Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
File:                     JQTp-AqYQrVKSSacwvSxrCtuhUw.mft (raw, json)
Hash identifier:          2PJobf9o9U7286oa6WPQf3oyLArgQDlSOXnA5JM9Y88=
Subject key identifier:   E9:DB:76:A3:4C:5B:C1:44:3C:FB:11:FE:2B:D2:57:02:8C:64:FF:06
Authority key identifier: 25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C
Certificate issuer:       /CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C
Certificate serial:       103A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
Manifest number:          1033
Signing time:             Fri 28 Mar 2025 17:31:07 +0000
Manifest this update:     Fri 28 Mar 2025 17:31:07 +0000
Manifest next update:     Fri 04 Apr 2025 17:31:07 +0000
Files and hashes:         1: JQTp-AqYQrVKSSacwvSxrCtuhUw.crl (hash: 0Z/bb+8Zno+pJr+mbRJVwwl5w1M1F/x60xe3BxkNdTg=)
                          2: B70383D6385411E9A0023656C4F9AE02.roa (hash: /nFahrd1eN8YwTr3PzXHtKOv1+LamBJVN45AsjnPQ5M=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4154 (0x103a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129B9E
        Validity
            Not Before: Mar 28 17:31:07 2025 GMT
            Not After : Apr  4 17:31:07 2025 GMT
        Subject: CN=67e6dcdb-afbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:15:b6:d3:26:ea:02:24:ca:ce:f4:d0:52:17:
                    53:68:b1:aa:f2:2c:3d:47:4b:90:18:52:e5:17:ce:
                    33:5c:6f:79:2c:12:3c:42:71:47:0b:e7:a2:a3:87:
                    c4:ad:4b:00:3f:43:ee:e9:32:6d:fe:7e:22:7e:23:
                    4f:5e:13:7c:a6:3f:dc:36:ce:35:fe:3d:cd:e5:5c:
                    68:4f:d1:08:49:19:f3:47:95:c1:af:25:ac:75:69:
                    e6:6a:90:85:65:4a:04:a2:ad:ec:95:9d:2d:22:0e:
                    a5:11:4d:0e:90:5e:ae:99:49:62:59:fe:54:49:6d:
                    15:1c:0a:ed:c7:13:eb:a4:69:59:49:a2:6a:56:16:
                    10:63:40:91:36:c4:de:66:58:45:04:07:8f:f5:17:
                    e1:bc:97:ac:e4:dd:ea:9b:d6:56:d5:ba:23:f1:00:
                    17:2e:14:ac:05:db:d8:6c:8c:c8:07:df:cd:70:5b:
                    c9:54:44:e3:8e:bf:c2:04:4d:94:68:a8:f5:ef:87:
                    69:b0:b1:7d:3b:a9:29:da:40:eb:53:e1:8b:9d:ed:
                    ea:6a:ae:a2:05:50:fd:dc:0e:b2:96:34:b7:23:d3:
                    58:53:26:6a:f4:51:0a:af:c1:bc:7a:e3:9c:3f:f2:
                    5b:fa:6e:f9:4c:80:2a:40:3f:96:34:0f:77:82:cf:
                    44:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DB:76:A3:4C:5B:C1:44:3C:FB:11:FE:2B:D2:57:02:8C:64:FF:06
            X509v3 Authority Key Identifier:
                keyid:25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:21:7f:5f:ab:28:dc:f1:26:ae:7d:de:5d:45:9c:03:b6:ca:
         ef:e5:3a:c5:33:dc:60:19:52:93:ba:ff:4b:55:38:3b:7b:d9:
         b2:b3:56:11:06:83:d7:d4:4f:0b:42:cd:98:ea:72:02:95:3a:
         8b:de:27:80:90:b4:f9:d0:31:01:11:1e:31:8d:c5:0f:51:27:
         4d:90:d8:52:31:9e:55:a0:1c:12:6f:00:67:ef:8c:67:c4:f6:
         de:79:76:a2:2b:d2:82:63:79:7f:f1:fc:f7:7b:a8:98:54:6b:
         7a:e7:d1:fe:05:a8:e7:8f:8b:31:6d:c3:b6:94:c2:7f:9e:8b:
         20:ef:ac:d1:71:8e:ec:c9:a9:25:45:88:fc:4b:3a:e0:c5:6c:
         ef:df:b0:c1:e9:8d:f5:94:a0:cf:02:65:2c:2d:f2:8b:92:88:
         9a:b6:31:33:d3:5d:81:d9:61:b3:58:13:0f:62:83:1c:aa:35:
         3b:3f:89:63:69:d3:e2:98:b6:62:b4:be:3a:4f:17:86:30:8b:
         22:09:c4:90:40:00:12:f2:64:28:12:e6:74:4e:52:e2:b7:1c:
         56:c5:41:32:9e:1f:fc:d2:ec:13:a1:2f:56:2e:f0:45:28:c6:
         b2:09:6b:ba:ed:f1:0a:09:e5:bc:f0:04:7e:34:ac:1a:cf:27:
         02:37:d4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----