Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft
File:                     h7LA6ClUHS71JmOF6zlGuNUpBgg.mft (raw, json)
Hash identifier:          rOmDO6RopQiFJAC27T6Ubpgaz9MOOhsJ/OyQvO3Qxnw=
Subject key identifier:   C1:81:38:87:FF:C1:6F:09:63:D1:56:28:6B:EE:7C:CC:7D:75:4A:C9
Authority key identifier: 87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08
Certificate issuer:       /CN=A911B5B0/serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608
Certificate serial:       081A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft
Manifest number:          07FE
Signing time:             Fri 28 Mar 2025 21:13:22 +0000
Manifest this update:     Fri 28 Mar 2025 21:13:22 +0000
Manifest next update:     Fri 04 Apr 2025 21:13:22 +0000
Files and hashes:         1: h7LA6ClUHS71JmOF6zlGuNUpBgg.crl (hash: BEjD5SZzJ1caT1HKFHlC2bajVfEGex5UCpIHE19L1sE=)
                          2: 0A7320284D4811EE86B7A71FC4F9AE02.roa (hash: SiDzLOasKO+XNvQ+goSOpdOQE3ZO4gyfhkgA7eX7eA0=)
                          3: 021F5D1E005F11EE9D6E2530C4F9AE02.roa (hash: D9Du1jxG8oE9wceHFEoY5Nl8COEasjJYKId8W2qCUf8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2074 (0x81a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5B0
        Validity
            Not Before: Mar 28 21:13:22 2025 GMT
            Not After : Apr  4 21:13:22 2025 GMT
        Subject: CN=67e710f2-38e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:55:2f:a3:42:4f:1c:ba:8d:26:94:06:c2:66:
                    9b:37:d0:e4:aa:2c:57:6f:e8:8b:32:7f:2a:f8:1a:
                    23:7b:0b:8c:79:39:1b:08:f8:52:6a:04:58:c2:a2:
                    b9:32:47:86:51:21:bc:0b:8d:64:f9:e5:4b:06:8a:
                    1b:f6:b5:55:7f:c0:de:21:8f:b4:5d:54:32:fd:bb:
                    a7:dc:95:10:5e:b5:52:82:07:f8:ea:fe:f0:b7:c9:
                    a1:9d:c5:9a:91:fb:f2:ca:ba:93:b1:06:98:c3:0f:
                    34:d8:6d:7f:96:6d:3c:da:76:90:59:9f:d3:93:c0:
                    e3:7d:f6:cc:5d:d2:f4:eb:67:f5:46:54:c5:4c:07:
                    65:ee:58:8c:cd:ce:51:84:a3:64:96:83:2f:61:c5:
                    53:05:87:48:9f:08:5f:52:74:72:ed:76:90:ee:2d:
                    6f:52:16:db:57:05:1e:07:3c:85:13:26:80:f0:df:
                    11:6b:09:79:e3:cb:9a:a2:96:bd:81:ee:8f:35:eb:
                    72:55:89:d7:6c:7a:f4:43:fa:d7:5d:03:05:11:3b:
                    dc:53:d4:f6:01:40:62:d6:91:73:12:55:b5:38:08:
                    aa:b7:8a:46:81:ee:f3:f1:d6:5c:f5:92:b3:c9:f3:
                    81:60:64:81:3a:2c:04:4e:84:b6:2d:e2:d5:dc:8f:
                    41:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:81:38:87:FF:C1:6F:09:63:D1:56:28:6B:EE:7C:CC:7D:75:4A:C9
            X509v3 Authority Key Identifier:
                keyid:87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:42:1f:2a:88:81:5c:5f:1a:80:15:b3:a6:23:1d:05:c5:c6:
         f4:fe:b1:c8:ec:03:fb:22:9a:8f:43:08:6f:b3:6c:c6:43:64:
         a6:31:d1:69:dc:d5:f0:57:24:07:aa:26:e6:76:00:0f:0f:70:
         bd:08:46:25:e8:2e:09:c2:47:f8:fd:48:03:a2:92:0b:00:74:
         8f:f4:73:4b:d0:1e:07:7b:7a:39:e1:ec:ec:cb:ec:83:16:89:
         7d:30:8e:0e:e6:5a:d1:7f:d2:10:51:06:29:6f:0a:1f:c8:a1:
         b2:3c:c8:40:13:ca:5e:5e:bf:ed:3d:63:e1:26:d6:ab:de:3e:
         f6:9b:ec:38:e8:28:7a:7b:d6:aa:f6:67:03:27:1a:5c:75:9e:
         d3:ff:58:35:7e:06:61:48:ee:6c:f2:a0:24:73:27:a9:56:d8:
         89:67:e4:c1:1f:74:96:4f:bc:64:96:26:b4:bc:19:16:1a:d6:
         9c:97:69:b9:6d:7a:e8:e6:7d:08:10:8a:27:7e:40:24:b2:96:
         ba:ea:e6:52:5d:87:f3:37:fe:0d:df:72:47:4b:84:f3:13:76:
         52:5b:fa:0c:29:38:b7:83:16:45:fa:ec:92:63:23:ec:48:30:
         4c:b9:e6:c5:aa:3f:97:a3:01:70:60:87:ae:46:85:09:dc:60:
         94:58:c8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:27 2025 by rpki-client