Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
File:                     ez9g2bGigAKgeHXKtYohRXBz4X8.mft (raw, json)
Hash identifier:          k39H3u2Z8SEfCGBvAwMAXPArHIJo3hoB389oiDpLvF4=
Subject key identifier:   D4:8F:1F:BA:5B:56:5C:FE:41:35:34:74:79:58:52:A9:AD:B1:43:09
Authority key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
Certificate issuer:       /CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Certificate serial:       1668
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
Manifest number:          1627
Signing time:             Fri 28 Mar 2025 16:53:01 +0000
Manifest this update:     Fri 28 Mar 2025 16:53:01 +0000
Manifest next update:     Fri 04 Apr 2025 16:53:01 +0000
Files and hashes:         1: ez9g2bGigAKgeHXKtYohRXBz4X8.crl (hash: zwh/xnruzamooEbVFQs+1TsVOXQRI84a1qjNqZEWp0o=)
                          2: EE2F10889B4911EFBBAB9381C4F9AE02.roa (hash: YS8WNuWxStKa74t2bwPuweXXnEIkc2Ue/phDde2b0sM=)
                          3: 2CF180F0809511EFB8A82822C4F9AE02.roa (hash: CYhh4XyVeRLyav6pYm+YkGRqLbzQ4uo88iItY+mTMJ0=)
                          4: 774A232A718011EEA0E7EF5EC4F9AE02.roa (hash: 1JlLBdqPS0kEz6exVXOEg49WHo0dcXSRPxzHNWzm2DQ=)
                          5: 1DCB662A3DF211EB81F4CE73C4F9AE02.roa (hash: 4XthOzAgW9UsDg6fNNOwnO8eVqVTNxUxGbGHX+Su5Ds=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5736 (0x1668)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914254C
        Validity
            Not Before: Mar 28 16:53:01 2025 GMT
            Not After : Apr  4 16:53:01 2025 GMT
        Subject: CN=67e6d3ed-89cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:bb:4e:5d:26:34:b2:da:84:df:05:3c:74:ce:
                    9c:69:24:b4:57:f6:ad:d0:fa:80:b3:70:16:46:1d:
                    9c:cd:50:e7:41:be:25:c1:bf:08:00:1f:8d:30:c6:
                    a6:82:68:c8:2c:ff:0e:02:5f:6a:48:22:28:fb:9a:
                    6b:1e:31:bd:6f:b5:43:96:39:cb:f1:44:ed:c0:56:
                    7c:39:32:89:a7:a0:a0:e2:71:f7:76:81:af:b8:38:
                    8c:0c:f3:c6:3c:e9:3c:d8:cf:7f:b7:de:fb:64:2f:
                    42:b6:c0:c0:fa:79:88:58:31:a3:7f:b1:a9:6e:90:
                    33:bc:1f:df:22:2d:24:b5:4e:06:35:ac:ee:98:c8:
                    51:a7:c7:ca:87:63:b2:55:80:65:00:f9:53:93:5d:
                    e6:5b:e0:60:29:77:7f:60:3e:d0:49:64:ec:8f:8a:
                    d2:c6:8a:2f:52:d6:9d:ad:f1:1c:67:17:48:71:bf:
                    68:93:fe:80:d2:63:be:59:85:de:76:42:81:14:a1:
                    bc:ee:1a:86:0f:a3:5b:95:65:c9:04:a1:a6:a8:b0:
                    85:e9:8c:2b:13:37:e9:c4:26:b6:89:c5:78:a2:45:
                    e1:21:e8:89:80:fc:91:91:f8:8c:9f:80:06:62:62:
                    49:88:1d:4d:19:91:b4:54:67:81:7d:f0:00:ef:2b:
                    0e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8F:1F:BA:5B:56:5C:FE:41:35:34:74:79:58:52:A9:AD:B1:43:09
            X509v3 Authority Key Identifier:
                keyid:7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:2a:cb:97:4e:69:f8:65:8c:28:da:e4:ee:46:50:33:43:c1:
         05:3a:12:17:6b:eb:b8:78:bb:93:06:db:53:81:bd:fa:84:a1:
         48:fa:f6:42:d4:e3:9b:de:27:c5:f8:d8:ee:55:d8:54:ac:a5:
         91:81:38:e1:fc:2c:f5:d4:38:19:0a:e0:08:ed:5b:d6:46:a7:
         bd:83:5e:98:68:48:e8:23:46:97:74:b1:f7:9f:de:82:dd:84:
         8a:ea:b7:3f:ab:b4:3a:0e:aa:0f:4f:ad:02:4a:0f:eb:36:72:
         41:40:27:71:90:47:c0:c6:f9:5e:2c:6c:00:a4:e0:83:f4:2f:
         24:d2:e0:58:65:ea:2e:2d:2d:7c:7a:fd:e3:0b:28:68:bb:f7:
         d2:10:f9:07:e3:56:e6:5c:b2:1e:6f:20:19:20:2c:b1:34:9b:
         35:7c:d1:cf:82:fb:28:f1:0d:98:89:57:9b:03:fd:4f:4e:0f:
         d7:8d:b9:fe:78:d1:02:8f:d9:e3:43:86:78:83:cf:74:68:68:
         aa:54:d3:8d:6e:f1:15:ff:19:52:2f:8b:60:25:3d:28:19:3f:
         c3:25:14:ba:2c:8d:2a:8a:a9:c3:25:db:0c:4b:67:7a:bb:1c:
         50:a2:cf:8d:4c:e8:41:4c:5e:51:2b:d8:f1:17:aa:43:41:3e:
         fb:1f:4e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:30:10 2025 by rpki-client