Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
File:                     joN3gQz5wgS7ElhPPltfBQNoJG8.mft (raw, json)
Hash identifier:          OinOKbOYqJj47BRky+aGFvGRjUrBpZdWeTbgz07jhKw=
Subject key identifier:   4A:3D:8E:F6:9A:6C:ED:A1:70:AE:53:34:CC:31:12:BE:01:75:60:C2
Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F
Certificate issuer:       /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
Certificate serial:       1EB6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
Manifest number:          1E93
Signing time:             Fri 28 Mar 2025 16:09:49 +0000
Manifest this update:     Fri 28 Mar 2025 16:09:49 +0000
Manifest next update:     Fri 04 Apr 2025 16:09:49 +0000
Files and hashes:         1: joN3gQz5wgS7ElhPPltfBQNoJG8.crl (hash: ftOmwFWFF8O99cktac5QVHIN1qpOl/o8hyE4puFrWVI=)
                          2: 48BB49E8763A11EFA077F11CC4F9AE02.roa (hash: kbKWOZNJMc5q48ZGAPJwk/No5hClmF4tRx65umSQzAA=)
                          3: 214233D0E46211EBB880A73AC4F9AE02.roa (hash: 6/QNMRJMfmhsqJ5YbXLDxmEXn/zbT/i6HfO//en54kU=)
                          4: 229357E6E46211EBB880A73AC4F9AE02.roa (hash: iFyoONMIG+gLvaU5FtZucihntMHlbo8UufmNYBMrvoQ=)
                          5: 33522F58CC2D11EDABE25F72C4F9AE02.roa (hash: dENLQNT3Uuq2Es4LI+dM4ug9oH96dMTYv/SELS5gfsw=)
                          6: 31603938763B11EF810E6D1FC4F9AE02.roa (hash: 1j19aGSBfpfRncv0fjwzfiAR4hfpnxlqZfSFVELRCHw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7862 (0x1eb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F0E3
        Validity
            Not Before: Mar 28 16:09:49 2025 GMT
            Not After : Apr  4 16:09:49 2025 GMT
        Subject: CN=67e6c9cd-f496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ab:29:28:6d:69:e3:a1:6c:58:ef:43:fe:bd:
                    24:2b:f3:b0:13:51:00:22:ab:47:4a:ed:e1:89:b1:
                    b2:19:3a:4b:2c:ba:c0:af:ad:cf:92:da:39:d6:5f:
                    f8:8d:85:c2:2e:a1:60:26:a7:74:77:cb:48:1e:eb:
                    e6:21:2a:d6:cf:6a:39:a2:f6:46:28:f3:39:d8:bd:
                    6f:9b:05:2c:94:62:34:27:59:60:2a:ba:7b:57:1b:
                    bb:84:c0:73:27:95:1d:d6:27:03:d9:c4:94:8a:aa:
                    45:41:b2:db:e1:16:41:a6:01:63:76:8e:6c:12:84:
                    b5:36:0c:1b:0c:55:d9:96:6d:0b:84:b0:66:92:cc:
                    d4:20:94:bd:1d:82:e0:fb:c6:ec:b6:3a:b3:46:17:
                    d0:56:da:53:cf:9a:6c:30:1c:d2:9b:23:70:0f:dd:
                    e4:cb:09:86:98:1f:e5:13:65:b9:db:cd:aa:6c:6e:
                    5c:2b:00:18:f3:3c:f9:30:c2:2b:b6:05:f8:d3:d8:
                    39:a7:f7:22:56:ce:bc:34:42:ca:6b:2a:dc:bb:13:
                    d5:69:01:fc:bf:fd:8d:3d:29:53:76:8d:30:72:e2:
                    19:dc:f6:29:8a:c6:2c:74:89:57:c6:c9:82:c5:10:
                    81:0e:07:b8:26:96:e2:fb:f3:4c:f9:5b:da:52:5c:
                    f3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3D:8E:F6:9A:6C:ED:A1:70:AE:53:34:CC:31:12:BE:01:75:60:C2
            X509v3 Authority Key Identifier:
                keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:33:da:dc:30:0d:3d:b8:0b:46:fb:09:ff:68:53:5b:71:7a:
         6e:be:cf:7b:ef:a5:6a:ed:07:c8:e6:dd:1c:3a:e8:15:a4:39:
         67:29:2c:53:fc:53:96:b4:e7:1e:73:6f:cf:a9:2a:90:e1:04:
         19:8a:81:2a:8e:ac:fb:21:c5:c2:52:0d:49:e9:73:76:00:41:
         b2:ce:54:f3:d8:19:00:fb:49:41:f6:be:27:d5:dd:46:28:67:
         9e:3a:15:97:6f:fc:f4:e1:64:25:89:51:9a:6f:a3:d2:f5:bc:
         9c:36:b9:a8:79:95:ac:4d:27:a4:20:33:a5:b1:a2:d1:f2:66:
         e5:93:6d:5c:a7:f3:5b:90:41:72:69:c0:b6:b2:d4:45:de:96:
         71:1e:53:ed:13:e7:cb:b0:b1:4b:76:a1:a6:37:1f:51:83:cb:
         2c:08:b2:94:78:2f:b5:ea:ac:3a:a3:4a:2c:16:f9:da:47:89:
         ae:be:4e:55:34:04:29:18:d1:04:7c:2b:53:37:9d:e0:ce:02:
         7d:bc:bd:f9:86:b6:c6:cf:60:9a:7b:29:9a:77:6a:67:64:e4:
         11:9c:40:66:f1:49:96:d8:b3:75:80:5d:1f:31:c7:38:af:9e:
         6c:59:89:52:a2:79:b4:97:f4:b9:8e:e9:76:94:60:97:bb:36:
         6b:2c:a6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:32:24 2025 by rpki-client