Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.mft
File:                     W6ynah06AONY_-Uxi5AkmIANgmw.mft (raw, json)
Hash identifier:          bGqKz47ZEt4dpJZ0QdKazBFJM5kwKcrWJV9uRsi3R94=
Subject key identifier:   94:93:39:AB:7F:2F:7D:FE:2B:A2:7B:FE:92:06:34:5A:45:20:20:23
Authority key identifier: 5B:AC:A7:6A:1D:3A:00:E3:58:FF:E5:31:8B:90:24:98:80:0D:82:6C
Certificate issuer:       /CN=A911BFB0/serialNumber=5BACA76A1D3A00E358FFE5318B902498800D826C
Certificate serial:       01AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6ynah06AONY_-Uxi5AkmIANgmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.mft
Manifest number:          10D2
Signing time:             Fri 28 Mar 2025 17:43:04 +0000
Manifest this update:     Fri 28 Mar 2025 17:43:04 +0000
Manifest next update:     Fri 04 Apr 2025 17:43:04 +0000
Files and hashes:         1: W6ynah06AONY_-Uxi5AkmIANgmw.crl (hash: dfTk0wT7aTQUuw/mpKm4lI+E9U3LlBgutP9H1P7rgXc=)
                          2: F21C48F48AF811ED89B22845C4F9AE02.roa (hash: YpeD3hofiypQ4UKB2agIyDeHN6KsPnhGs6LVUpcDCB0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BFB0
        Validity
            Not Before: Mar 28 17:43:04 2025 GMT
            Not After : Apr  4 17:43:04 2025 GMT
        Subject: CN=67e6dfa8-61b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:17:1b:ca:73:d3:0a:ed:31:22:a5:3e:0e:ec:
                    dd:93:a4:6f:ea:65:db:e5:24:63:ee:92:39:3b:04:
                    af:2c:4f:af:dc:41:85:a2:99:56:91:23:69:28:03:
                    b3:27:40:b4:12:12:c7:c5:ef:83:55:a2:38:cb:23:
                    9f:94:55:b7:d9:e1:ed:06:27:44:9a:2b:6f:5c:4a:
                    55:04:f5:6a:87:34:62:3a:10:97:ba:ac:af:d7:f6:
                    9e:c2:cd:80:cb:34:63:2f:31:68:cb:a0:3a:d2:e0:
                    06:5e:1c:0e:0c:72:48:4f:0a:24:c1:b9:a5:81:d6:
                    a9:b2:08:f1:18:44:75:99:e6:56:bb:fa:87:7b:2a:
                    b8:72:a9:4d:b7:1b:24:37:72:b3:38:e3:7e:74:ee:
                    84:98:66:54:66:a0:34:a3:80:d4:02:21:d0:36:82:
                    3e:c8:75:c8:0c:a8:78:2b:69:f5:24:95:dc:a9:50:
                    78:75:5b:0f:01:cd:06:eb:6b:fe:e0:6d:72:60:9d:
                    b6:b5:ce:17:df:11:92:d5:80:2b:28:fd:3a:34:77:
                    8b:74:f8:34:af:cf:b2:c7:b3:bb:87:76:66:20:fe:
                    06:3f:73:0c:7c:d6:07:58:45:96:08:ad:e9:ab:bb:
                    01:2b:7f:06:00:29:48:66:55:6f:de:3c:ed:90:d7:
                    32:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:93:39:AB:7F:2F:7D:FE:2B:A2:7B:FE:92:06:34:5A:45:20:20:23
            X509v3 Authority Key Identifier:
                keyid:5B:AC:A7:6A:1D:3A:00:E3:58:FF:E5:31:8B:90:24:98:80:0D:82:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6ynah06AONY_-Uxi5AkmIANgmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:fe:dc:76:d5:fd:b9:c7:b9:b7:44:0f:00:3e:27:9a:67:dc:
         e8:d2:c0:3b:80:84:2f:fe:21:81:32:ae:1a:31:2a:00:ef:fd:
         d0:8f:c1:36:5c:a1:fb:a4:6a:07:b5:eb:7c:06:93:84:d2:4c:
         af:aa:05:36:d4:1b:08:89:d6:9c:f8:38:66:16:5a:e5:f6:01:
         98:0a:da:3b:ef:f3:ba:a2:22:4a:d2:d3:d6:0f:3a:98:01:21:
         81:cd:a1:61:4f:78:39:e8:fa:1f:75:9e:81:b3:c7:d4:5f:67:
         80:3c:fa:1f:dd:ee:97:b4:c7:68:2a:31:29:b1:3e:13:bf:de:
         5f:67:bb:29:08:50:dd:4f:b7:b8:d4:67:7b:dc:47:dc:07:bd:
         65:a7:e0:49:bd:cb:e6:cd:93:b2:a7:93:60:fc:ba:3b:5e:40:
         7a:27:3b:34:e6:04:59:69:41:bc:0a:13:0c:8f:89:cb:73:d7:
         73:45:a3:3b:e7:7d:92:6c:d6:64:70:b1:d0:be:f8:2c:a4:56:
         ff:17:cc:87:bd:ca:ec:1a:81:8b:63:e6:1c:42:a4:59:6e:f2:
         58:17:d4:ff:53:7c:3e:d3:9f:0e:ee:4a:c1:22:36:f3:22:cb:
         1e:57:eb:d9:df:4d:0a:c5:ea:e5:1b:67:49:15:c1:62:45:de:
         e2:7f:8f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----