Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
File:                     Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft (raw, json)
Hash identifier:          fwInuqTFkEkqHO7tYHDCODquBpS+j5ZLPzpbwHcC4pc=
Subject key identifier:   44:0F:77:FE:87:2C:81:C4:D7:3A:0E:C2:3F:F2:2C:AB:89:78:1B:1F
Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6
Certificate issuer:       /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
Certificate serial:       0AA5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
Manifest number:          09FE
Signing time:             Fri 28 Mar 2025 20:21:48 +0000
Manifest this update:     Fri 28 Mar 2025 20:21:47 +0000
Manifest next update:     Fri 04 Apr 2025 20:21:47 +0000
Files and hashes:         1: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl (hash: afAE0Jv9Cb0mQAAjqn5rS36B3gcoA5P3bCmiSvTy12k=)
                          2: C3E2252E205F11EE8117111CC4F9AE02.roa (hash: b89a9XRc4AM1AMlF52w1xwkFcE20RCssOx3I+fNCh44=)
                          3: 8626FFC65AE511EBA452D33EC4F9AE02.roa (hash: p+jw9LTgVlA4Fas32lm4S+s3Nf7H/SOUto4eg7ZR3k4=)
                          4: 0EA44D4E5ADD11EBB9CEE568C4F9AE02.roa (hash: 544CGw77adzKZSVB6a/EsmcNRdkcJyyJICXTpEPCpPk=)
                          5: 84023C06D24611EABDDF5344C4F9AE02.roa (hash: 1tQbOZGCpdjO+Y55KBqDyrU6PI7sCOp/TxXvN4NzOO0=)
                          6: 553170245AC511EBA052F663C4F9AE02.roa (hash: zZIIEfeakO+43e0JDOBIzAkL5O9TeO1Bv2dEETveidg=)
                          7: 61EFB2ACAC3611EDA5995F3FC4F9AE02.roa (hash: 4F/pO+DMZTaTanjCd4dRpqI6rwchzZD2B/zrGpX4dy4=)
                          8: DCF88EAE5ED811EBAB677671C4F9AE02.roa (hash: +xAAC0Q1keCic3iZwKSmyffjMCHYPPvNkq4JH4+m/zo=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2725 (0xaa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911647C
        Validity
            Not Before: Mar 28 20:21:47 2025 GMT
            Not After : Apr  4 20:21:47 2025 GMT
        Subject: CN=67e704db-47c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3c:8b:12:93:6b:f3:c2:5c:2b:e7:fe:81:40:
                    e3:57:c7:b1:41:cc:f9:15:91:46:70:10:f4:ca:c5:
                    d5:58:fe:d0:75:6e:a2:09:01:ed:77:f6:3a:95:42:
                    af:f3:32:d6:fe:d4:ff:c1:8c:cd:2c:24:f4:ad:d7:
                    99:c9:a2:a0:8a:17:3a:6f:35:3c:19:30:61:27:28:
                    9f:56:28:29:c6:18:5b:15:c5:05:7b:93:44:24:6c:
                    76:67:42:f8:1d:02:2a:9a:4b:0b:7c:d9:8d:41:9e:
                    5c:34:ab:74:f4:2c:4c:a4:25:25:08:ae:3a:1e:6f:
                    2d:a6:f6:fc:9c:40:01:80:bd:7f:c8:60:07:db:7c:
                    21:ba:27:d5:b1:c7:12:aa:64:26:a7:8a:77:80:e4:
                    eb:9c:82:fc:8f:ad:22:7e:11:ed:48:08:1b:22:1d:
                    97:6b:34:1c:01:7a:30:fb:1b:1a:de:41:f6:2d:33:
                    ed:f6:93:81:63:03:94:ee:db:b3:3d:5d:a5:ae:e8:
                    08:27:86:5c:71:c4:25:d1:a4:73:12:80:85:ed:0f:
                    bf:a5:0b:c1:99:01:b6:f0:26:40:cb:60:27:67:ef:
                    c6:a6:df:52:27:9f:80:e2:79:2b:4c:12:fb:ec:cd:
                    01:2b:ee:df:f7:05:4d:a2:e0:d9:d5:06:8f:f5:50:
                    e6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0F:77:FE:87:2C:81:C4:D7:3A:0E:C2:3F:F2:2C:AB:89:78:1B:1F
            X509v3 Authority Key Identifier:
                keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:fc:24:4f:52:ba:8f:30:37:ea:83:0e:4d:eb:85:3f:6e:43:
         9a:53:9c:4c:82:16:ba:61:47:d2:14:25:db:e5:71:86:5d:82:
         75:35:cb:5f:8d:b4:9e:72:bb:6a:d0:85:92:00:89:9b:2a:80:
         4e:0b:32:40:35:0e:4e:0b:30:16:6d:dd:59:10:a2:55:52:a9:
         84:56:fb:24:fd:0a:53:f0:99:6a:bd:a9:2f:21:32:1d:a9:ed:
         be:d5:67:96:e3:63:22:3c:59:d3:de:61:0c:34:f8:dc:71:4b:
         7c:ca:77:3c:06:00:4d:3b:a8:c5:e9:5e:82:b1:4e:c2:b9:65:
         4e:65:23:a2:c3:77:20:5f:d1:b3:69:1e:66:04:51:08:fa:30:
         0f:02:d7:96:45:2b:0f:42:21:3a:b3:b0:0b:d8:2d:15:64:1c:
         13:f2:6e:5c:56:a2:f3:8c:f3:11:d5:97:22:33:8a:70:15:ed:
         9c:75:c9:1f:65:f5:f1:c0:7f:ad:35:f8:38:bd:00:a5:61:d1:
         6e:9b:6f:ef:02:fe:0e:6f:df:5a:ad:12:29:a9:cd:b7:69:44:
         93:7d:a5:07:ab:19:9a:6c:5d:00:3c:6e:d9:74:73:56:24:a2:
         f7:d3:42:29:ee:0d:f2:55:7b:10:ac:88:92:57:f2:41:43:3e:
         59:c9:87:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----