Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
File: BQIPvxAg_WO-V9oblwSwqoEDREo.mft (raw, json)
Hash identifier: 2rWzuVMQwMMGTIIlbEu2pnw3e+fuxj9Sz62XE/7pGSE=
Subject key identifier: 3F:50:2A:F4:D5:0D:DB:75:F3:92:0B:D8:5A:FF:2B:B4:E0:2B:E7:8C
Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A
Certificate issuer: /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
Certificate serial: 1CC1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
Manifest number: 1CB1
Signing time: Fri 28 Mar 2025 16:17:06 +0000
Manifest this update: Fri 28 Mar 2025 16:17:06 +0000
Manifest next update: Fri 04 Apr 2025 16:17:06 +0000
Files and hashes: 1: BQIPvxAg_WO-V9oblwSwqoEDREo.crl (hash: YMbvPdk+EkZYxWuoV6BcMwMhR/uaCKOtUF4JRF9QnTs=)
2: 8E652A7AC77611E68B1CDE6AC4F9AE02.roa (hash: nQvCGi6jeXRQddJ1rEuK0BsRcyU/PM81aNvBcFuVAoE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7361 (0x1cc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A140
Validity
Not Before: Mar 28 16:17:06 2025 GMT
Not After : Apr 4 16:17:06 2025 GMT
Subject: CN=67e6cb82-109a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:bc:74:68:e4:44:14:a6:c3:95:4e:41:8b:
cd:db:c8:46:57:7a:f2:98:66:28:b7:0b:c4:e8:a5:
60:5d:47:7a:57:82:40:45:50:c1:e6:d7:dc:bb:a7:
67:1b:1d:07:ef:d1:03:45:74:ec:f5:ee:3c:74:e9:
f3:59:ac:6f:d8:19:1c:16:1c:1e:7f:42:65:ee:7a:
c8:e7:a5:d3:59:ba:76:02:14:48:46:3d:8c:3e:42:
8e:a9:52:4e:47:25:54:7e:61:3b:de:57:57:47:7a:
e2:85:b6:82:5d:02:6e:24:03:8f:4b:5d:7a:e8:04:
4b:44:48:5b:62:35:8a:90:74:ac:a6:bc:e6:db:50:
f9:3c:e5:dc:cd:fe:4d:d5:a9:a0:81:90:75:5b:63:
6a:19:b6:29:ee:68:e6:d3:98:b0:6a:2e:da:8b:0c:
9e:56:e5:d7:e7:c3:5f:18:4f:80:09:ec:68:71:18:
39:a3:1a:22:cd:59:0d:35:1a:02:49:f7:25:ab:66:
dc:46:b1:89:63:a5:d9:e1:ca:8e:f9:2f:80:df:a8:
0a:cd:c9:4c:97:4f:ce:f3:ed:ee:a3:3c:23:ca:d0:
83:af:31:bb:14:d9:69:c6:ef:cf:5e:00:0e:95:9e:
6c:b0:df:6b:37:58:72:7d:29:18:8f:2f:c9:7e:b3:
bc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:50:2A:F4:D5:0D:DB:75:F3:92:0B:D8:5A:FF:2B:B4:E0:2B:E7:8C
X509v3 Authority Key Identifier:
keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f4:b2:76:3e:1a:70:91:18:1f:ec:18:3c:bb:c9:a8:0f:28:
58:04:94:92:c5:fc:ee:9e:ff:2f:15:fc:34:b1:86:41:84:8e:
1e:08:bb:45:18:57:f4:38:ae:71:20:5b:87:ed:58:50:2d:57:
78:95:1f:02:ff:85:70:9b:58:29:1a:ce:e6:ab:aa:9e:c2:84:
f2:f8:c3:5f:fa:0e:b3:7f:45:30:cd:f8:ac:c4:31:13:18:a6:
04:81:f8:75:29:e2:92:38:84:06:c1:1d:f6:4e:24:29:26:63:
65:fc:8f:cb:c5:ed:f9:51:ef:64:e9:97:88:14:62:fe:0f:b2:
5e:30:9f:e5:df:49:07:45:8d:a5:1d:8e:bf:22:d5:c3:44:96:
77:5f:f6:50:87:2c:94:da:a0:21:80:e0:89:98:26:0b:b6:09:
fc:8a:ba:bc:3f:7a:10:8c:9a:8d:bd:b6:8f:a2:a4:f6:3c:62:
ac:d9:d7:95:bb:ff:5a:ce:98:73:75:2a:2c:bc:e3:7e:1f:fe:
9b:fa:d2:79:fa:22:a5:d6:57:22:ee:8b:f1:49:26:5b:2e:84:
b7:6b:5d:77:d8:f8:b5:af:f2:e4:ae:38:35:41:b4:e4:bb:a7:
d3:c4:76:f7:a3:b2:87:46:3c:34:bb:78:c8:4a:bb:77:0f:ea:
63:e6:e2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:52:10 2025 by rpki-client