42:3f:88:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:13 2025 by rpki-client