Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
File:                     qDxuziIztsuMwOthPwqVLIM8A6E.mft (raw, json)
Hash identifier:          BK8uLc9w1f2oVoxoAcN9UUNrIpeJBByydvb7jJ1fog4=
Subject key identifier:   2D:0A:C2:E0:E5:0F:42:AA:2B:35:7D:E8:2A:F4:E5:67:F1:B0:98:CF
Authority key identifier: A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1
Certificate issuer:       /CN=A9155447/serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1
Certificate serial:       31EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
Manifest number:          31E6
Signing time:             Fri 28 Mar 2025 15:31:30 +0000
Manifest this update:     Fri 28 Mar 2025 15:31:30 +0000
Manifest next update:     Fri 04 Apr 2025 15:31:30 +0000
Files and hashes:         1: qDxuziIztsuMwOthPwqVLIM8A6E.crl (hash: vqwW8TX+8PCDAhxFTv/TbDlb/aRyMMbIkOAz1F5HKtM=)
                          2: 3A6CB168758811EA93AADD3FC4F9AE02.roa (hash: vZA2+KWBR1wDSvH4IKxEBdO5KRub7QRUaZOldm9+tP8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12782 (0x31ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155447
        Validity
            Not Before: Mar 28 15:31:30 2025 GMT
            Not After : Apr  4 15:31:30 2025 GMT
        Subject: CN=67e6c0d2-1875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4b:9e:63:9d:95:3b:c8:57:21:58:52:da:7c:
                    03:6e:e8:96:1c:f6:8e:44:85:f6:7b:96:b7:9b:b3:
                    af:5c:16:7f:0e:6d:b1:0e:0a:c9:8c:02:21:f5:38:
                    2b:6e:b7:84:80:e5:1c:64:1f:1c:c6:b7:43:cc:ca:
                    72:a2:5e:a6:6d:7b:6a:d0:ae:fd:8f:32:31:d1:4d:
                    8b:71:73:09:94:59:26:86:a7:f7:41:b8:5b:d3:77:
                    53:3f:c0:74:c9:23:e5:02:aa:83:c5:35:43:9a:be:
                    4e:50:c7:b2:e4:28:c4:91:25:13:d1:75:b2:d3:bc:
                    47:c4:d7:e7:b5:1b:77:92:0d:cf:29:1e:b7:de:06:
                    a1:1d:7c:43:1e:23:00:93:ba:e6:93:51:0c:7e:a4:
                    bd:2d:9f:a2:ff:f2:44:44:65:60:b9:c5:50:d5:f6:
                    17:e2:08:3f:70:20:34:98:14:cb:5f:22:3a:49:41:
                    3e:8d:62:a5:b1:c9:eb:82:20:a0:d9:bc:8f:25:c6:
                    a4:0d:bd:6a:27:bb:7d:2e:cb:01:8a:08:3a:b2:63:
                    5f:2f:af:d2:68:d4:82:90:93:73:b2:07:9f:3d:98:
                    2f:a0:6e:e2:04:da:18:34:08:c3:7d:a9:2a:c5:98:
                    65:ad:70:3e:10:45:23:af:cf:56:a3:3a:8d:ae:90:
                    d9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0A:C2:E0:E5:0F:42:AA:2B:35:7D:E8:2A:F4:E5:67:F1:B0:98:CF
            X509v3 Authority Key Identifier:
                keyid:A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:aa:89:9d:bc:91:36:35:fe:2f:8b:df:30:22:f5:98:61:be:
         84:c8:fc:ec:03:1b:2a:59:27:dc:1f:b3:87:ac:de:e6:41:5c:
         de:90:27:f3:6b:b2:dc:e3:75:36:7d:fd:32:37:e5:3f:79:6a:
         18:c3:5c:3d:94:bd:f0:ed:82:cd:25:3d:31:c5:fa:63:9d:f9:
         3d:7a:76:4e:06:4d:ca:8e:c3:11:56:8c:56:95:ab:60:a1:5f:
         57:6e:55:ed:df:ae:c0:f1:8d:59:7d:84:db:55:fc:c0:1c:d8:
         3f:46:09:ad:7f:50:2f:30:51:90:aa:12:3d:f9:f0:39:0a:24:
         06:65:5c:fa:3d:e3:5c:9b:43:c8:0d:cb:7c:27:ed:f9:6c:fa:
         63:73:86:e4:46:77:8a:e1:5d:af:69:72:72:d9:41:3f:a1:4c:
         a8:1b:bc:99:2c:de:4d:c9:83:f6:fa:cd:1b:5e:99:de:6e:da:
         4e:57:2e:de:15:b4:67:09:f1:65:66:a5:7e:b2:e2:8f:95:b7:
         4c:24:7c:9f:e1:a6:62:ce:24:8d:89:f6:1f:64:19:0d:8b:ce:
         4f:b1:b1:d8:cb:2b:c2:3f:c8:43:c8:a6:2b:15:18:fb:60:49:
         e6:17:02:8c:4a:3e:3a:6c:9f:55:57:44:bb:86:d7:81:d9:25:
         d1:8c:e8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:30:02 2025 by rpki-client