Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
File:                     u1uBVrA35dIiY-rH9qEcBS_fYz8.mft (raw, json)
Hash identifier:          cG2S/ope9xzGXA3074fAoJxm8aHF8falrb8A1rVF7bc=
Subject key identifier:   58:EB:65:B4:E8:BB:A0:54:51:6C:D9:35:C4:71:E2:69:87:08:EF:C1
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       34A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
Manifest number:          33E8
Signing time:             Fri 28 Mar 2025 15:27:47 +0000
Manifest this update:     Fri 28 Mar 2025 15:27:47 +0000
Manifest next update:     Fri 04 Apr 2025 15:27:47 +0000
Files and hashes:         1: u1uBVrA35dIiY-rH9qEcBS_fYz8.crl (hash: /WbnBJXyqEL7uomYynGr+1+nlI1WPol9gZPYiRuSYIo=)
                          2: ABD794FA669A11EFAA2C7969C4F9AE02.roa (hash: 9Qn8aFf7p6N36Fv6YEyF55suUiOU5orxeM/BoE6pOUU=)
                          3: 47E1F234B45111EEA556091EC4F9AE02.roa (hash: MUgpGvnpkewn251zM5+9m0/+F8vMSfuS6+jNZpfHvgc=)
                          4: 6159E3148BEB11ED9A3CD825C4F9AE02.roa (hash: qzbXivpb0JIa597930ox0hSBuWQ7KjKDNIli1RBqDkg=)
                          5: 22C2A76E854811EFA776AC73C4F9AE02.roa (hash: sSX7DNQqfge4ejL0oQv0Vd+5TBaBgIDn0NKDxugYUZY=)
                          6: 9826D5EEB45011EE829AF51CC4F9AE02.roa (hash: xKsyGzAN2c32GCPMOdzL9UsUOFCUvwfUwAzlRCnyX9k=)
                          7: 00E33588AD6A11EFBAD17A59C4F9AE02.roa (hash: eFmh82GukzWgT6djS8c7+wivzDuQ+NMo4zOollz6JbE=)
                          8: F180E2B24FD011EFBC17A55DC4F9AE02.roa (hash: r42Wrd5v16HHY09V/7aHdghj31XTt2Wo0W8AVIafdO0=)
                          9: 9B6837A8AD6911EFA86BAA58C4F9AE02.roa (hash: pWg9J7cYk+HXhg4hXPdqT10Vpf+1vT1PV33YnS6AG6c=)
                          10: D28E7D62854811EFA29BE474C4F9AE02.roa (hash: 7+m/rprtwB3rQB9AuZkZXxKmZXlWFQztBa9eRId8M7Y=)
                          11: 23160B46E5F311EF91363648C4F9AE02.roa (hash: B8DesdgjvndB95FkjEzRdjKdjw0N8V3673VCWZdPQlU=)
                          12: 6C71053CAE2311EFAEB8B36AC4F9AE02.roa (hash: UB5jeT2vrtRpFNW5uH0buWOahHBRPdxwoEQZBy8ZiUA=)
                          13: E9E37A28AD6911EFB6E53159C4F9AE02.roa (hash: z+Wb4gqIzNLeSAdA2Pq8enJbmWtWlhXLEadFxTzm+BI=)
                          14: AA5075824F1811EFB6ECD54CC4F9AE02.roa (hash: zl75vWdRPXnP/XOghAc53jzYLr8BLgxiVkpvltTQaAc=)
                          15: 0A5276E04BB611EE8F105367C4F9AE02.roa (hash: /CXIwsodeDV6hc0P1vlVjGHFyr0hi79zRbh9IHZPKLQ=)
                          16: D38D71F0854811EFA29BE474C4F9AE02.roa (hash: IDgcdtogLK4WY97A8X0xizLzh/LAABb6GSfrSIGEwSQ=)
                          17: 6B016F4EB6C911EF9370FA5AC4F9AE02.roa (hash: 70B3F87XSLKvXUF998Hdc/HoObUhGZVos2Z7tXO0ymU=)
                          18: 60DB91E48BEB11ED9A3CD825C4F9AE02.roa (hash: cHqxUZqTQHQkS9uClycnmDqyKizAF8Nm5ODi8+cgf8M=)
                          19: B06C3C12AD6911EF9690E658C4F9AE02.roa (hash: R80o79Cf/gewMorDyo1D6ic4qzsusUsJXg7M2vOiDxY=)
                          20: FFAD463CB6C811EFAE27D256C4F9AE02.roa (hash: HocrnYD4sH7ksGOE0tlJzfX5xEpSjRMS91r9PGL/s1E=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13473 (0x34a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F
        Validity
            Not Before: Mar 28 15:27:47 2025 GMT
            Not After : Apr  4 15:27:47 2025 GMT
        Subject: CN=67e6bff3-dced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d3:69:e8:d6:94:4b:a7:48:65:48:ba:52:11:
                    57:69:51:b9:32:c7:80:5f:f8:a9:18:fe:06:aa:a4:
                    7a:85:ee:02:53:58:74:98:26:4a:99:da:8b:58:cd:
                    f3:9f:41:5d:f2:6d:df:52:b5:bb:c1:7e:1b:d2:2f:
                    22:e3:66:62:97:9e:a5:29:ca:dc:22:f9:4a:46:f2:
                    7a:88:ba:cc:29:ae:5f:a8:9f:41:0d:a8:92:94:68:
                    f7:67:24:1a:8d:31:9d:0b:13:76:46:b3:b5:da:6d:
                    24:70:32:d7:1f:67:64:cf:a3:68:17:26:a8:11:0d:
                    27:8a:a8:27:36:2c:4e:b6:db:53:d5:1b:62:12:f3:
                    8e:50:68:6e:21:4f:70:ea:ee:81:5b:ae:6b:05:ea:
                    d3:c5:a1:af:7c:6b:c8:f6:f5:c2:4f:26:e1:63:46:
                    ce:db:10:84:76:c9:de:1a:3c:be:3a:37:b8:39:03:
                    45:20:42:26:2a:a9:42:e1:3a:fc:ab:c4:8d:23:b4:
                    41:b6:87:97:73:cd:6b:ad:50:4b:77:75:ce:02:0b:
                    32:64:6b:ef:45:d2:40:34:ef:82:b4:88:1f:f7:47:
                    71:7b:c3:ec:34:cd:1f:84:a6:ba:ae:98:4a:07:a1:
                    fb:5e:64:4c:09:9e:7d:2c:26:ad:dd:7c:1f:e1:46:
                    3e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EB:65:B4:E8:BB:A0:54:51:6C:D9:35:C4:71:E2:69:87:08:EF:C1
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:cf:36:57:5b:4b:46:02:9a:f3:96:a6:fc:4b:12:d6:04:b4:
         d7:5c:9b:dd:bd:ea:fd:b3:32:c3:ef:d4:7f:0b:e5:73:2f:43:
         df:d6:c5:93:24:fe:8c:86:28:bb:b1:50:08:45:bb:e8:c4:64:
         56:5f:27:61:34:6b:9d:bf:e7:af:3e:16:e0:40:80:d6:d3:1b:
         a5:9d:21:bd:84:28:cb:a8:d6:aa:0d:0c:72:2e:3b:82:af:25:
         bd:3f:5e:3d:93:bc:77:8b:96:9d:44:32:0c:9b:4f:e5:cd:de:
         4d:cb:ee:5a:c7:a3:e4:99:5c:6d:f5:81:b6:75:b7:36:0c:6f:
         36:4c:5a:b7:63:de:3f:a1:35:37:6f:88:1e:34:bf:23:76:f3:
         70:80:59:1a:93:f6:ee:32:da:9d:4d:36:8b:21:ff:12:42:d7:
         38:c5:45:3e:f2:71:e8:42:9b:9b:91:60:40:c2:0b:b3:a9:f7:
         38:2b:19:e7:d8:2c:24:c8:5a:fb:9d:1a:81:b0:7b:7f:55:89:
         f3:fb:0e:26:a6:e7:ac:36:41:fc:57:da:ab:6d:87:0b:f9:b2:
         c6:1f:b7:01:00:71:9b:f7:b9:23:6b:16:41:6a:32:66:0b:a3:
         b5:51:77:89:74:30:67:df:20:7a:61:4d:5b:ab:c9:a7:fd:37:
         f2:09:0e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:30:08 2025 by rpki-client