Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft
File:                     IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft (raw, json)
Hash identifier:          aPfkuYBaZxTYhsxFnuYuQpqZyh1cm/CtNbUE4sq+qQU=
Subject key identifier:   D6:94:78:EC:2E:24:F3:B5:34:19:6F:E7:7E:68:DE:D2:28:22:31:75
Authority key identifier: 22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83
Certificate issuer:       /CN=A9160BEB/serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783
Certificate serial:       0773
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft
Manifest number:          076D
Signing time:             Fri 28 Mar 2025 21:43:36 +0000
Manifest this update:     Fri 28 Mar 2025 21:43:35 +0000
Manifest next update:     Fri 04 Apr 2025 21:43:35 +0000
Files and hashes:         1: IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl (hash: amiayeekd7t7iR71BBI+ebzIl5Jrmu79YQEY8agImT4=)
                          2: 36F199B80D1311EBB2726077C4F9AE02.roa (hash: ZpzsQA87GX/2tqviCQB0PEkhLyPLFjNjzd1SWJ2fekk=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1907 (0x773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160BEB
        Validity
            Not Before: Mar 28 21:43:35 2025 GMT
            Not After : Apr  4 21:43:35 2025 GMT
        Subject: CN=67e71808-0e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:35:9f:96:5e:5d:11:a4:bd:26:47:2b:00:6d:
                    2b:65:6e:67:23:d6:04:f6:fa:8e:cf:b9:ee:e4:74:
                    76:94:90:78:fe:03:f4:db:9d:ec:90:4c:9a:5f:1b:
                    71:54:a5:18:df:ec:99:22:8c:15:12:6c:86:2b:c4:
                    54:4d:54:31:e7:64:a6:15:e0:c2:84:32:0c:5a:86:
                    a9:6d:91:bb:6b:58:14:77:2d:c3:40:18:ed:1a:9a:
                    cb:1d:11:86:21:59:aa:28:1f:98:4d:28:03:23:30:
                    99:0d:5a:47:a0:1e:3a:0d:6d:9b:60:42:4d:c5:e3:
                    21:47:62:91:97:26:fb:5c:01:1b:66:58:5a:db:6d:
                    66:59:82:cd:f1:c1:8c:20:e0:b9:80:63:b3:d8:49:
                    0a:68:ff:e2:41:66:ab:fb:c2:96:98:74:73:34:48:
                    03:a3:28:72:c3:93:dc:57:95:59:7e:60:c1:93:1a:
                    9b:bc:a5:6f:b7:ed:87:ad:07:aa:2a:4f:7a:2e:77:
                    e3:99:ec:eb:54:da:06:4b:e2:c5:c3:2b:f5:bc:18:
                    76:ae:64:92:0d:3e:94:98:96:d4:83:45:21:27:7c:
                    ce:bf:02:3c:25:70:5c:2a:73:72:46:86:07:be:67:
                    7b:50:14:cf:50:33:93:e1:9b:3e:43:dd:f1:e3:b5:
                    aa:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:94:78:EC:2E:24:F3:B5:34:19:6F:E7:7E:68:DE:D2:28:22:31:75
            X509v3 Authority Key Identifier:
                keyid:22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:48:0d:08:0f:d0:dc:97:88:65:ce:3b:c8:51:6c:36:52:92:
         f9:a8:2a:5e:04:de:23:98:34:bd:8b:60:e6:ab:7b:6a:d9:15:
         e5:f3:97:1d:46:d7:c6:2b:dc:72:a0:e5:48:8c:d3:be:f6:b2:
         7c:29:33:99:57:7f:0f:83:bd:44:6f:0f:a9:a4:52:c1:0b:44:
         c7:e2:28:7d:a5:b2:41:94:48:9d:73:d1:1d:7a:d3:ef:aa:77:
         0d:e6:57:68:a1:24:62:60:9b:75:39:74:78:ee:b5:fb:32:6f:
         46:74:83:52:3a:ea:96:20:08:92:c1:a2:51:28:6b:ac:88:75:
         59:83:12:ea:34:fd:24:e1:69:c2:03:da:91:4d:16:7a:3f:ae:
         90:92:87:1e:93:7a:37:74:c8:69:a2:cc:58:bb:bd:b0:6b:68:
         07:97:90:34:58:17:fd:36:3b:d7:33:63:e9:57:1d:e8:d9:7c:
         1e:6a:45:44:19:bf:72:ec:0f:88:92:7c:74:45:bc:cc:19:32:
         13:11:26:5d:6e:7a:7e:24:ee:b3:df:b8:68:61:31:0e:cc:0f:
         b6:86:53:b3:18:34:c2:19:6f:b4:e4:62:ea:d5:d9:0c:cb:26:
         a7:f3:71:86:8f:4f:77:50:ac:3a:16:3d:f9:76:af:2e:37:10:
         7d:83:bd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----