Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft
File: qbsN-21P9jtyiDO-CtZiN5bsihk.mft (raw, json)
Hash identifier: IjrZNO3IW4kK/kY4yvphIHkHCyBNrc73B/aOdeaob5M=
Subject key identifier: B2:B1:4C:05:C1:32:09:D4:63:FD:86:51:2D:EC:6D:37:D1:91:9E:63
Authority key identifier: A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19
Certificate issuer: /CN=A91EBBD7/serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19
Certificate serial: 0A14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft
Manifest number: 0A0E
Signing time: Fri 28 Mar 2025 20:03:29 +0000
Manifest this update: Fri 28 Mar 2025 20:03:29 +0000
Manifest next update: Fri 04 Apr 2025 20:03:29 +0000
Files and hashes: 1: qbsN-21P9jtyiDO-CtZiN5bsihk.crl (hash: sxDef9al7oXjsAnTf4HDYG1z/jT1LbtYyemP64ZvwKM=)
2: 651072686CBB11EA95256D30C4F9AE02.roa (hash: RbBtMUxEM5O1piu47myWbtaMm/ZIwxdcYTXVUwgD12E=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2580 (0xa14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBBD7
Validity
Not Before: Mar 28 20:03:29 2025 GMT
Not After : Apr 4 20:03:29 2025 GMT
Subject: CN=67e70091-f76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:a5:d9:3a:1c:b4:1f:47:5a:b6:5b:4a:9f:
bf:c9:11:06:f0:53:46:6a:c4:e0:41:f3:eb:ed:db:
85:ab:04:21:de:1f:86:43:be:db:81:61:6b:5d:58:
db:8b:23:3a:1a:61:a6:3d:7e:19:d8:73:7a:67:08:
4a:fa:77:ed:4d:15:79:e8:0b:43:d8:a9:0f:54:d3:
1e:57:55:b3:37:84:6e:b0:5b:7e:e0:2d:86:08:b3:
e6:1e:63:76:0d:7c:72:17:02:1a:4c:f9:a8:e8:22:
0e:a6:a4:78:00:7e:97:af:4d:7b:16:31:56:02:19:
ce:60:4e:bd:4f:01:5a:9c:cf:52:ef:dd:6a:8e:fe:
09:b3:7d:05:ed:05:1f:78:0c:71:0f:e5:7e:6b:af:
19:3a:e7:3b:d3:6e:2d:17:5a:cc:24:f2:b9:16:ea:
c5:cb:e4:d7:88:d2:b6:eb:3b:66:3d:f9:33:e3:18:
0f:d8:71:a5:46:80:33:50:03:cd:96:42:62:7f:c6:
12:b2:df:0f:61:a7:4e:33:f3:f0:3e:b0:cf:99:a4:
df:f0:d9:14:f3:41:3b:f3:c2:bc:6d:45:b4:f3:8e:
d5:00:c0:d4:63:57:66:4f:16:5b:5e:4f:8f:75:c4:
ef:f6:12:42:60:17:f9:a3:0d:51:e1:1f:ff:e6:01:
2d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B1:4C:05:C1:32:09:D4:63:FD:86:51:2D:EC:6D:37:D1:91:9E:63
X509v3 Authority Key Identifier:
keyid:A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:65:a6:96:0a:93:8c:cd:c7:46:ab:1c:61:6c:1f:5c:37:bd:
5c:c3:bc:c3:e1:87:37:c2:c9:1d:0f:fc:c4:99:ed:f0:54:87:
73:c0:98:5e:af:5e:fc:81:4b:9c:c5:3a:7b:89:99:34:cc:48:
9c:11:ee:00:ae:1e:3e:3d:2b:ff:8a:0b:fd:e7:a4:49:83:3b:
bb:a0:49:52:e5:64:1a:21:fe:d2:9b:52:67:ca:f8:6e:c2:6d:
26:7b:93:19:fa:d6:11:7d:de:65:b3:f1:a8:94:5c:9e:ad:c7:
cd:ae:d2:5a:69:be:ef:0a:c1:03:17:5c:3b:87:e6:3b:f3:29:
f5:2f:80:c9:08:6a:ad:13:27:23:70:0c:94:8b:36:a9:2e:1b:
20:15:ba:ed:7d:36:b5:f9:f8:90:c2:e9:eb:e4:a8:a3:5a:36:
aa:e0:5a:84:5e:83:55:da:8c:c6:75:e6:94:47:ab:9b:f8:8b:
88:cb:c8:9e:60:67:66:4e:96:91:cb:dc:ed:85:50:68:82:64:
d8:a2:8f:0e:0d:73:f4:56:63:a4:fb:43:98:70:a6:67:ef:0a:
04:f4:54:ba:93:01:38:6f:bc:cc:a1:e6:a4:17:02:7f:49:7a:
0c:54:cb:bf:7e:6f:f9:cf:b5:18:e2:b4:b3:5c:4f:92:b6:0a:
ad:66:46:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:32 2025 by rpki-client