Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
File:                     B7vs0OoIn8ZO4UDdyN26UufZENA.mft (raw, json)
Hash identifier:          vJY05dNvssP+GDMdmswfADCwycvvSUS577SkNw+9Eew=
Subject key identifier:   D6:A0:A2:AA:DF:A8:8B:DE:33:C4:43:70:BD:FD:F6:DA:25:C3:17:C2
Authority key identifier: 07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0
Certificate issuer:       /CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0
Certificate serial:       05C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
Manifest number:          05B6
Signing time:             Fri 28 Mar 2025 23:22:57 +0000
Manifest this update:     Fri 28 Mar 2025 23:22:56 +0000
Manifest next update:     Fri 04 Apr 2025 23:22:56 +0000
Files and hashes:         1: B7vs0OoIn8ZO4UDdyN26UufZENA.crl (hash: POcNWsgUINQ+M0vI3bA3MB2ik4ObWGhJ8W1YPf9rnkk=)
                          2: 55B56780BABA11EB8A51C234C4F9AE02.roa (hash: 4+8EOl0IVC0WYPREjgU4SQ2gBQ7SWbeC1nS8R2xM7hU=)
                          3: 55056D1CBABA11EB8A51C234C4F9AE02.roa (hash: Jks+wAurz0A89wXrN9oPKVJZcdKUluPelZM2Gsz3YvQ=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1474 (0x5c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E64A
        Validity
            Not Before: Mar 28 23:22:56 2025 GMT
            Not After : Apr  4 23:22:56 2025 GMT
        Subject: CN=67e72f50-dd1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:04:46:74:ba:6d:93:a4:85:26:39:32:24:f8:
                    b5:0c:9b:dc:25:ac:0c:7b:03:30:4a:fa:65:60:15:
                    36:61:2a:46:41:ec:b1:6e:16:7c:14:95:96:45:1f:
                    f7:3f:2e:2c:e5:11:37:dc:32:ec:36:bc:b7:73:a1:
                    e2:c2:c4:05:13:c3:75:6b:b9:9c:ce:81:7a:0e:c7:
                    a5:2f:97:f3:ab:fc:2b:a4:91:81:c5:94:b2:99:7f:
                    59:99:e6:6b:16:89:e6:aa:8b:d9:00:c7:96:26:cb:
                    be:df:3b:26:47:4e:3d:ff:fc:4c:42:4c:4e:e6:eb:
                    61:f7:8d:32:b5:cb:64:6c:70:b0:70:16:c9:c8:45:
                    65:5c:e3:05:e0:40:0c:a1:da:d1:ec:3b:53:43:cd:
                    9d:88:36:81:5d:01:53:bc:2d:15:0b:c4:c8:21:9b:
                    96:28:ce:cf:b2:85:db:a6:05:64:46:77:b6:c2:69:
                    66:cf:46:a8:ef:8d:53:28:01:76:3b:cc:c4:32:5d:
                    b3:3c:d4:34:cc:26:8c:17:93:47:7b:03:47:dd:bd:
                    a3:e1:bd:ef:d9:f1:de:37:ae:3b:60:6f:22:04:18:
                    77:c7:a2:90:fb:28:17:43:5e:e9:17:14:d8:0d:3c:
                    11:90:8b:c0:59:3c:8b:bc:18:4c:d7:ed:63:b1:9b:
                    78:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A0:A2:AA:DF:A8:8B:DE:33:C4:43:70:BD:FD:F6:DA:25:C3:17:C2
            X509v3 Authority Key Identifier:
                keyid:07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:96:ba:eb:08:9d:97:7f:df:0e:19:06:72:b6:c7:7e:a7:10:
         e6:4b:80:61:4a:2f:69:30:08:f0:bb:84:18:0c:32:e5:89:2a:
         9b:6f:68:ef:b7:27:da:38:7a:53:7b:67:9b:de:e7:74:b2:d4:
         43:b4:26:aa:0a:4b:59:36:30:fe:dd:fc:b1:f4:a2:8d:7b:b0:
         c8:a5:c8:60:74:44:57:f6:6c:59:ad:98:5e:76:5d:23:da:22:
         6a:84:be:52:29:10:33:d5:02:54:d8:b4:57:75:06:3b:b0:7b:
         b5:96:03:df:42:eb:e8:19:9b:e0:28:6a:81:62:b3:d6:62:3e:
         69:05:14:04:af:e5:c6:2e:ea:62:47:1b:2e:d0:bf:b5:23:64:
         ee:be:59:f2:d3:e0:a4:ff:9b:da:13:fe:06:99:dc:61:98:e5:
         13:8e:08:63:16:7c:04:40:71:47:a8:0e:96:0d:cf:8b:ea:d7:
         68:2e:fb:a2:53:e9:33:f9:e4:ba:b9:c5:ca:69:49:f1:9d:fa:
         65:dd:f6:5c:ab:3b:d1:87:23:69:d5:d0:d0:08:cd:f8:6f:65:
         94:67:3b:1d:33:1a:d3:14:29:02:47:04:9b:89:fa:62:31:55:
         e7:cc:8d:92:96:34:a1:a4:7d:d5:44:5b:2f:ca:7f:69:fb:ec:
         f9:43:e2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:09 2025 by rpki-client