Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft
File: qDsByW55TejPjxyfqGQhKW2occQ.mft (raw, json)
Hash identifier: CryLUHq+biHiwS25Qoh8JhXM84XyL17wNS236Lntb1k=
Subject key identifier: 1A:65:17:C5:C1:86:90:13:BB:A6:AE:56:8F:A1:D1:44:E1:4F:91:8B
Authority key identifier: A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4
Certificate issuer: /CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4
Certificate serial: 1C44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft
Manifest number: 1C20
Signing time: Fri 28 Mar 2025 16:19:16 +0000
Manifest this update: Fri 28 Mar 2025 16:19:15 +0000
Manifest next update: Fri 04 Apr 2025 16:19:15 +0000
Files and hashes: 1: qDsByW55TejPjxyfqGQhKW2occQ.crl (hash: xljxYUqmYWTgJ5x/MwcE9yOEouyqH1Li8bvlfdTmuzU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7236 (0x1c44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B978
Validity
Not Before: Mar 28 16:19:15 2025 GMT
Not After : Apr 4 16:19:15 2025 GMT
Subject: CN=67e6cc03-fc64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e0:a7:49:3f:8c:72:a3:97:82:5b:71:d5:ab:
6b:9f:15:66:0c:9a:6c:d8:c5:90:13:e4:d9:b2:11:
fe:82:12:51:30:65:1c:70:59:be:d1:05:f4:11:fc:
34:a9:23:df:ff:90:b1:a3:5c:a1:d0:8f:2f:02:b7:
6f:08:b2:a6:6f:cf:69:f7:49:6c:56:32:cb:71:89:
10:03:21:ce:48:df:35:44:ac:98:75:e0:b4:c2:b3:
a5:bb:ee:80:c6:5e:af:72:49:04:c9:25:e7:66:8a:
e0:8a:df:af:06:fb:df:16:6e:a2:69:2d:8f:e2:d6:
6d:e5:d7:ce:ed:91:af:89:77:6b:87:ac:d6:90:ff:
1d:16:b5:2e:55:6d:cd:97:ff:e2:a9:e2:60:c1:44:
b5:fd:4d:1b:a5:1d:a2:63:ae:a8:28:6b:25:bb:1d:
1b:c6:68:86:94:d4:b7:fc:27:f0:18:ef:57:d1:91:
66:ca:88:c1:d5:48:0c:25:d5:0a:e8:9b:d7:0a:7d:
f7:bd:ab:49:a2:38:db:3b:d7:8e:db:6f:5b:0a:35:
8b:54:d0:1c:b6:58:08:d1:e9:c5:be:69:ce:96:e9:
88:d0:57:6e:71:9f:bc:f2:c1:89:ac:d0:20:a1:23:
cc:e5:47:7b:c1:b3:d8:7e:c7:21:39:99:4c:4d:2e:
07:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:65:17:C5:C1:86:90:13:BB:A6:AE:56:8F:A1:D1:44:E1:4F:91:8B
X509v3 Authority Key Identifier:
keyid:A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:1e:8f:94:ec:d7:c3:9b:7a:2c:e7:c4:93:ca:a7:3a:7f:76:
6b:d9:ee:f9:57:36:65:3d:6a:28:9d:d0:7d:c9:54:75:1c:1e:
1e:dc:84:1c:25:4b:d6:1a:a9:af:84:5e:86:cb:fb:da:e3:5e:
bf:95:f0:a1:b6:16:07:b6:6f:e0:8a:df:f0:f9:4f:01:1c:a3:
e7:4d:01:f8:2e:32:ed:76:4c:a4:16:b2:d2:53:8a:65:d1:4a:
0c:b4:58:54:b2:21:d4:02:fb:c5:20:bb:14:3b:46:10:58:8f:
8f:c9:3e:9d:6e:47:bf:88:85:68:f7:48:ee:68:b4:8c:57:6f:
27:49:2f:af:bc:cd:82:04:a8:78:35:6f:4f:b5:0b:8a:29:cb:
32:c8:64:8d:51:84:31:2f:20:32:09:9d:a0:1f:67:ca:f5:70:
05:34:91:f3:b6:73:b9:73:ea:61:83:a4:79:d9:c2:97:02:3f:
8f:e8:83:aa:63:41:e9:12:62:b7:55:c5:93:3b:ca:88:20:fb:
d5:c6:a3:d0:a9:9a:1b:db:83:59:92:ae:39:f9:16:c4:6a:d0:
98:b7:86:db:ba:2d:8d:1e:a1:22:69:a7:29:fe:90:d2:2f:fc:
56:96:0a:b0:80:7b:bc:07:fd:a4:ba:55:24:10:83:1f:4b:8f:
72:5c:16:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:47 2025 by rpki-client