Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
File:                     7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json)
Hash identifier:          bCbbuVgL4qZrHkSTcZ3tA07lSAZgQOmxi8tNZVhLmrU=
Subject key identifier:   36:33:F7:49:65:B7:AD:9F:28:71:94:BD:9D:BC:40:B7:4E:DA:19:F9
Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
Certificate issuer:       /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Certificate serial:       09D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
Manifest number:          099E
Signing time:             Fri 28 Mar 2025 20:27:16 +0000
Manifest this update:     Fri 28 Mar 2025 20:27:15 +0000
Manifest next update:     Fri 04 Apr 2025 20:27:15 +0000
Files and hashes:         1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: zsfgU3IV4hdDCPNQYP94wriji9VWhYGVmaT+2jYtDY0=)
                          2: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: 838b7qHkfNcVQ+dG+2+ikVBrip48qajejDAv66Es7Do=)
                          3: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: lHubJpI54TUZB9ErKrK2Uh2G0dB2IBaNDMotiEzD5Do=)
                          4: A2120E06FD7F11EFA8C89755C4F9AE02.roa (hash: t6q2fLRleWOAh29sMouXev7NxP/StSGtuqhQ1bcdSrI=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2518 (0x9d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146944
        Validity
            Not Before: Mar 28 20:27:15 2025 GMT
            Not After : Apr  4 20:27:15 2025 GMT
        Subject: CN=67e70623-e6af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ac:96:da:db:b2:9d:39:a4:6c:03:a9:2b:77:
                    03:fd:35:3d:25:01:62:ec:88:b5:0c:99:12:52:d9:
                    b6:d6:4c:73:4e:53:3a:6b:3e:82:5c:7b:38:07:28:
                    8d:0b:b8:2a:bb:ea:21:9f:03:ce:53:fc:41:d4:f0:
                    ba:7a:f2:d2:1c:a7:3c:c4:4f:83:4d:5b:4a:62:29:
                    8e:53:87:82:9e:5b:02:18:b5:6d:2e:31:e8:42:68:
                    9e:d5:d9:5e:d2:1c:3d:28:6d:f1:60:14:ca:aa:f0:
                    e5:13:b8:8b:19:26:44:5f:a0:e2:73:e7:79:e1:23:
                    50:e5:ad:e1:dd:db:e7:f4:7f:ae:35:80:54:c9:48:
                    20:67:25:c4:87:7e:93:ed:a3:9d:1d:23:a9:41:1f:
                    a6:db:23:3e:49:16:b7:7f:04:7f:a8:fa:21:3d:41:
                    6c:b5:77:b8:7f:87:70:1d:17:20:6b:0d:b2:31:9e:
                    0c:f0:71:28:67:64:35:3b:fe:55:24:d4:71:97:56:
                    a7:fc:83:d4:9e:25:55:60:28:c3:4a:e3:e2:d1:b1:
                    17:16:98:b6:18:d5:b2:cc:c6:6e:53:e3:4f:6b:fa:
                    7c:b6:ef:d2:47:39:0a:89:ee:52:ce:73:f3:0e:5a:
                    b4:df:c6:59:11:9e:d4:58:7a:35:ba:3e:9a:41:d6:
                    e8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:33:F7:49:65:B7:AD:9F:28:71:94:BD:9D:BC:40:B7:4E:DA:19:F9
            X509v3 Authority Key Identifier:
                keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d6:56:5f:be:1e:fe:60:f6:a2:c7:8e:f3:5a:38:c1:47:a2:
         a8:77:4b:3b:62:5e:d8:4b:52:0b:75:e3:a9:99:73:0b:da:4d:
         07:11:90:1d:8b:78:48:71:c7:59:aa:cf:bf:5e:8a:ba:7c:f3:
         a3:b6:a2:60:61:25:5c:11:6b:c3:9e:e5:39:fd:d2:13:37:e2:
         e2:ea:e2:dc:2d:55:98:f4:39:64:6c:67:ee:1d:7d:a2:3a:bc:
         14:ff:aa:70:e0:bd:03:b8:be:5a:ff:35:42:d2:42:56:de:71:
         64:f9:0f:0a:19:d7:2b:4d:05:48:12:04:3a:6b:c7:a3:ab:78:
         c3:1e:8d:9d:31:a4:1c:30:fa:fe:f2:e4:f6:89:4e:21:bc:3f:
         65:53:3a:60:fb:63:70:cc:1b:68:a6:fb:8f:0d:a0:d2:cb:6a:
         b7:e3:1b:8f:dc:5d:87:15:59:81:2b:ba:c0:00:bb:23:1f:42:
         80:14:96:47:7c:ba:9c:c9:41:ec:8d:63:b4:7d:6a:bf:b1:d7:
         40:de:6c:3f:eb:54:97:98:3d:80:da:fe:43:0b:b8:52:7f:64:
         bd:23:c2:83:0a:86:25:34:e9:3c:a6:38:1f:c3:b9:6a:e4:1c:
         07:5a:a4:36:82:e9:50:1b:9e:e3:39:d5:55:a1:0e:47:b2:50:
         9a:66:64:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----