Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
File: zl8rQ5utW-vicqch6qzDj6rdSbQ.mft (raw, json)
Hash identifier: xe0igz++r7KHCbNyWkCmFVaY03iU3ULKONHZG202wMQ=
Subject key identifier: 28:53:C0:4C:57:E4:C5:A7:86:20:57:8F:D9:1B:1D:79:27:20:6A:71
Authority key identifier: CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4
Certificate issuer: /CN=A91AB9A1/serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4
Certificate serial: 062D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
Manifest number: 062D
Signing time: Fri 28 Mar 2025 14:40:48 +0000
Manifest this update: Fri 28 Mar 2025 14:40:47 +0000
Manifest next update: Fri 04 Apr 2025 14:40:47 +0000
Files and hashes: 1: zl8rQ5utW-vicqch6qzDj6rdSbQ.crl (hash: nW7sHs3Ecxau20+reCsUBDelF7jZ42dviZ4WIkO+tGY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1581 (0x62d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB9A1
Validity
Not Before: Mar 28 14:40:47 2025 GMT
Not After : Apr 4 14:40:47 2025 GMT
Subject: CN=67e6b4f0-a8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3b:a5:d0:b9:9d:53:97:f2:94:4a:b0:e2:38:
50:83:90:80:ca:53:29:6a:c8:96:71:56:fc:f5:87:
96:4b:55:2a:34:09:dc:95:24:8a:c8:d4:6f:ba:4a:
40:91:62:f0:59:6b:87:a7:9e:a2:68:67:37:05:87:
8d:bc:cb:db:90:b1:c5:d4:fd:48:f2:4f:76:26:ea:
48:99:ad:8f:95:ca:3f:d9:8d:50:d2:4f:fd:1b:fd:
a0:78:8d:50:77:bd:3d:9e:34:bd:12:a4:fc:81:cd:
72:e7:18:00:06:5e:8c:76:bf:47:a8:c3:3a:dd:77:
3f:bd:3c:9d:a6:28:45:4c:de:1d:09:a9:73:aa:2d:
93:9e:bc:e6:a0:f6:84:26:64:22:d9:c2:56:a6:e8:
19:f5:1c:ff:b5:be:43:1b:3f:05:c8:74:61:a9:1e:
f5:1a:93:c9:d3:18:21:09:1f:85:69:a3:b7:bc:b6:
4a:33:ac:2c:34:57:e7:16:c5:75:7a:09:87:83:ee:
8d:bb:e1:ec:f8:bc:b2:d8:78:e7:5c:2c:6b:3d:64:
e1:77:cb:52:40:9c:f8:53:10:8b:fd:70:cc:93:00:
30:cc:88:77:13:86:45:0f:92:9f:e7:df:a1:cc:5b:
3e:44:f0:23:6f:69:3c:05:d0:20:cf:79:b6:8b:c3:
d4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:53:C0:4C:57:E4:C5:A7:86:20:57:8F:D9:1B:1D:79:27:20:6A:71
X509v3 Authority Key Identifier:
keyid:CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ff:ef:98:25:3e:14:cd:de:74:74:56:1f:b4:5a:66:00:6b:
0e:48:33:00:60:72:70:e3:96:61:48:15:90:42:ad:6d:01:e1:
c3:38:22:e5:98:42:e4:be:f2:a1:cd:9b:4e:a9:cf:1d:51:a2:
ed:d4:8d:4c:f6:4c:9b:db:09:90:59:1f:57:67:92:1f:a2:d3:
71:c9:80:29:02:ce:34:ca:f9:db:05:b9:13:e3:68:0c:9f:35:
51:94:7d:2f:84:b3:ee:2d:2e:66:87:c9:2a:06:2a:67:ce:d2:
fd:11:13:ca:a2:6a:c5:0b:38:a2:b4:d9:e8:5b:54:35:f1:c7:
96:bd:2d:0c:0f:ec:f8:be:b6:0e:8c:95:d6:ae:20:04:36:eb:
09:85:2c:45:d9:4b:0b:1f:f3:4f:9a:d5:37:36:d0:e1:0f:08:
f0:13:a5:3b:fa:4e:a4:cc:9f:3f:7d:50:64:aa:f0:1a:89:5a:
fa:67:38:4d:44:70:ac:7e:c5:0e:37:e4:57:9d:65:09:f3:b9:
f3:a3:09:d2:e8:63:50:93:c1:9a:ea:34:db:f3:1c:bc:f9:be:
75:be:7a:f9:41:3b:a6:63:18:cb:f2:cd:41:14:72:44:5a:40:
05:ee:de:07:3f:24:8e:fd:2c:fb:d6:38:6a:44:ff:ee:3f:36:
d2:5d:29:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:52 2025 by rpki-client