Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
File:                     -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json)
Hash identifier:          VLPEk4K1R+ZPfv/Xs5EH8lUzpMif0qXPet+UspnVvsU=
Subject key identifier:   13:75:AC:68:B6:83:CF:87:91:4F:A2:B5:9A:84:0B:89:1C:02:FD:E6
Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B
Certificate issuer:       /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B
Certificate serial:       0F36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
Manifest number:          0F2A
Signing time:             Fri 28 Mar 2025 17:43:19 +0000
Manifest this update:     Fri 28 Mar 2025 17:43:19 +0000
Manifest next update:     Fri 04 Apr 2025 17:43:19 +0000
Files and hashes:         1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: fFLAsd40TU1o3Pyy4vGkxu9v1hNHyWPFGQPVYgax+bI=)
                          2: 05B3C1D2134511EAB2075B28C4F9AE02.roa (hash: 2Npny8Xc4G2jKdm76yDLadH0zjYEKsGaoRDTXa+wXvk=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3894 (0xf36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91657DD
        Validity
            Not Before: Mar 28 17:43:19 2025 GMT
            Not After : Apr  4 17:43:19 2025 GMT
        Subject: CN=67e6dfb7-271f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a3:61:a6:81:c8:d4:8f:e6:8e:7e:6b:b4:8f:
                    e3:68:d5:c9:d6:c5:d3:c1:65:bc:17:50:d8:50:28:
                    e7:13:28:d6:fb:98:73:1d:7a:4a:77:e4:d3:24:b5:
                    b0:fb:d4:ef:2f:f0:00:5f:9e:4d:69:a6:89:61:ca:
                    8c:5c:d3:7b:3c:b5:c8:bf:9f:31:26:f5:b7:77:04:
                    b0:00:7f:db:83:9f:63:1b:3b:28:af:40:e7:42:13:
                    4b:62:b6:56:1b:dd:4e:4e:e3:23:41:b7:9d:65:5b:
                    e3:d3:95:b3:f3:77:52:ca:d0:bf:b5:bf:64:67:f6:
                    16:79:c4:52:ee:8c:23:36:9e:b3:fb:57:7b:ed:82:
                    10:92:e7:b5:73:f0:d6:09:ce:64:25:c6:57:04:16:
                    79:2e:7d:54:19:a3:19:13:15:3b:cd:e7:b7:9c:96:
                    e6:30:a1:d4:36:d4:d8:19:1d:22:e6:44:cc:0c:ed:
                    0d:6c:be:ed:ae:6d:4d:67:bf:7b:cd:cb:8a:c2:8a:
                    20:bb:99:00:fb:e2:6a:a2:b7:38:03:f2:d6:bd:5d:
                    f2:91:fd:fb:6c:fe:eb:ba:bf:6a:ea:54:5e:f0:ad:
                    49:5b:a4:01:96:d3:28:49:0d:26:c1:0e:12:f5:4c:
                    8c:f9:40:42:0f:3b:b0:d3:17:bb:b6:60:9d:1e:e0:
                    a9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:75:AC:68:B6:83:CF:87:91:4F:A2:B5:9A:84:0B:89:1C:02:FD:E6
            X509v3 Authority Key Identifier:
                keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:85:c0:4d:58:18:ea:0d:bd:16:d3:3d:fb:63:95:45:66:53:
         f0:be:66:b3:03:60:20:bc:8a:3b:16:e8:94:a5:06:43:e5:cd:
         9a:56:67:af:6d:e6:ae:13:2f:87:99:fb:05:8e:fa:da:dc:93:
         cb:7c:48:84:e9:12:20:d8:cf:ff:ab:63:6e:d7:a3:ce:f3:9e:
         1f:21:d6:2e:ee:db:18:e6:d8:d8:a5:42:fb:ae:c0:af:91:0b:
         b0:20:09:e5:a8:b1:b0:83:a9:3c:f0:c6:6b:c7:3a:b9:bd:2f:
         0e:5a:b5:33:7a:7d:d9:ea:06:bf:70:8e:60:41:72:15:20:7c:
         88:0f:5a:fe:3f:44:a0:48:1e:d4:1e:c8:1b:cd:37:32:7d:98:
         f1:eb:5c:73:94:f3:16:c2:26:16:d4:42:fa:35:f5:ff:dd:81:
         51:a2:e4:c9:c9:b7:75:f7:35:50:76:2c:f2:89:44:1f:65:cf:
         c6:a9:92:b4:23:89:09:1c:01:35:57:e7:3d:74:26:0a:de:2e:
         75:9e:28:6f:c3:27:50:9f:e7:00:a7:14:0e:3b:e1:64:94:3c:
         77:17:c0:24:4d:55:31:61:fb:c9:81:1f:45:c7:91:3c:22:d1:
         a4:f0:f8:05:e4:f3:1a:cf:7e:a3:22:12:d8:81:ae:78:aa:33:
         54:c1:f0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----