Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft
File:                     9mmSZEF8IotR_hWzsey3hn8qJ0M.mft (raw, json)
Hash identifier:          4qbcqc/Wb58P/0KEcGpa4Bj5ucg156atmIVbFW2K/kQ=
Subject key identifier:   9D:DD:77:C8:61:A4:2B:0F:F2:C6:AC:F8:0A:1F:A5:7B:70:DB:F8:EB
Authority key identifier: F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43
Certificate issuer:       /CN=A9154020/serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743
Certificate serial:       1804
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft
Manifest number:          17F6
Signing time:             Fri 28 Mar 2025 16:39:08 +0000
Manifest this update:     Fri 28 Mar 2025 16:39:07 +0000
Manifest next update:     Fri 04 Apr 2025 16:39:07 +0000
Files and hashes:         1: 9mmSZEF8IotR_hWzsey3hn8qJ0M.crl (hash: V5jh/F5jFJ+PQY1TVaUcdxKUIzH04otmsTPE7cQhclM=)
                          2: C772BB4AF7A111ED874BEC62C4F9AE02.roa (hash: 12/YQGKh2uNHDbW3TNnX9cKDq/H76Hjbaf684uCZbYY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6148 (0x1804)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154020
        Validity
            Not Before: Mar 28 16:39:07 2025 GMT
            Not After : Apr  4 16:39:07 2025 GMT
        Subject: CN=67e6d0ab-247f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:60:e6:73:d8:e6:f4:2e:ef:da:0d:58:5a:80:
                    22:d7:7a:30:33:3c:28:4e:dd:e2:a8:df:5f:c6:0d:
                    28:73:33:cd:c6:07:e2:1f:f6:da:fa:6c:8f:0e:ea:
                    4c:3c:5a:d1:11:da:a2:fd:fb:68:02:c1:ec:ae:8d:
                    bb:bf:36:e4:be:6d:e7:43:d5:32:3a:41:34:67:49:
                    30:48:52:b5:60:fc:af:d8:b7:3c:9d:83:b5:d0:d2:
                    94:a1:19:3a:ac:34:49:49:61:71:d6:9c:11:1d:bb:
                    af:e9:21:a2:69:1c:cd:b5:21:3a:02:28:86:8e:10:
                    e0:e8:c8:95:bb:74:ba:fb:01:bd:a7:58:99:04:74:
                    ae:fe:60:ba:dc:bc:53:eb:ac:5d:c6:74:da:b2:cf:
                    2b:e6:3e:7b:11:5f:31:a5:9e:23:81:45:2e:5a:03:
                    3b:51:b8:66:1c:cb:71:b0:3e:8e:99:24:8b:79:fc:
                    d9:01:2d:5c:76:8e:4c:69:14:6d:79:a7:a2:35:9d:
                    73:8f:12:65:68:38:cb:30:25:f1:4d:ac:6f:8e:45:
                    a5:f7:6c:6a:84:90:ce:1d:29:5a:06:8d:9d:06:c4:
                    f6:77:bc:ff:8d:37:73:bf:3d:cd:84:a7:47:cb:3e:
                    62:72:9c:6a:1f:58:9e:76:54:82:4b:81:d3:ca:63:
                    83:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DD:77:C8:61:A4:2B:0F:F2:C6:AC:F8:0A:1F:A5:7B:70:DB:F8:EB
            X509v3 Authority Key Identifier:
                keyid:F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:73:c8:97:69:e3:fe:cf:ca:7c:23:52:ed:cc:c6:ed:64:98:
         fd:c0:9b:ce:47:e5:90:f1:f3:4b:c7:42:47:0c:25:95:2b:ff:
         48:5e:87:94:ae:8f:7e:39:0b:12:ed:13:1f:03:8c:d0:29:c1:
         ab:2d:06:52:53:b2:70:7d:a8:f0:68:3e:f9:d6:ab:34:43:3a:
         41:15:9f:70:b6:90:4b:bd:32:45:b2:d7:62:d2:c6:97:2e:24:
         40:5e:f5:60:5e:96:cf:d5:66:38:e6:59:04:25:cf:b2:0c:a3:
         1f:c8:dc:61:5f:0f:60:10:38:83:da:2e:c3:98:f2:27:67:41:
         0d:b0:74:18:cc:f0:57:be:5c:e5:f6:d6:d8:c7:3e:55:23:9b:
         fa:d5:13:1f:e2:94:6c:c6:62:31:47:2a:84:28:64:67:06:3b:
         2f:3f:10:47:24:05:a9:f2:48:f4:ec:38:67:49:bb:7b:8f:00:
         21:fc:ef:49:dd:cb:c0:50:e5:37:fb:4a:04:15:77:e0:a0:39:
         b7:79:1c:bc:f1:b2:91:5b:ec:a5:57:51:6b:2a:9d:3a:b6:b9:
         e5:2f:ff:9b:f3:9b:80:72:bd:be:4b:2f:1b:67:70:7c:8e:50:
         31:41:71:4c:a2:01:86:2d:be:3d:ef:ee:30:17:20:18:8f:3e:
         4c:12:59:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----