Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
File:                     UPIOqel1rkxMhmfLV_e89XAhXJY.mft (raw, json)
Hash identifier:          AtKk64VlBDpBi3uEouhmtsdYfzhgb0z+KmntVRNkKM0=
Subject key identifier:   CE:77:04:CE:71:80:7C:80:99:09:F2:97:C0:9D:55:15:3F:34:6D:50
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Certificate issuer:       /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial:       248C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
Manifest number:          241A
Signing time:             Fri 28 Mar 2025 15:54:02 +0000
Manifest this update:     Fri 28 Mar 2025 15:54:01 +0000
Manifest next update:     Fri 04 Apr 2025 15:54:01 +0000
Files and hashes:         1: UPIOqel1rkxMhmfLV_e89XAhXJY.crl (hash: P+KK68ivF1r5XjtLWBsXE8FTpHos4tyaASHUyYKIFh8=)
                          2: 773D7A96B0DC11ECAEC09469C4F9AE02.roa (hash: JSTjxevpQh7Y9WIfXMl2eIjomxLJnjI/r2tIU+oc0Ig=)
                          3: D327C18CDFEC11ED9AB6E147C4F9AE02.roa (hash: DkDF5ioX13OuJfh2JylvgLRRw6+AIn++z0lBKozZ6IM=)
                          4: B8951CDCD23611EA8D9E515BC4F9AE02.roa (hash: 3p58ypdk04ElN+6HEttw9qJ/C60XU0tMI9YBNjvhXdM=)
                          5: E706A8B2BBF111EE8697E433C4F9AE02.roa (hash: cishBm9UdoGGvPuPGzEAmXBlRKMXNl1QLjdbaBeI7B0=)
                          6: 1A2298A2D23811EABDECA85FC4F9AE02.roa (hash: tFtHJDRq68MkxOGT5VgkwrnSGzaE039FiHh4oq6Q4EQ=)
                          7: 491B85B2E58911ED94960F39C4F9AE02.roa (hash: 1fv7fZFzFEs/sLkCGSCbMf5alHoPqZF1EHmGHYYm0ys=)
                          8: 06239EBADFEA11ED835B4D0EC4F9AE02.roa (hash: yndVn7hcuDMCdpxEcUDVR9meRxJpnYlQ5KdYems+Xe0=)
                          9: 59B3485028C111E7A885571AC4F9AE02.roa (hash: cpxWzbtBjfOYkdrL+G3YkBQCddhQ01gMHqlqKByoADs=)
                          10: 554E53D4B0B811EC9BE93E24C4F9AE02.roa (hash: zWhiAKzwQg9bP+RZqYCDyP/HTuRht7KXbJE7TpD4TKc=)
                          11: 5A2BB4DE28C111E7A885571AC4F9AE02.roa (hash: lmPij0yxhpci1H7hfOEpStvrCK/OQdYLZzjGWxHldlQ=)
                          12: D50024D6DFEC11ED9AB6E147C4F9AE02.roa (hash: 2+yQDxtXyRNPNjJL9oTb98cBeK8O2vaQ5rcmSwbKfuo=)
                          13: D451FBE0DFEC11ED9AB6E147C4F9AE02.roa (hash: nJrkbLig1vTmSgjt6NVxXjjZt4z8n2VfbVQLKGqNIWA=)
                          14: AFF73BD2BA0811EAB2479081C4F9AE02.roa (hash: p9SLtL5if79gMeg3/pCzWcvV/1N47/hD8cmWrtc34us=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9356 (0x248c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C62B
        Validity
            Not Before: Mar 28 15:54:01 2025 GMT
            Not After : Apr  4 15:54:01 2025 GMT
        Subject: CN=67e6c61a-6730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:19:87:71:10:1c:8e:5f:cf:c3:fd:25:8d:
                    b0:78:93:29:70:14:9b:96:51:84:18:c3:37:ae:be:
                    8f:c8:00:61:08:13:08:7a:a5:02:70:22:a0:b1:5b:
                    13:4e:fb:39:12:92:88:02:92:0c:d5:14:e6:c0:a9:
                    fb:7d:ff:dd:a2:8b:21:7b:c5:09:19:fc:8c:64:6d:
                    f7:a9:d6:76:a6:4a:7b:33:b5:cf:35:70:f0:1e:00:
                    29:80:be:2d:f8:1b:56:27:ff:c4:d3:f5:94:be:5a:
                    84:9e:51:b3:05:5e:cd:1d:e6:f3:45:ce:9c:07:c0:
                    64:c4:e3:df:02:0c:af:c1:83:87:03:05:72:4f:fe:
                    a8:c7:68:66:2c:a5:73:07:01:be:e6:0b:68:cf:0c:
                    13:6b:16:21:c4:a9:85:67:f2:18:ac:9e:96:c8:6c:
                    50:9c:4c:9b:72:1c:5b:82:0f:84:2e:cb:d3:ca:d8:
                    a5:8f:99:dd:43:fd:ce:0a:dc:c5:67:93:d7:12:83:
                    49:1f:c7:32:4a:58:e8:90:45:64:4b:63:42:be:af:
                    31:76:cc:61:40:d2:76:cd:4f:f3:c9:96:b1:ca:7f:
                    4f:c5:01:67:ce:df:3e:75:85:59:bb:30:2b:f3:27:
                    d3:1d:39:bf:63:27:86:f2:e5:3f:0c:7a:37:1e:b8:
                    cd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:77:04:CE:71:80:7C:80:99:09:F2:97:C0:9D:55:15:3F:34:6D:50
            X509v3 Authority Key Identifier:
                keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ea:36:07:45:29:3c:68:4a:07:e9:2f:96:e0:17:0c:9a:12:
         c8:ce:14:a0:bc:87:47:c6:93:58:28:8e:d5:d1:26:4f:4a:d8:
         28:64:5f:06:e6:e0:ea:15:f3:d0:29:49:9c:5d:cd:87:fa:49:
         b7:ae:c4:ea:6a:6a:e6:d9:58:50:6d:bf:fc:73:b0:80:34:37:
         64:af:93:00:4c:80:e0:c2:fa:bd:1d:f3:7c:c0:ed:6b:21:02:
         cd:1e:de:d5:c3:d8:73:cf:05:92:e1:de:14:b2:8a:e1:7a:4e:
         71:ef:93:48:05:68:fe:c3:fd:ca:b7:5e:e0:43:5e:d1:cf:2e:
         87:3f:46:0a:21:16:60:a5:74:40:27:f4:f3:13:db:51:44:6b:
         05:ad:96:28:04:73:06:00:cc:9e:a6:99:ee:c3:9a:ee:c4:f2:
         03:56:4e:91:ee:30:07:bc:c0:c6:57:16:5f:0c:71:ea:18:fc:
         6f:b3:4a:b6:f8:1e:79:8d:e6:6f:01:bd:69:45:80:6e:74:2e:
         61:17:bc:c3:ba:6c:23:84:45:9d:c8:37:43:8a:23:d7:f4:60:
         4e:bb:48:cb:78:e6:83:12:03:d6:d2:00:2a:26:64:71:6a:e6:
         43:bd:db:b8:bf:ba:3a:29:5d:b8:84:cf:45:44:01:cd:9a:4c:
         50:d3:a5:21
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUM2MkIxMTAvBgNVBAUTKDUwRjIwRUE5RTk3NUFFNEM0Qzg2NjdDQjU3RjdCQ0Y1
NzAyMTVDOTYwHhcNMjUwMzI4MTU1NDAxWhcNMjUwNDA0MTU1NDAxWjAYMRYwFAYD
VQQDEw02N2U2YzYxYS02NzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAulsZh3EQHI5fz8P9JY2weJMpcBSbllGEGMM3rr6PyABhCBMIeqUCcCKgsVsT
Tvs5EpKIApIM1RTmwKn7ff/dooshe8UJGfyMZG33qdZ2pkp7M7XPNXDwHgApgL4t
+BtWJ//E0/WUvlqEnlGzBV7NHebzRc6cB8BkxOPfAgyvwYOHAwVyT/6ox2hmLKVz
BwG+5gtozwwTaxYhxKmFZ/IYrJ6WyGxQnEybchxbgg+ELsvTytilj5ndQ/3OCtzF
Z5PXEoNJH8cySljokEVkS2NCvq8xdsxhQNJ2zU/zyZaxyn9PxQFnzt8+dYVZuzAr
8yfTHTm/YyeG8uU/DHo3HrjNZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM53BM5x
gHyAmQnyl8CdVRU/NG1QMB8GA1UdIwQYMBaAFFDyDqnpda5MTIZny1f3vPVwIVyW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzYyQi82NEEwNTE0NjYw
MTIxMUU1QkU5MjUwNzBDNEY5QUUwMi9VUElPcWVsMXJreE1obWZMVl9lODlYQWhY
SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VQSU9xZWwxcmt4TWhtZkxWX2U4OVhBaFhKWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QzYyQi82NEEwNTE0NjYwMTIxMUU1QkU5MjUwNzBDNEY5QUUwMi9VUElPcWVsMXJr
eE1obWZMVl9lODlYQWhYSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBO6jYHRSk8aEoH6S+W4BcMmhLIzhSgvIdHxpNYKI7V0SZPStgoZF8G
5uDqFfPQKUmcXc2H+km3rsTqamrm2VhQbb/8c7CANDdkr5MATIDgwvq9HfN8wO1r
IQLNHt7Vw9hzzwWS4d4Usorhek5x75NIBWj+w/3Kt17gQ17Rzy6HP0YKIRZgpXRA
J/TzE9tRRGsFrZYoBHMGAMyeppnuw5ruxPIDVk6R7jAHvMDGVxZfDHHqGPxvs0q2
+B55jeZvAb1pRYBudC5hF7zDumwjhEWdyDdDiiPX9GBOu0jLeOaDEgPW0gAqJmRx
auZDvdu4v7o6KV24hM9FRAHNmkxQ06Uh
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:30:54 2025 by rpki-client