Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
File:                     QtPsuchXCrCQ62Ae2zN5wNPYptA.mft (raw, json)
Hash identifier:          JYnAbIM9hLFWXOX7sVXpn0EuX4ILtcxGE7co4lBjZXw=
Subject key identifier:   A8:DB:7B:76:5D:02:D1:48:11:8A:F0:C4:59:CB:2C:A2:0E:FF:CF:EB
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       25DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
Manifest number:          1A18
Signing time:             Fri 28 Mar 2025 17:46:57 +0000
Manifest this update:     Fri 28 Mar 2025 17:46:56 +0000
Manifest next update:     Fri 04 Apr 2025 17:46:56 +0000
Files and hashes:         1: QtPsuchXCrCQ62Ae2zN5wNPYptA.crl (hash: ZaZaok2AUv69iMPBn9AYFMT/YevMagzhQgby9PVrsek=)
                          2: C8D6C4CAD1EF11EAA9944238C4F9AE02.roa (hash: B9/ZOaKJ3mY7sCCRxWSrCr6EkWxFbiFs/1gThM69MvA=)
                          3: 0578A814931111EDB92FFC5FC4F9AE02.roa (hash: IhxFd8GWyvHy4QvuXOqSBd0gnR5njQJdJ+TT3XDY6Ow=)
                          4: 670793E8F0EC11EFB7FBC612C4F9AE02.roa (hash: w54klPBWsGxsJLf7o8O4d/YfYtzij9sx4wGXmrfgKPU=)
                          5: 8EF0A700973911EDB1E3C460C4F9AE02.roa (hash: Pfx0RtJcLLW5ZFj5crlklO0jOVyz0bjwf3XIGvazerQ=)
                          6: D42E171A97E011ED9EFB180DC4F9AE02.roa (hash: hPYWDoyVhEAFfc0fBZwx5qajT1d+KFZshP+N3pa3wbk=)
                          7: B53FD334575411ECAA094876C4F9AE02.roa (hash: 296EaDfJGmx3e6D5O8LxaSDfTjgH5YD0MQVWUb0ic6U=)
                          8: FB3F8334973B11ED935E7109C4F9AE02.roa (hash: mjR3c+t+smHjLqMf4drJmz9rxODMszK1LD6+M9LGeIY=)
                          9: 0722D856931111EDB92FFC5FC4F9AE02.roa (hash: 7dbxR4gR6b4iL0edOOJstgfP/HsQqg2y54IOaM0DIP0=)
                          10: D08850D2B71411ED98AFCC20C4F9AE02.roa (hash: Y2jR//Hrw7Q/ZKuGuaywqyH4sSYkPxB7WKTzQDJJ9BQ=)
                          11: 968DFDCE973311EDBFD0B43CC4F9AE02.roa (hash: bBPQcajtfbRygLugvzoj923We+I2sql4kYKXhjN1UGc=)
                          12: D4B094F697E011ED9EFB180DC4F9AE02.roa (hash: cBkg3LGcn5rgVL8BTrJzLbW/3oKuwqj01X4Fx7CuIw8=)
                          13: 4C4AC452D67911ECBFC6CB7BC4F9AE02.roa (hash: WUbEEgBTBdPZdhiwH726GQ5G4iBR6E6r7k+ETLp88Ns=)
                          14: 6B4669CE7B7D11E99F99E776C4F9AE02.roa (hash: phbymQiMHWNNzrnLfh17wazzvcgfnjQBs+kEUNXCkRg=)
                          15: 907B9184973911EDB1E3C460C4F9AE02.roa (hash: 5XY9aEQMhi/DaHdge1N42tPN5dbj/xlmiK62csHhzwM=)
                          16: 06535DB891E011EFAE09CC5BC4F9AE02.roa (hash: DTA7CeW7cqTZop+4UQyYEWCDfju8wSx8DHDxAzeibSU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9691 (0x25db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805
        Validity
            Not Before: Mar 28 17:46:56 2025 GMT
            Not After : Apr  4 17:46:56 2025 GMT
        Subject: CN=67e6e090-4d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:dd:b2:42:88:6d:90:16:da:ef:d5:dd:d6:b6:
                    8f:0b:15:f1:91:6a:8c:6b:49:4f:4f:05:ca:7e:1a:
                    96:72:d0:87:0f:e1:99:24:14:dd:cf:ec:93:1d:60:
                    83:ae:59:45:92:02:73:df:9b:d4:43:0a:d5:1f:34:
                    5f:d3:ba:76:04:a8:f5:b4:fd:1d:ab:bc:bb:11:9e:
                    80:30:b4:6f:9a:e0:53:26:a8:71:4a:4a:ea:05:df:
                    c7:1b:03:d7:5f:3b:4b:bb:e5:0e:aa:19:b5:86:be:
                    20:72:ea:e8:ed:75:d3:52:81:f4:0f:ea:a3:6c:3a:
                    71:ef:e2:f4:2a:19:47:a3:5a:a3:dc:66:77:86:04:
                    9d:44:18:d5:0f:0e:5e:a4:db:76:ff:72:17:e4:4e:
                    03:98:5f:07:c1:f2:61:46:18:f6:2f:0d:17:2e:ed:
                    a2:d6:65:3d:36:c5:38:30:75:a7:83:d2:c5:65:34:
                    7c:77:96:3d:44:9d:e5:2d:30:29:42:14:ae:ae:5f:
                    c7:1e:6d:86:70:b0:f2:33:b4:29:7e:70:7f:a7:85:
                    ed:94:63:c9:25:9c:2d:c7:d8:3e:49:02:18:e0:41:
                    56:fd:0f:63:10:51:49:d0:87:0e:dd:35:bd:04:8d:
                    9b:47:a0:2b:b1:79:e3:ef:24:98:72:2b:a1:4d:f0:
                    93:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DB:7B:76:5D:02:D1:48:11:8A:F0:C4:59:CB:2C:A2:0E:FF:CF:EB
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:e7:81:35:b5:f7:e4:52:1d:16:2a:54:e1:45:3c:f4:eb:35:
         2d:8c:13:9e:a2:f1:8b:79:64:4d:c8:79:7c:97:bd:98:31:f1:
         25:f5:8b:1a:99:28:76:3a:16:d3:56:8d:64:f3:1d:12:7e:c0:
         9c:96:07:05:13:2d:40:d8:01:95:78:3c:b8:24:e7:f3:bb:65:
         16:ca:41:5a:0c:c4:09:49:35:9b:c2:e3:4f:dd:b2:7a:84:63:
         9c:53:18:35:20:8c:73:22:db:da:e0:a7:a6:4e:6b:46:15:d8:
         f5:9c:d5:46:99:f6:e7:58:20:2d:82:2a:4a:c0:32:11:0f:8a:
         9b:e4:ba:51:3c:00:fc:21:75:f9:97:ba:0f:00:c1:bc:9e:93:
         48:e0:83:51:5c:fe:29:10:47:92:28:65:05:4b:b9:a4:64:0d:
         ce:08:3e:41:4b:68:12:de:d0:9c:86:bb:2f:0d:7e:df:60:00:
         56:7d:10:be:be:14:e2:b1:14:7c:ba:e0:ff:62:bb:c5:21:86:
         31:54:49:3a:2a:0b:eb:d5:79:6d:52:13:22:a4:f8:e8:fa:17:
         78:1c:36:b6:9d:d5:c8:b9:d7:92:bd:ee:95:d6:c4:0c:c6:a4:
         1b:33:20:5d:e8:01:47:4b:57:50:e1:ac:54:a3:9f:59:a5:dc:
         f9:46:a9:f9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I4MDUxMTAvBgNVBAUTKDQyRDNFQ0I5Qzg1NzBBQjA5MEVCNjAxRURCMzM3OUMw
RDNEOEE2RDAwHhcNMjUwMzI4MTc0NjU2WhcNMjUwNDA0MTc0NjU2WjAYMRYwFAYD
VQQDEw02N2U2ZTA5MC00ZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8N2yQohtkBba79Xd1raPCxXxkWqMa0lPTwXKfhqWctCHD+GZJBTdz+yTHWCD
rllFkgJz35vUQwrVHzRf07p2BKj1tP0dq7y7EZ6AMLRvmuBTJqhxSkrqBd/HGwPX
XztLu+UOqhm1hr4gcuro7XXTUoH0D+qjbDpx7+L0KhlHo1qj3GZ3hgSdRBjVDw5e
pNt2/3IX5E4DmF8HwfJhRhj2Lw0XLu2i1mU9NsU4MHWng9LFZTR8d5Y9RJ3lLTAp
QhSurl/HHm2GcLDyM7QpfnB/p4XtlGPJJZwtx9g+SQIY4EFW/Q9jEFFJ0IcO3TW9
BI2bR6ArsXnj7ySYciuhTfCTvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjbe3Zd
AtFIEYrwxFnLLKIO/8/rMB8GA1UdIwQYMBaAFELT7LnIVwqwkOtgHtszecDT2KbQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjgwNS9GODA3NkI4QTdC
N0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENyQ1E2MkFlMnpONXdOUFlw
dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1F0UHN1Y2hYQ3JDUTYyQWUyek41d05QWXB0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjgwNS9GODA3NkI4QTdCN0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENy
Q1E2MkFlMnpONXdOUFlwdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCy54E1tffkUh0WKlThRTz06zUtjBOeovGLeWRNyHl8l72YMfEl9Ysa
mSh2OhbTVo1k8x0SfsCclgcFEy1A2AGVeDy4JOfzu2UWykFaDMQJSTWbwuNP3bJ6
hGOcUxg1IIxzItva4KemTmtGFdj1nNVGmfbnWCAtgipKwDIRD4qb5LpRPAD8IXX5
l7oPAMG8npNI4INRXP4pEEeSKGUFS7mkZA3OCD5BS2gS3tCchrsvDX7fYABWfRC+
vhTisRR8uuD/YrvFIYYxVEk6Kgvr1XltUhMipPjo+hd4HDa2ndXIudeSve6V1sQM
xqQbMyBd6AFHS1dQ4axUo59Zpdz5Rqn5
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:28 2025 by rpki-client