Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
File:                     6Ind1VQsbSydx0DhJGqedI51E1I.mft (raw, json)
Hash identifier:          4cFTH7WPU/4Rn0tNJ1zUesOhlLRdarrWWBnvsPns0VA=
Subject key identifier:   38:A2:5F:3D:50:59:7C:66:55:B5:E6:C4:D0:61:28:6D:2A:C7:44:74
Authority key identifier: E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52
Certificate issuer:       /CN=A912A138/serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352
Certificate serial:       0719
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
Manifest number:          0708
Signing time:             Fri 28 Mar 2025 22:13:16 +0000
Manifest this update:     Fri 28 Mar 2025 22:13:15 +0000
Manifest next update:     Fri 04 Apr 2025 22:13:15 +0000
Files and hashes:         1: 6Ind1VQsbSydx0DhJGqedI51E1I.crl (hash: SzBlqEe+HdtF9dF/sXi3A84gHtKV4AJ9bG4VrEjEdNA=)
                          2: 243B94A23E7A11EBBFFAC96BC4F9AE02.roa (hash: Cr86pDAeYBNOH/f3Ffkig2n8Xta7VZxs/ZGTP0dC2Ds=)
                          3: BB684734816B11EFA4D23930C4F9AE02.roa (hash: yDEfQxbpM8/45yk57WWqW8Bt+VgNvfcfxMhi33lEx40=)
                          4: 9E82296E5FA611EF9A75477FC4F9AE02.roa (hash: lV6jMb5h9nbmgpZPjhxFVRMKMVNkKVjEOjsDZ14+HCA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1817 (0x719)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A138
        Validity
            Not Before: Mar 28 22:13:15 2025 GMT
            Not After : Apr  4 22:13:15 2025 GMT
        Subject: CN=67e71efc-2e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:98:62:ed:66:92:76:fd:c0:1f:5b:3c:fe:ee:
                    a3:f8:b9:23:a6:24:a0:95:ce:36:1c:51:66:de:05:
                    3b:82:ef:cd:61:d4:fc:43:9c:8b:dd:a7:a8:d4:58:
                    9d:65:8e:74:bc:79:f1:21:55:ec:c5:21:e1:a8:52:
                    ab:52:cd:40:8f:45:17:25:0a:1f:d2:ed:a8:4b:6b:
                    17:4f:fa:ac:2b:02:54:f1:29:1c:02:37:18:bb:28:
                    09:02:14:01:82:91:f4:de:19:8d:a5:a3:46:14:9a:
                    62:f6:52:e6:7e:a2:ba:b6:66:2c:e1:d4:a8:b8:78:
                    ff:71:a4:af:38:38:af:87:63:60:f6:3c:5a:6c:99:
                    82:44:d3:4c:c3:7d:b7:8f:b8:a9:4f:dd:cf:96:61:
                    20:b7:c4:6c:7d:f5:ab:51:44:d8:01:cd:c0:31:bd:
                    05:9a:10:0e:86:52:5c:84:95:97:c5:05:d1:81:e2:
                    47:69:70:3f:43:41:b2:01:dc:ef:9a:3d:84:a7:d7:
                    cd:cb:1c:6b:12:8c:8d:2b:25:f0:2e:31:7d:8f:4a:
                    13:3e:8d:d9:cf:b0:c2:ca:6c:6e:24:52:e3:65:01:
                    ee:04:c8:de:66:03:d1:ce:2e:57:5a:ab:5a:1d:2e:
                    df:4e:60:e3:1d:c2:54:16:e7:2a:5a:74:b8:4b:84:
                    61:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A2:5F:3D:50:59:7C:66:55:B5:E6:C4:D0:61:28:6D:2A:C7:44:74
            X509v3 Authority Key Identifier:
                keyid:E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:63:ee:05:f5:46:24:93:a3:81:bf:a5:b0:bb:b5:30:82:89:
         79:35:24:69:c5:c7:19:07:76:20:71:18:24:5e:80:f5:4b:95:
         e7:3a:78:3b:1d:fe:d0:06:c0:8c:3c:de:7f:e1:a8:57:cf:e1:
         17:2b:7b:b4:ef:94:ec:f9:19:37:47:01:ce:0a:1f:2d:d9:86:
         e4:2c:1c:72:83:78:0b:0f:f0:8a:b7:a1:bd:ac:7f:e8:37:64:
         dd:76:ab:0d:f3:15:08:07:a0:34:00:e0:ea:9f:c5:6a:f9:8c:
         d8:05:cd:f0:a0:45:8d:15:42:f1:42:4a:7f:aa:98:f4:21:87:
         71:e1:b0:c7:6a:4f:72:06:1a:02:a2:5b:c0:42:05:e9:81:d7:
         8b:4c:5e:e3:67:81:12:3d:a8:61:4e:45:5b:95:69:f6:78:d9:
         1e:1d:70:eb:b8:c5:d6:17:21:09:e2:c2:85:8a:0f:9e:6f:50:
         96:9b:b6:96:a7:53:03:8d:f4:f3:16:0a:57:1a:99:6f:58:b2:
         61:88:da:30:ec:f6:c2:1b:65:99:f2:f3:d9:6b:6f:ce:9a:21:
         1a:b4:f2:c4:9a:6e:b9:3c:5f:0c:34:c7:10:7c:87:eb:c4:07:
         3a:9d:08:a5:e1:03:51:65:5d:67:b3:93:1b:34:f4:12:b2:ba:
         ae:7d:07:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----