Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
File:                     CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft (raw, json)
Hash identifier:          PeRKc5ZOwfZqt98rGD9cxjl3MJvC+pajg4aX6Yn7x44=
Subject key identifier:   BB:FE:BF:E9:5C:85:4C:07:06:D2:9C:33:9E:85:81:F8:3A:D9:AF:35
Authority key identifier: 08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27
Certificate issuer:       /CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127
Certificate serial:       121D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
Manifest number:          19E5
Signing time:             Fri 28 Mar 2025 17:15:58 +0000
Manifest this update:     Fri 28 Mar 2025 17:15:58 +0000
Manifest next update:     Fri 04 Apr 2025 17:15:58 +0000
Files and hashes:         1: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl (hash: 5wdRNiCgOfWc+xa4Wz1RFbe4NbR7gflpGURqJoDroZ0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4637 (0x121d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164663
        Validity
            Not Before: Mar 28 17:15:58 2025 GMT
            Not After : Apr  4 17:15:58 2025 GMT
        Subject: CN=67e6d94e-9fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6d:bf:3a:45:b5:20:51:9a:94:34:7f:18:23:
                    52:59:45:41:00:38:84:10:6f:b0:58:c2:f6:7c:7b:
                    79:a0:64:1c:74:96:15:3a:7f:44:41:61:77:48:40:
                    8f:51:08:82:d9:f0:6f:3d:09:db:00:f0:68:e9:b9:
                    ad:e2:6e:dd:52:b5:5e:54:dc:1e:9a:46:69:f4:98:
                    40:01:33:10:1b:f9:85:91:80:71:39:a7:c8:df:fa:
                    7e:48:38:fb:eb:7c:31:1d:98:08:d1:c3:9a:70:e9:
                    be:1c:61:d6:e8:2d:cc:d0:a1:ff:ff:f2:a2:f2:00:
                    47:ed:97:98:5e:82:6a:79:eb:cb:0d:8f:4b:dd:03:
                    5f:75:a5:f2:5d:0d:45:07:d5:aa:20:57:aa:71:7b:
                    bb:11:be:49:e5:71:46:03:9b:e1:80:9d:7f:81:a1:
                    8b:2a:4f:ef:eb:ea:e9:2a:37:fe:27:d6:ff:76:89:
                    e0:1c:b7:d4:0e:b0:35:3e:0b:8d:49:7a:db:b6:4d:
                    f8:71:e7:50:d6:a6:86:fe:6f:c8:ce:7e:a1:a9:a7:
                    ea:d2:04:9a:96:6a:29:de:54:a0:de:bf:fe:9d:64:
                    de:2d:90:68:36:45:7d:ee:ea:44:33:90:d0:04:63:
                    c3:f3:d6:7b:0f:d6:97:58:54:18:0e:46:47:67:f6:
                    25:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FE:BF:E9:5C:85:4C:07:06:D2:9C:33:9E:85:81:F8:3A:D9:AF:35
            X509v3 Authority Key Identifier:
                keyid:08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:54:da:3e:ba:b4:82:c6:2c:92:57:13:8d:e1:4f:13:4d:10:
         1c:d5:c3:21:80:77:38:93:b2:34:76:78:10:50:70:8b:7f:5c:
         f2:44:d4:bd:07:09:55:5c:2a:44:d7:0e:76:c3:e9:4a:09:ea:
         e6:ae:3a:21:49:e0:13:a2:71:cf:b4:87:61:f4:29:d5:b7:bf:
         41:e9:12:b3:98:56:6e:cb:60:92:30:09:1e:38:83:f7:53:13:
         30:97:fa:5f:ed:ce:af:50:d1:fd:a2:81:6e:b1:ef:a3:96:c6:
         22:6f:26:49:7b:9f:16:20:43:c9:af:92:c5:32:72:4f:06:b0:
         4c:59:a9:d8:dc:04:ca:c7:b4:2c:f3:7f:5e:ed:fa:99:33:da:
         40:e5:f9:c5:66:28:bb:91:30:64:f1:41:83:0a:dc:8a:15:73:
         a3:0b:b1:ec:a2:71:5e:0a:2c:75:61:7f:30:ef:61:2b:52:f5:
         e2:58:8d:e7:1c:cf:4d:00:df:5d:2a:82:c9:06:5d:f9:ec:5a:
         2c:dc:a2:50:36:78:a9:d7:5f:ae:06:c4:f2:ab:4e:4e:b8:ae:
         fd:9f:e3:8b:6e:d1:05:1c:2c:3d:5b:98:11:17:ff:00:fa:0c:
         e1:18:72:3f:32:e0:1d:df:54:48:ee:b2:38:b1:0e:f6:37:cb:
         37:bd:7b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:59 2025 by rpki-client