Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
File: NMONZkm5DWjTzmwJ8euU0-V5_J0.mft (raw, json)
Hash identifier: uA//aSFpjhPWDHG7VHS3AlZPrbJGZaA/t4wgU9FufiM=
Subject key identifier: 50:D5:BE:DD:69:18:B2:DB:0C:44:71:0D:C5:EF:7D:51:33:03:CF:A0
Authority key identifier: 34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D
Certificate issuer: /CN=A9192491/serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D
Certificate serial: 0DE7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
Manifest number: 0DDE
Signing time: Fri 28 Mar 2025 17:59:32 +0000
Manifest this update: Fri 28 Mar 2025 17:59:31 +0000
Manifest next update: Fri 04 Apr 2025 17:59:31 +0000
Files and hashes: 1: NMONZkm5DWjTzmwJ8euU0-V5_J0.crl (hash: pEuwQNmb386ugttAoKH78F1bCZiIxK5GIfPhEn+B58s=)
2: 54AE11C6AD3211E9B3BC7385C4F9AE02.roa (hash: a2Zz+SuX3DCfdSuIf8QT+Sa+cHmZnSxsIqO80zeBe3c=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3559 (0xde7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192491
Validity
Not Before: Mar 28 17:59:31 2025 GMT
Not After : Apr 4 17:59:31 2025 GMT
Subject: CN=67e6e384-d0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:a3:5d:3c:fa:e1:92:97:71:76:79:d4:89:
63:3b:63:e3:2c:8b:d4:bf:fd:ca:aa:58:0e:f4:30:
67:56:85:49:58:55:fd:20:59:01:bf:d4:08:c2:0e:
5b:13:ce:65:e6:41:4a:e1:56:0a:53:82:ae:1b:98:
be:66:5e:4f:b8:59:b9:85:2f:68:af:e3:c7:cc:e3:
17:3e:79:cb:21:c7:09:6f:fc:61:5b:8e:b6:93:92:
f7:5b:3d:54:07:f7:01:3b:ec:2f:1f:61:57:50:84:
17:56:2f:22:a3:00:d3:8c:54:df:5f:73:ae:71:e5:
9b:96:7a:ca:44:70:e2:90:f5:91:83:35:28:28:65:
2f:84:98:cb:f0:81:08:d6:65:a8:b4:b4:04:37:66:
28:36:76:70:ae:8d:06:77:eb:5b:b3:36:6d:3f:1a:
8d:ad:6d:5f:36:ce:5e:ab:29:60:7d:73:cb:97:92:
ba:b6:8e:c7:1d:d9:36:d4:d1:5e:21:d1:6e:cd:ee:
d3:fd:7e:c4:61:a1:d2:75:7d:63:0a:9f:4a:a8:10:
31:9c:f7:d0:b3:c7:70:3e:34:8b:c5:90:49:27:0d:
50:4a:a1:15:ce:7f:17:f3:4f:f1:77:93:9a:39:65:
d1:af:17:b4:f5:4d:a3:ed:d8:6f:be:a1:51:aa:03:
35:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D5:BE:DD:69:18:B2:DB:0C:44:71:0D:C5:EF:7D:51:33:03:CF:A0
X509v3 Authority Key Identifier:
keyid:34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:e1:7e:fc:e4:3d:b9:18:3c:8a:22:16:19:cb:9a:db:61:49:
e9:4b:6a:4a:5e:77:61:46:0a:83:13:00:eb:ea:e0:15:38:6d:
76:84:30:6e:bb:2b:8f:6a:54:d2:e9:f3:bb:39:b3:8f:dd:88:
a8:d6:95:54:54:b2:f9:a5:de:0b:f6:38:61:af:50:6a:ba:2c:
7b:18:ec:e8:25:74:af:70:48:81:5b:e1:3e:ca:20:d3:fe:27:
65:93:38:17:ed:8b:4a:c5:09:ab:d3:aa:3a:25:6d:71:81:f8:
46:07:d1:fe:df:1f:95:7b:c6:a0:ea:f7:d2:83:ae:f9:fe:cd:
0c:e0:b0:81:dd:44:68:f5:e5:fe:48:4a:5a:7f:9b:a7:31:aa:
bf:7e:5f:c4:3d:cc:e4:4c:5b:c3:96:d6:85:73:4c:00:50:a8:
7c:4e:3f:8d:61:6d:3a:e6:d7:75:a1:6f:bb:93:a6:53:fa:ef:
a9:40:b3:8f:73:56:e0:6d:1d:6f:84:61:8e:b0:f6:0e:26:28:
07:85:be:ee:4a:60:05:e3:6b:09:55:82:64:b0:c6:47:1c:a7:
66:48:67:0b:e0:7b:9b:73:88:4f:0b:af:98:89:6f:fd:b3:fc:
fa:8d:f0:15:b6:f7:fb:26:c7:34:a2:9d:5b:c2:cb:81:53:3c:
68:ec:23:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:37 2025 by rpki-client