Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/cIahuzAxFoOubaYN35fN9zN8tm8.mft
File:                     cIahuzAxFoOubaYN35fN9zN8tm8.mft (raw, json)
Hash identifier:          vkbgzZJ5OfhWw45e4mgZfb3n6jNqiaw9WSilvv4x8tU=
Subject key identifier:   CB:6E:20:00:7C:F9:83:47:C2:9F:42:0E:4B:44:16:5D:B0:29:80:0C
Authority key identifier: 70:86:A1:BB:30:31:16:83:AE:6D:A6:0D:DF:97:CD:F7:33:7C:B6:6F
Certificate issuer:       /CN=A915E077/serialNumber=7086A1BB30311683AE6DA60DDF97CDF7337CB66F
Certificate serial:       0773
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIahuzAxFoOubaYN35fN9zN8tm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/cIahuzAxFoOubaYN35fN9zN8tm8.mft
Manifest number:          0772
Signing time:             Fri 28 Mar 2025 21:39:07 +0000
Manifest this update:     Fri 28 Mar 2025 21:39:07 +0000
Manifest next update:     Fri 04 Apr 2025 21:39:07 +0000
Files and hashes:         1: cIahuzAxFoOubaYN35fN9zN8tm8.crl (hash: h4ddyAHBGkK4FHeojowwymwkny43ZAbXpEZSjF56pzU=)
                          2: 736816B806CB11EBB9A51287C4F9AE02.roa (hash: mnRywCOvlKSMzMEwT6a/uyPxhXI/A+zzNgPeDhshPxQ=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1907 (0x773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E077
        Validity
            Not Before: Mar 28 21:39:07 2025 GMT
            Not After : Apr  4 21:39:07 2025 GMT
        Subject: CN=67e716fb-efbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b4:e6:2d:1c:2b:2a:fa:0b:77:cf:67:42:14:
                    28:fb:2b:17:18:d2:0b:26:ef:5c:c3:31:b6:8c:c5:
                    71:08:97:89:4b:91:78:77:4a:f5:a1:42:d1:39:e7:
                    e8:7f:c3:ad:e5:2d:66:4c:18:fe:44:27:9d:68:9f:
                    25:c4:54:0a:06:e3:9b:68:99:c3:dc:f6:7e:3c:e5:
                    07:8a:8d:b0:ac:05:b2:6d:f3:37:7a:63:f8:19:5f:
                    c5:f1:83:45:bd:a1:b7:91:11:73:d0:09:36:5e:3d:
                    cc:04:5b:36:c1:19:5c:ba:2d:a2:26:66:a4:8b:e6:
                    2c:84:d3:d5:2a:bb:ba:46:c8:ec:3b:33:b6:3a:38:
                    91:25:ca:17:0e:28:fe:db:e1:52:05:78:b6:96:5a:
                    6b:3f:9d:a5:70:e1:dc:59:bf:c5:7e:f8:12:c1:3d:
                    32:25:0b:13:88:df:74:43:19:2e:7c:d9:f6:20:61:
                    2e:97:f4:67:68:43:d0:16:29:f8:bb:2f:bd:a7:95:
                    a9:8a:49:69:51:b9:1b:e7:95:5d:21:d0:cf:40:bb:
                    ca:63:3d:b1:36:51:41:a6:4c:df:25:78:9a:19:11:
                    a5:86:38:99:25:ce:85:92:ce:4e:50:6b:b4:c0:a6:
                    39:28:9b:32:6f:f4:a9:3e:01:d0:9e:25:51:8c:9d:
                    9b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6E:20:00:7C:F9:83:47:C2:9F:42:0E:4B:44:16:5D:B0:29:80:0C
            X509v3 Authority Key Identifier:
                keyid:70:86:A1:BB:30:31:16:83:AE:6D:A6:0D:DF:97:CD:F7:33:7C:B6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/cIahuzAxFoOubaYN35fN9zN8tm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIahuzAxFoOubaYN35fN9zN8tm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/cIahuzAxFoOubaYN35fN9zN8tm8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:10:0e:cd:af:46:9a:9f:9c:aa:e0:e7:38:24:a7:11:37:1a:
         80:d0:38:cc:4b:3c:5f:8d:f7:e5:90:72:f1:d3:a0:e1:06:a6:
         49:62:ba:2a:65:a8:0e:0f:3b:ce:e0:0f:1c:20:5b:41:e1:95:
         f6:5c:04:1d:90:d8:38:dc:69:ca:3e:91:44:3b:ef:ae:db:79:
         53:01:3a:b4:18:81:79:59:00:fe:14:bc:f8:93:f9:00:48:3a:
         8d:0c:0f:fe:2d:17:9f:61:42:11:2b:a0:44:dd:26:e4:91:80:
         c9:fb:16:49:31:bc:d4:f5:8c:61:89:ae:d3:e0:9f:6c:1a:2d:
         2b:6e:ad:f3:35:df:10:59:c8:56:13:00:d7:b4:c2:e2:82:ec:
         ba:f4:c0:65:ec:90:7f:a0:6c:95:c4:cb:98:ec:fc:16:bd:74:
         41:c0:18:1a:70:1d:f0:0f:83:40:eb:61:08:51:ee:17:dd:88:
         b6:b8:58:39:63:fb:52:de:68:11:9d:1c:95:22:27:fa:c2:2e:
         6b:1a:a1:4e:8f:36:cf:84:5a:1d:40:9b:4b:50:95:f4:0b:0c:
         5b:93:17:4b:3f:82:a1:18:35:2f:3b:43:e5:21:e8:d6:6f:5d:
         a3:2b:11:3c:7b:32:5a:43:69:b5:e1:ef:7d:60:ce:41:3e:52:
         39:58:65:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:29 2025 by rpki-client