Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C075/75A6218ADE3911E783B7CC6CC4F9AE02/Fs6MGXC4akr081Y5EEZo0JWz1Og.mft
File:                     Fs6MGXC4akr081Y5EEZo0JWz1Og.mft (raw, json)
Hash identifier:          AxrpLPKiwR43AgHFbSpuozhCCCMj4qSiqnqtw/ku8k4=
Subject key identifier:   01:64:3E:B3:0C:10:14:6C:EA:DE:F8:3F:58:D9:1B:67:A0:FD:6B:A7
Authority key identifier: 16:CE:8C:19:70:B8:6A:4A:F4:F3:56:39:10:46:68:D0:95:B3:D4:E8
Certificate issuer:       /CN=A911C075/serialNumber=16CE8C1970B86A4AF4F35639104668D095B3D4E8
Certificate serial:       173C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fs6MGXC4akr081Y5EEZo0JWz1Og.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C075/75A6218ADE3911E783B7CC6CC4F9AE02/Fs6MGXC4akr081Y5EEZo0JWz1Og.mft
Manifest number:          1727
Signing time:             Fri 28 Mar 2025 16:43:47 +0000
Manifest this update:     Fri 28 Mar 2025 16:43:46 +0000
Manifest next update:     Fri 04 Apr 2025 16:43:46 +0000
Files and hashes:         1: Fs6MGXC4akr081Y5EEZo0JWz1Og.crl (hash: wpSR1uOLIJ8LFM0MA7Vbd4iZnZg7vgr5LBGcmvjMrAg=)
                          2: 3EB855ACDE3A11E781926D6DC4F9AE02.roa (hash: AMcNfp7F2XxS6fYEUJYfNIYxis7dlQgn+VV4onEe0GY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5948 (0x173c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C075
        Validity
            Not Before: Mar 28 16:43:46 2025 GMT
            Not After : Apr  4 16:43:46 2025 GMT
        Subject: CN=67e6d1c3-637b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:46:e2:b8:3b:31:1d:a2:4d:66:ac:f9:19:
                    24:46:01:65:a5:4e:ce:b1:07:9c:89:ac:0c:d7:a2:
                    0e:e2:64:be:c2:ed:b6:da:e9:0c:31:01:43:a8:be:
                    7d:d2:95:2d:a1:34:6f:dd:3d:e4:fd:f6:64:81:11:
                    ca:53:62:6c:b4:60:28:55:30:13:c8:eb:5d:f2:47:
                    14:47:be:6f:e1:ba:39:9d:e6:c6:46:f2:cb:a8:38:
                    87:f9:28:a7:80:07:b9:de:d4:d0:7c:1a:81:39:b0:
                    a9:34:24:98:02:7a:86:a1:47:9e:e0:0f:89:a3:01:
                    3f:0f:88:9a:ed:e5:d6:1a:fa:6b:fd:fb:c2:7c:f5:
                    93:a1:5d:13:ab:42:2b:4b:cd:bc:13:8f:b9:df:9a:
                    82:01:dd:7d:4f:6c:0a:18:fc:75:fe:eb:7d:ff:7e:
                    00:9a:75:dc:50:6c:2d:21:31:3a:73:2e:02:95:91:
                    6b:84:c7:ac:c0:12:59:b1:b4:03:69:61:9c:a6:72:
                    2d:23:8c:c0:05:a5:d4:41:a4:04:f7:0d:2a:2a:ff:
                    2b:f9:54:e8:21:a7:4d:b5:ad:e8:4b:28:3f:80:a8:
                    1b:3e:9d:fa:e8:99:c9:ac:66:c0:65:66:39:e0:00:
                    57:89:64:04:3c:b8:53:00:dc:a1:59:c7:23:12:d2:
                    e7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:64:3E:B3:0C:10:14:6C:EA:DE:F8:3F:58:D9:1B:67:A0:FD:6B:A7
            X509v3 Authority Key Identifier:
                keyid:16:CE:8C:19:70:B8:6A:4A:F4:F3:56:39:10:46:68:D0:95:B3:D4:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C075/75A6218ADE3911E783B7CC6CC4F9AE02/Fs6MGXC4akr081Y5EEZo0JWz1Og.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fs6MGXC4akr081Y5EEZo0JWz1Og.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C075/75A6218ADE3911E783B7CC6CC4F9AE02/Fs6MGXC4akr081Y5EEZo0JWz1Og.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:57:48:3c:9a:4f:41:b3:72:b8:73:b5:f6:c8:de:45:44:70:
         a9:e8:f5:9a:81:15:c9:7e:40:24:09:b5:78:a9:8c:a9:46:52:
         30:03:b4:03:f8:34:cc:f2:ab:09:ca:06:de:39:35:e2:ea:e9:
         50:63:cb:96:e1:74:54:de:c5:5b:74:8c:dc:04:8a:bb:ed:ac:
         b7:13:d6:97:d9:7d:63:75:ec:0a:02:91:ae:a3:ac:3c:b8:9a:
         cc:c2:9b:5a:16:05:93:62:2d:88:d6:02:f6:88:eb:ce:4e:65:
         f7:ab:fc:d7:df:29:8d:68:be:c9:07:72:49:eb:aa:4b:21:33:
         0e:0f:7d:bf:bc:7e:ac:3a:c9:a1:42:40:d0:87:a1:6a:49:6e:
         8a:68:05:de:a0:58:3b:65:a9:be:f7:1a:5d:20:1f:72:2c:f9:
         4b:8c:60:c0:40:fb:8c:88:df:59:01:b6:8f:2c:af:ae:e8:cb:
         5e:99:de:58:fd:6c:fb:97:a5:9a:74:a5:2d:63:df:46:38:62:
         10:d8:f2:0a:52:c4:02:14:ed:7d:6d:ea:5c:9e:74:47:ba:a1:
         f8:36:a5:42:2e:6a:02:72:60:e8:8e:02:1c:7d:f5:7a:c5:43:
         0c:e7:3f:52:42:6b:db:de:c4:c9:aa:45:03:df:5e:65:5f:ad:
         92:eb:c6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:15:02 2025 by rpki-client