Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
File:                     xgN4bVWpBBJOdZLu0ome9XiSEQA.mft (raw, json)
Hash identifier:          xD1sjzmqiZytwpbt2SBw6pr4QJ2URWSnG7GwpKEBCcg=
Subject key identifier:   E8:8A:C4:9B:7A:87:26:D2:F9:A4:CE:1B:08:9D:18:FC:D5:FB:C6:36
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Certificate issuer:       /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial:       7D52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
Manifest number:          480E
Signing time:             Fri 28 Mar 2025 17:09:47 +0000
Manifest this update:     Fri 28 Mar 2025 17:09:47 +0000
Manifest next update:     Fri 04 Apr 2025 17:09:47 +0000
Files and hashes:         1: xgN4bVWpBBJOdZLu0ome9XiSEQA.crl (hash: 8cLKCzT3E4L66RFs84BZND539UMuGcYQvo9HsF2jKLw=)
                          2: 93933F8EB8E311EF94962C19C4F9AE02.roa (hash: oYu2WZprVxTGWmaXSTiX/1vi0KQUS49PpwwkujTaQnM=)
                          3: C6EB4BB695C411EFB4437E46C4F9AE02.roa (hash: DKjdHPHX9uK/7sXdnl0CnoAUxvUfxg2iDv7piZLbE+g=)
                          4: 51DB195AACA011E8BA30FF16C4F9AE02.roa (hash: bo2MU7FnWVB61bLgSeX3nMyKR524oPoEbjubyqJ1GeY=)
                          5: 596D48ACC17311EAB16B1912C4F9AE02.roa (hash: vN9wyIhoEAvL0Ppx9rHt6RaOh++3jtvNmxs0UWEaa1k=)
                          6: A160BBAEC17711EABFFC9E1FC4F9AE02.roa (hash: CbTGgfEWFtslvO2wALZJ+DSTt60SxWMiq0xTARE85r4=)
                          7: 0F7F7F6A072311ED8067812FC4F9AE02.roa (hash: IaM5JoKkMFAzjZpn+sEYIwIyVW6+qhIz6t87EVXHjEI=)
                          8: 5079D4A2ACA011E8BA30FF16C4F9AE02.roa (hash: aTECUl8KOBHDuvj6RQo/fOOhivuGrPAhZR0mAtm2uuY=)
                          9: A2696B18D16C11EA8886BE5DC4F9AE02.roa (hash: fq/qWIdl/zMbQPXZZ52zcLgyQibFEjxrMjtOCJGOy18=)
                          10: 1ACCB31CCA2011EEAAE0BC1DC4F9AE02.roa (hash: zvj9UK8T+8CC31S1QfeLyCh52ggJamqXxF9Th/UxIhc=)
                          11: 0526730C2C4811EEAC2E4D46C4F9AE02.roa (hash: colPM8HZ1vvIi6XidfSQJiOmkoAqKV69tfTn2aphAGs=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32082 (0x7d52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913900D
        Validity
            Not Before: Mar 28 17:09:47 2025 GMT
            Not After : Apr  4 17:09:47 2025 GMT
        Subject: CN=67e6d7db-3a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:79:85:3c:4a:a4:11:33:15:e8:35:5d:7b:
                    dc:1e:a6:d7:5b:fa:11:70:f8:97:99:47:fb:4b:4f:
                    b8:5e:71:68:e9:ea:93:56:67:ae:c0:10:96:75:60:
                    56:a5:68:95:02:3e:5c:e2:16:65:34:b8:a0:46:a9:
                    41:8a:38:1d:10:a8:2c:74:75:a9:04:cc:27:0c:c1:
                    59:ef:8a:31:d7:4f:89:7e:1a:f3:e7:38:a2:8a:01:
                    e4:54:61:0d:a6:43:9b:56:08:be:dd:aa:02:02:61:
                    0f:4e:76:a4:59:43:74:24:3f:06:a2:cb:a9:7a:4d:
                    dc:e8:53:ca:04:ac:24:76:57:d4:ea:d7:2f:fc:42:
                    a2:7f:ce:6e:5e:a0:39:29:b6:e3:1c:ee:b8:18:ac:
                    2a:e2:70:e1:8c:bb:d2:b6:75:fd:e6:73:4e:6f:35:
                    49:29:c4:07:68:f0:8b:c1:c5:14:10:a6:b3:37:8a:
                    b3:1a:50:fd:3c:de:0e:b0:d4:97:93:42:91:71:31:
                    94:0e:59:b6:c5:21:37:97:43:a7:b0:ee:b9:b6:c5:
                    cf:fd:70:d2:28:7d:ce:c5:3d:d7:a7:c5:10:12:39:
                    a3:6c:d7:0b:70:90:4f:3b:02:33:d0:1a:bd:ab:aa:
                    07:b0:b7:72:0e:42:6d:29:bc:cb:ec:14:df:27:cf:
                    e1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8A:C4:9B:7A:87:26:D2:F9:A4:CE:1B:08:9D:18:FC:D5:FB:C6:36
            X509v3 Authority Key Identifier:
                keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1c:86:b4:f6:ce:ab:be:b5:50:d8:28:11:15:45:3b:5c:00:
         6a:fd:1e:fc:bb:e1:9d:fe:4c:f1:b7:25:a7:9f:ba:b0:9c:81:
         eb:63:12:f9:75:05:08:6f:c3:a9:8d:6f:24:86:98:f7:30:85:
         ba:be:c6:51:aa:a2:46:4e:e7:1c:2e:dc:1d:6d:1c:31:c3:5b:
         ff:ba:47:3a:8b:d6:9e:6a:e2:5a:e2:53:41:9a:30:d0:cc:8c:
         96:b0:7b:89:73:54:95:11:49:b3:17:fd:40:94:5c:3d:37:da:
         7a:01:58:1a:b9:a5:e7:ac:5e:ba:d2:19:9c:97:eb:16:40:17:
         f4:8e:c8:3a:b0:79:9d:80:3f:58:65:fe:c6:05:4e:eb:29:dd:
         90:3f:15:5b:c8:4b:1e:df:4a:c0:e3:c0:2a:e3:51:7d:fa:b1:
         43:0f:de:d1:f2:81:85:3c:d4:e6:2d:ac:a6:1e:0d:c9:53:1c:
         02:52:d2:34:59:7e:73:0b:f3:b6:b8:4a:52:f2:86:0b:fd:5c:
         45:e4:b4:a4:31:b5:e8:fc:12:fd:f1:3d:56:e5:ab:98:f2:5f:
         cd:6f:a2:0f:60:f7:dc:a4:64:65:af:1d:8f:74:fb:f3:dc:20:
         4d:85:fc:f3:fa:b9:41:3b:c4:57:bb:bd:30:a6:9b:51:a9:7a:
         d5:27:09:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:29:57 2025 by rpki-client