Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
File:                     yiPsANw26PNUZ_BZkXTqC-_bQfk.mft (raw, json)
Hash identifier:          N4LSA1OH8mVnRpFBLZwddDQWscoorH9VMoMKjbq1Bv4=
Subject key identifier:   45:5D:D0:8B:F3:42:5F:7D:F4:3E:F7:A0:05:8D:FE:3D:64:48:BC:E1
Authority key identifier: CA:23:EC:00:DC:36:E8:F3:54:67:F0:59:91:74:EA:0B:EF:DB:41:F9
Certificate issuer:       /CN=A9142182/serialNumber=CA23EC00DC36E8F35467F0599174EA0BEFDB41F9
Certificate serial:       07FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
Manifest number:          07EB
Signing time:             Fri 28 Mar 2025 21:12:52 +0000
Manifest this update:     Fri 28 Mar 2025 21:12:52 +0000
Manifest next update:     Fri 04 Apr 2025 21:12:52 +0000
Files and hashes:         1: yiPsANw26PNUZ_BZkXTqC-_bQfk.crl (hash: 1NjbfbPOI8LJCgm4rjc3r5d3nJx8ISw5aE7eaZi3K3I=)
                          2: 584ED0CCDD1A11EA96723D11C4F9AE02.roa (hash: 5kUDYmJ4yH0CUdMpxOxfk0FcArn01dfqkN25Zg1CXyk=)
                          3: 180F88DEDD1611EABA2F7C82C4F9AE02.roa (hash: t4Mlw7tJOEB0j00nJw/m4xLHs7JGJvrbxajz+Hi3W7w=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2042 (0x7fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142182
        Validity
            Not Before: Mar 28 21:12:52 2025 GMT
            Not After : Apr  4 21:12:52 2025 GMT
        Subject: CN=67e710d4-7026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e1:3c:3f:5e:27:c2:0d:41:2a:ac:f5:39:91:
                    41:68:26:a9:f4:a4:9a:dc:5e:10:4a:d3:18:cd:9e:
                    96:21:f5:48:be:24:e3:f8:2b:e8:ee:26:ec:5c:10:
                    28:97:f4:59:0f:bd:30:02:7b:c3:3c:5c:54:ef:6c:
                    b4:3d:53:38:91:de:d7:2d:7d:67:57:53:5f:59:4d:
                    f3:16:bf:f3:3e:12:9e:a6:f5:f1:71:ed:a4:bf:b9:
                    91:3c:eb:45:25:af:fc:ee:7c:90:f3:76:1c:18:84:
                    43:94:9d:53:d7:5b:ba:ac:9a:86:1d:74:d9:a3:4c:
                    69:d9:b9:29:b8:23:8b:1f:20:d7:c8:4c:0c:99:84:
                    b0:3e:86:d2:1c:0b:5f:85:57:f3:8b:d2:0e:7c:4d:
                    ec:24:82:5d:17:f0:04:5b:0d:d6:70:fd:b5:71:b7:
                    41:06:f2:ba:23:cc:96:22:ce:d7:d8:1e:b1:6e:cf:
                    b1:a4:46:34:bc:25:02:d3:32:ea:35:b7:9f:30:b3:
                    e0:90:af:86:23:88:c0:7a:0d:67:9d:1d:05:44:4b:
                    51:05:52:bb:79:be:16:08:79:20:7f:c3:e2:47:12:
                    0d:7f:40:00:61:b3:07:37:ea:44:27:2d:4d:fb:45:
                    d7:8c:40:0a:c5:bb:4d:be:8d:04:74:d9:0c:0f:9b:
                    27:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5D:D0:8B:F3:42:5F:7D:F4:3E:F7:A0:05:8D:FE:3D:64:48:BC:E1
            X509v3 Authority Key Identifier:
                keyid:CA:23:EC:00:DC:36:E8:F3:54:67:F0:59:91:74:EA:0B:EF:DB:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:04:9a:a3:b6:a9:d4:4c:d4:2d:27:43:cf:ec:74:e0:05:be:
         33:0e:92:16:af:23:4a:85:7f:0d:52:bf:d5:b5:46:f2:d7:d7:
         72:83:0c:a5:83:8f:89:4b:56:ff:41:45:a5:c6:51:e0:4a:0a:
         c8:86:d7:c8:71:20:d0:80:a5:b3:55:51:15:90:c3:a3:f4:77:
         6c:0f:a2:58:95:94:e3:cb:6a:f3:a2:dd:dc:77:e1:b9:c6:52:
         7a:00:20:ba:60:a6:7e:80:43:7f:40:c2:92:16:80:da:27:60:
         5e:47:88:f5:2c:cf:3b:36:84:94:ae:9b:25:aa:2f:27:bd:e7:
         15:97:20:d6:07:e7:bc:a9:00:29:21:29:bc:b6:85:ef:e5:bf:
         33:f4:b9:7a:3e:4c:6f:c5:ce:2e:cd:47:43:5a:5e:d5:f7:c3:
         f9:5d:53:f5:9a:9f:48:3f:d0:2c:bb:0f:62:00:92:52:54:e3:
         45:eb:57:11:7a:85:d8:17:18:da:b8:ed:9b:b3:a8:93:96:d1:
         09:c4:67:0c:53:76:f2:05:b7:27:65:6e:a2:1a:90:af:d1:ae:
         0e:3c:c0:e0:d9:43:c9:ac:c4:a3:c6:b8:2c:9d:eb:ae:4a:fe:
         4a:52:fd:72:43:51:c1:04:89:38:3d:09:3c:70:b0:71:ca:ca:
         e0:76:7d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:43 2025 by rpki-client