Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft
File:                     B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft (raw, json)
Hash identifier:          DySgS+a1r9ft+3Tq9GFeE9Mh+H+X9IuSd1gf4bPcyYU=
Subject key identifier:   BC:B0:0E:3C:85:2E:66:4E:FA:96:67:4D:4B:E2:ED:73:27:7E:29:4E
Authority key identifier: 07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D
Certificate issuer:       /CN=A915D1F2/serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D
Certificate serial:       1165
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft
Manifest number:          115C
Signing time:             Fri 28 Mar 2025 17:21:44 +0000
Manifest this update:     Fri 28 Mar 2025 17:21:44 +0000
Manifest next update:     Fri 04 Apr 2025 17:21:44 +0000
Files and hashes:         1: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl (hash: QlXoAljzRCwF98XDA+ofx7lssEEFTFJp17cVKGxkAj8=)
                          2: 9467361CFEAA11E89E73E75BC4F9AE02.roa (hash: GyMFJG7vpXHHpv3BwX4n2XQfqCBxAhnBsVULLZ+wmKs=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4453 (0x1165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D1F2
        Validity
            Not Before: Mar 28 17:21:44 2025 GMT
            Not After : Apr  4 17:21:44 2025 GMT
        Subject: CN=67e6daa8-a92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:23:ae:42:1a:6a:a4:6e:63:f8:3c:1f:49:1a:
                    84:76:f8:67:ca:dc:7d:a4:b7:13:ec:80:5b:68:58:
                    5e:0f:b1:4a:d6:7e:7d:21:d7:d0:65:e9:ec:7d:b7:
                    ee:4b:b7:c5:de:10:5c:ae:47:76:ef:86:eb:60:72:
                    58:54:b6:5a:d5:c4:74:0d:e7:24:ba:5e:36:aa:b3:
                    8a:2e:6a:a4:da:a5:7f:2a:be:59:02:6d:91:e5:12:
                    4f:d6:bf:b7:7c:44:1d:a8:08:a8:39:39:a6:36:6c:
                    79:e5:71:7d:46:1f:f8:1b:17:8b:f8:e1:2f:00:83:
                    f5:4f:38:a3:b1:6f:0b:b5:e8:41:93:2c:bc:3a:87:
                    cf:40:97:b1:03:63:3a:d0:fb:07:25:c5:13:07:2c:
                    04:38:cc:fc:af:5f:6a:56:88:49:80:59:3d:e9:57:
                    e6:f5:91:d4:c9:37:97:e4:b2:27:60:e9:88:b9:5b:
                    9e:8c:ff:8e:38:2a:6b:70:a2:79:19:c2:7a:8e:0f:
                    2a:3e:e6:87:be:2f:cb:2e:20:da:18:cd:82:48:04:
                    0e:c0:3c:eb:df:51:3c:99:db:c5:2f:06:07:12:6b:
                    fb:f6:96:21:13:59:90:a2:f2:6f:69:b0:e5:a9:53:
                    29:1d:c3:0b:c9:e0:b1:69:75:a6:51:aa:32:6c:fc:
                    d4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B0:0E:3C:85:2E:66:4E:FA:96:67:4D:4B:E2:ED:73:27:7E:29:4E
            X509v3 Authority Key Identifier:
                keyid:07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ab:51:e2:a7:c0:fc:de:8e:cf:ab:53:64:45:8c:d5:a0:0f:
         34:cb:ae:05:42:05:68:50:fe:6c:4c:8f:0a:61:8a:fe:4c:3e:
         de:05:25:49:b7:6c:30:72:81:7a:22:80:af:0e:22:ef:f0:b2:
         40:49:96:89:78:fe:e9:c8:ba:4e:b3:2b:c8:67:ec:38:a0:a6:
         73:29:93:82:c8:80:d8:eb:92:a6:d1:c9:89:47:1f:3d:88:c6:
         7b:12:1a:99:7a:b9:6f:c9:5e:aa:c3:12:e2:cd:e2:32:9d:3b:
         01:a3:35:98:f3:06:f3:04:67:e2:08:99:ad:18:38:e2:7b:fc:
         59:52:6f:2a:fb:23:f9:20:f7:aa:6c:7b:2d:63:2e:36:bf:0b:
         9c:7a:73:63:db:e7:15:59:72:bd:96:a5:cc:e3:73:ed:7e:11:
         93:c8:dc:ee:e7:0d:f7:c6:09:dc:04:6c:fb:97:49:90:89:20:
         28:22:f0:c0:f7:0d:bb:62:7c:47:2a:0e:f3:7c:61:55:39:bb:
         b9:f6:4d:5b:3f:80:c1:90:32:47:d4:65:dd:41:38:8e:94:2e:
         bb:98:31:e8:1d:44:9c:19:1b:33:c5:07:a7:a2:f8:d4:bc:95:
         71:57:67:90:95:41:75:74:70:e5:bb:45:7c:e1:89:a6:58:24:
         4c:d4:b4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----