Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
File: veqI5TAIig7Hf54Ozuoz5gHhnPc.mft (raw, json)
Hash identifier: cuGLObYjfI5KMihR0jLX5cEiyuQZv7i48y5WPp/DT1g=
Subject key identifier: 02:6B:6B:47:A2:DB:F1:46:62:2E:B7:FC:8E:0D:87:39:4B:42:8C:69
Authority key identifier: BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7
Certificate issuer: /CN=A919C82F/serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7
Certificate serial: 0A93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
Manifest number: 0A8D
Signing time: Fri 28 Mar 2025 19:46:57 +0000
Manifest this update: Fri 28 Mar 2025 19:46:57 +0000
Manifest next update: Fri 04 Apr 2025 19:46:57 +0000
Files and hashes: 1: veqI5TAIig7Hf54Ozuoz5gHhnPc.crl (hash: 4zrtV2v6MS1XQoIQ3XZaQuC+2Y82wgqBYyKCMR8vtNo=)
2: D6D22DBC53CD11EA9301951AC4F9AE02.roa (hash: +5FC7zIIAi+tOq/0kiPN0dlteJZUS+cJEjJZZiGDU7I=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2707 (0xa93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C82F
Validity
Not Before: Mar 28 19:46:57 2025 GMT
Not After : Apr 4 19:46:57 2025 GMT
Subject: CN=67e6fcb1-349f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e9:12:8a:1c:98:f0:f5:89:54:76:0c:0e:73:
76:20:0c:a1:ed:2d:08:f4:9c:c8:4a:36:8a:03:81:
b6:ee:39:bf:f5:40:a4:a9:d9:c2:aa:e6:83:ed:24:
b6:fc:a0:89:fd:1f:7d:b9:54:9e:eb:45:63:bb:60:
85:2b:d5:77:86:95:7b:ac:33:ef:98:e0:eb:6a:06:
2a:e4:b5:6a:3e:0e:20:b2:fd:b5:76:27:04:c1:6e:
21:fc:20:79:0b:bd:1a:1e:48:84:46:44:96:5e:c0:
21:d1:b4:64:82:80:7f:b8:62:9e:dd:1c:14:8f:5d:
0d:1e:a4:5d:4c:fc:10:dc:fe:ff:b5:7e:87:ba:b5:
08:80:ef:c7:60:7f:58:f4:d2:16:46:7e:90:22:a3:
18:c5:0f:e7:d7:93:a7:87:a5:9e:f1:14:80:2b:64:
e1:df:05:22:1f:34:06:00:f5:5a:6b:82:05:8e:81:
f0:da:50:74:84:fa:86:06:a1:7d:d1:fd:23:f4:5b:
a2:25:d2:dc:3c:91:57:25:c7:fa:0b:ff:f3:9b:09:
91:af:14:fc:b5:20:89:12:df:a3:cf:98:24:65:8d:
83:71:42:13:e2:49:2e:cb:c0:cb:8b:cb:47:31:c6:
b7:ad:a0:ea:1c:1b:2a:45:71:43:b0:99:ad:0e:17:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6B:6B:47:A2:DB:F1:46:62:2E:B7:FC:8E:0D:87:39:4B:42:8C:69
X509v3 Authority Key Identifier:
keyid:BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:ae:d9:98:dc:04:f3:0f:1f:3d:b7:f0:6b:9f:85:a8:1e:0c:
04:97:a4:19:b8:91:d7:1d:77:96:c3:29:98:a4:0d:36:68:52:
cc:ed:2d:bd:45:44:cf:01:91:44:5c:e5:f0:17:6b:49:7b:30:
cc:ab:3a:12:00:3d:c9:fc:6e:3f:e6:1c:e8:f5:8c:3b:6c:10:
56:99:0c:70:69:6d:79:b5:dd:97:db:e7:c2:0d:13:3f:aa:9f:
08:1e:95:90:ba:55:1d:c6:07:ca:fb:95:06:48:7a:95:41:3f:
f3:71:18:ab:38:a4:64:82:4c:ed:6e:0e:72:4f:33:62:79:23:
87:da:c8:c7:b6:89:7f:90:b2:19:e9:94:a5:64:84:e0:bc:33:
76:af:e8:39:6b:f9:c9:fe:c8:dd:7e:1d:17:cb:57:b3:03:c7:
ef:31:95:96:24:3a:e0:a9:95:cc:d0:db:8a:99:a3:13:3c:66:
1e:e0:51:f5:63:c6:db:b1:82:36:ef:4b:1a:0c:19:b0:c7:30:
eb:e8:1c:7c:5c:ab:67:cf:44:83:e4:50:0f:c2:da:8b:df:bb:
34:d8:a7:c5:71:ac:c6:6b:8c:3d:05:63:56:cc:c3:97:b3:f1:
ed:34:35:5b:c7:6f:c9:63:18:25:01:42:b2:25:6b:a3:36:c8:
1d:aa:55:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:37 2025 by rpki-client