Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
File: ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft (raw, json)
Hash identifier: pMw25YRbW/LyQLkOSEbG/6c9dM/N44Skpad6UsFuoA8=
Subject key identifier: 54:C4:C9:83:08:EB:F2:76:BC:5E:D2:87:3E:06:5D:3E:36:C5:7E:B8
Authority key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44
Certificate issuer: /CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444
Certificate serial: 08E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
Manifest number: 08DF
Signing time: Fri 28 Mar 2025 20:39:50 +0000
Manifest this update: Fri 28 Mar 2025 20:39:50 +0000
Manifest next update: Fri 04 Apr 2025 20:39:50 +0000
Files and hashes: 1: ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl (hash: qDEG4HfnRGQIdy2fX19BKM1YEyrItqQ5WofoHEPSkMg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2272 (0x8e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E3F8
Validity
Not Before: Mar 28 20:39:50 2025 GMT
Not After : Apr 4 20:39:50 2025 GMT
Subject: CN=67e70916-00c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:2c:07:91:52:54:81:1b:e8:03:26:a2:1b:
26:c8:f6:94:40:3b:48:f9:e2:5f:c5:b4:29:89:2a:
29:68:2b:42:96:da:9f:b0:61:b5:1c:97:f3:d3:58:
ce:a7:09:fa:bd:30:7c:5d:63:c5:15:de:f9:1a:f0:
41:4d:5e:a9:16:ef:12:e5:57:b8:a8:25:11:c9:24:
6f:13:a7:33:2b:f5:95:53:bc:49:bc:f2:85:68:18:
24:57:04:f5:0a:d2:d9:16:d4:d5:a1:d3:01:b4:85:
d7:da:86:50:49:90:59:26:9a:19:bf:13:41:27:c5:
e5:ae:54:2c:a9:bd:bd:4b:97:1b:51:c5:c1:36:25:
d6:6d:bf:12:d8:0e:51:e9:3d:28:0d:55:32:7e:de:
18:e6:c8:fc:90:0e:07:7e:15:74:18:42:78:7f:26:
c8:00:21:df:dc:33:bd:dd:f6:fc:1c:f0:2f:17:69:
0e:93:ad:8a:1c:3a:07:57:ef:3f:35:e7:64:df:b2:
5e:d3:95:c1:5a:f0:80:a1:bc:9e:e5:1c:93:53:a2:
ab:60:68:6e:57:87:6e:b4:be:d6:ca:ae:1f:36:2c:
0c:c9:dc:a4:be:e6:43:21:e4:65:27:d3:a2:c2:ae:
f1:9b:3d:98:38:57:0b:a9:eb:b6:27:4e:6d:00:7e:
ef:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C4:C9:83:08:EB:F2:76:BC:5E:D2:87:3E:06:5D:3E:36:C5:7E:B8
X509v3 Authority Key Identifier:
keyid:64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b4:ba:c3:7d:13:c6:2a:52:1a:66:18:55:b0:64:3a:b5:f2:
0a:e8:6c:1f:d4:93:bf:46:b0:0d:99:ea:86:08:3c:35:e5:40:
f7:fa:a7:de:4c:6a:9d:0a:7a:f5:df:83:c9:d6:31:ba:f0:b9:
34:9b:9f:e5:e0:f6:4d:35:12:43:6b:40:c7:7f:d1:45:5b:02:
06:44:0b:66:72:1c:d2:f1:77:11:4a:81:09:57:af:77:8d:09:
e5:08:e7:d6:6a:85:be:6a:f6:4c:9c:2c:cf:70:a6:c5:d5:9e:
9f:55:a7:6c:92:aa:ef:04:b2:51:c0:89:a5:5c:95:37:2f:0e:
09:4c:72:23:60:88:ec:e6:e6:71:d0:c6:af:2b:ba:d0:6e:9a:
57:0b:d3:d7:e6:51:ba:be:da:d3:97:c0:5a:c2:bb:5c:91:c5:
0e:3e:97:6b:ac:de:95:47:c0:99:e4:72:09:5c:8a:16:5b:ac:
de:01:60:f7:4b:35:16:d8:c2:f6:f4:e3:09:b6:47:21:f8:50:
5c:aa:c3:1c:26:82:80:7d:e8:f2:38:cd:e3:10:58:4c:84:df:
10:03:18:5c:87:bb:f0:75:d8:1f:02:4b:6f:fe:05:46:72:b2:
f4:e6:21:f8:b1:25:b0:40:db:10:a0:91:b1:8b:fe:7f:38:20:
ee:40:6b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:30:05 2025 by rpki-client