Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
File:                     Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft (raw, json)
Hash identifier:          R28Z1IRPL/EKFIiAVyznsslKiAtsvOI0IHQZFp/e4ek=
Subject key identifier:   B4:E8:BE:24:8B:90:72:9F:08:63:D5:4B:60:9A:C0:FC:7E:62:5B:7F
Authority key identifier: 56:0B:BD:60:06:CE:CD:73:00:D1:52:4C:8A:27:43:9A:BB:F1:59:7E
Certificate issuer:       /CN=A9171172/serialNumber=560BBD6006CECD7300D1524C8A27439ABBF1597E
Certificate serial:       074A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
Manifest number:          074A
Signing time:             Fri 28 Mar 2025 21:54:45 +0000
Manifest this update:     Fri 28 Mar 2025 21:54:44 +0000
Manifest next update:     Fri 04 Apr 2025 21:54:44 +0000
Files and hashes:         1: Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl (hash: JiMTbwRAkWTx4JZ9eIWRe2BmNO+of1foO+Dp6cFMfIM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1866 (0x74a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171172
        Validity
            Not Before: Mar 28 21:54:44 2025 GMT
            Not After : Apr  4 21:54:44 2025 GMT
        Subject: CN=67e71aa4-bb27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e6:6e:d0:09:bf:8d:10:a7:7d:a9:f5:85:88:
                    b9:13:2c:a7:5d:0f:0d:20:3e:ae:83:77:78:76:83:
                    b6:02:11:7b:c3:be:cd:86:3d:bb:3a:25:73:2a:91:
                    c2:c8:a3:78:45:5b:9f:7a:4e:00:cf:c0:b3:79:40:
                    34:90:49:08:99:77:71:7c:ce:d9:b8:97:fb:5b:9f:
                    84:f1:21:4a:05:f5:db:cc:d1:13:94:2f:91:cf:04:
                    8c:c1:ab:a3:34:2a:8f:99:9d:9d:90:c1:49:f5:93:
                    f5:81:6b:d0:cc:15:f6:e2:fa:a5:14:d0:58:9e:12:
                    99:8e:21:6d:13:1e:ec:cf:37:96:b6:8f:8b:96:57:
                    95:fc:3b:24:c6:e6:80:15:52:7c:1d:db:aa:41:ff:
                    69:8b:88:e8:f8:6a:77:0a:c1:c9:ab:55:c3:a3:d8:
                    c0:18:f5:86:ab:1d:9d:27:79:2b:8b:69:91:9a:0c:
                    3e:d7:be:cd:ff:fc:c0:8e:1b:ed:c7:bd:da:c6:ef:
                    5e:45:64:8e:f4:e3:6a:03:e2:03:28:fe:43:f0:1f:
                    84:8e:83:c6:ed:eb:5a:e7:0d:66:48:db:d9:2d:7e:
                    36:28:b8:76:1d:f6:79:74:3b:2e:22:34:b0:0c:84:
                    62:aa:d8:37:66:92:db:2b:fe:68:50:7b:1b:ec:81:
                    12:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E8:BE:24:8B:90:72:9F:08:63:D5:4B:60:9A:C0:FC:7E:62:5B:7F
            X509v3 Authority Key Identifier:
                keyid:56:0B:BD:60:06:CE:CD:73:00:D1:52:4C:8A:27:43:9A:BB:F1:59:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:3b:63:75:44:98:f7:1f:ac:78:0c:6c:3e:07:c5:76:2e:36:
         14:31:6a:a7:98:b5:3e:13:48:e3:23:98:7c:66:b4:ad:99:91:
         d9:45:ad:74:a4:9a:91:94:66:0e:f6:c6:01:10:d7:4a:61:f3:
         d8:2b:0d:ee:fa:6c:58:0b:c7:0a:75:64:77:fa:cf:69:44:f0:
         af:b4:da:01:2e:c7:db:ed:7e:f6:11:cd:2d:fe:26:ea:70:0e:
         5e:7b:70:ec:90:09:1d:d1:b1:a5:c0:83:2c:a9:b2:81:f0:33:
         3f:86:34:81:ef:c2:64:10:9a:df:7d:79:f2:35:0d:15:41:11:
         e3:e2:55:08:5f:35:83:a3:29:d4:1a:f1:c4:56:3b:f0:c1:c1:
         e4:13:50:d5:07:4a:4c:f3:03:f2:49:a0:af:29:e5:32:ae:35:
         15:67:9c:8c:9c:85:8e:22:8d:62:7b:04:69:1b:b5:9e:05:48:
         00:11:37:92:90:e7:ba:78:1d:a0:00:b4:0c:dc:dc:3a:d7:35:
         62:2a:6d:c0:81:e8:85:dc:5c:73:4d:09:45:ac:87:4a:bc:a2:
         d2:b9:37:48:bf:49:a1:08:e3:93:fe:18:58:02:3b:79:54:6c:
         a3:77:69:a3:97:e2:03:86:6f:4b:4a:dd:db:be:68:6c:05:64:
         84:43:df:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:22:18 2025 by rpki-client