Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft
File:                     Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft (raw, json)
Hash identifier:          A41sGQCTWaJnsEd8d5Uv/XMcFw+cp3D3QsXdm1dvMNo=
Subject key identifier:   64:4E:74:D7:7E:99:1F:EB:13:7C:D9:3C:C9:D3:43:89:CF:C2:16:21
Authority key identifier: 22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54
Certificate issuer:       /CN=A9171560/serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454
Certificate serial:       0D38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft
Manifest number:          0D0B
Signing time:             Fri 28 Mar 2025 18:17:26 +0000
Manifest this update:     Fri 28 Mar 2025 18:17:25 +0000
Manifest next update:     Fri 04 Apr 2025 18:17:25 +0000
Files and hashes:         1: Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl (hash: cG9PH7iLC1ILQZHz0gclxLDfJb1j45WgR9ztiPSBeRU=)
                          2: 610944B422D911EA8E735D5CC4F9AE02.roa (hash: X77j2DWSZVPj75K0L+USuq/dw9u4JkuaINPDVFgux3I=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3384 (0xd38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171560
        Validity
            Not Before: Mar 28 18:17:25 2025 GMT
            Not After : Apr  4 18:17:25 2025 GMT
        Subject: CN=67e6e7b6-a492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6e:13:68:3f:e8:9b:a3:0b:cc:eb:a8:fb:2c:
                    df:d8:4b:bc:ba:08:2a:fa:3f:74:5f:0e:f3:92:a3:
                    a6:22:40:94:c2:c8:ae:d1:30:85:32:e5:0e:b1:53:
                    c4:62:52:ab:5b:db:b0:7d:94:1e:d1:df:ce:bb:28:
                    8b:78:de:ba:30:43:16:99:33:ef:42:8f:f1:0c:1e:
                    ea:f5:2d:13:a0:6c:37:f9:16:28:2a:af:49:37:b5:
                    8f:6b:86:cc:47:ab:01:c1:8b:7d:ec:25:c0:95:38:
                    09:5a:f9:a3:86:74:f3:e0:e9:8c:78:f0:e4:0f:84:
                    c1:8c:db:01:d1:8f:2d:07:86:27:91:42:31:f3:08:
                    d9:b8:4e:17:0c:4a:c3:63:77:b4:db:9b:75:33:ad:
                    b1:fa:ac:0e:d1:fb:ef:3a:1d:9d:5c:7f:29:87:a9:
                    2e:90:b2:22:33:a0:a2:4a:95:30:24:9a:0c:ed:a1:
                    74:d7:22:f5:f4:b9:58:f9:50:19:04:07:5a:2d:d4:
                    0e:ac:94:29:a0:cd:48:63:1f:16:96:46:53:72:f9:
                    54:3d:6d:13:61:a3:0d:16:bc:f7:b7:ba:0d:57:82:
                    eb:52:a6:91:da:0a:00:ed:7f:5a:6b:ab:c6:cf:79:
                    96:bb:28:14:1f:ff:82:15:6a:9f:56:30:78:64:11:
                    d3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4E:74:D7:7E:99:1F:EB:13:7C:D9:3C:C9:D3:43:89:CF:C2:16:21
            X509v3 Authority Key Identifier:
                keyid:22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:22:93:b6:a3:db:9c:3d:db:65:1f:3c:b7:d8:5a:02:7b:07:
         3a:9a:28:df:fb:cf:8b:02:50:78:ce:2e:90:2d:07:4a:b5:c8:
         a8:d6:ac:b8:f1:5c:88:13:d8:0b:45:86:04:33:2f:be:a5:8d:
         b4:4f:d6:8b:48:e1:91:26:c5:50:37:33:6c:c3:17:31:98:a0:
         e4:45:cc:0a:c5:93:6f:40:f8:9c:1a:57:ef:f9:c6:b7:f9:b3:
         69:94:ee:1d:ec:ae:ca:ac:0b:ed:69:e8:8c:0e:06:28:f1:57:
         9d:80:0c:cd:37:95:f0:f9:43:4d:ad:c8:2a:46:c1:2d:e6:06:
         85:0d:0d:d8:75:e4:bf:58:64:15:ae:17:44:4c:45:65:18:60:
         f8:50:c5:ca:e3:9d:aa:ea:da:7e:7f:81:7b:de:96:ef:44:db:
         e7:e0:31:9d:3b:fa:b1:de:f7:7b:f3:94:d1:d7:cb:9b:78:35:
         76:ca:ce:4c:38:7e:ba:65:55:43:ac:8f:69:60:86:19:1c:09:
         d5:44:c0:2b:38:cf:41:9f:72:ad:fa:e1:db:54:54:2e:e8:df:
         88:1c:c0:71:fb:7e:ff:f8:65:68:b1:33:48:0f:af:0e:8c:70:
         56:16:89:06:bf:2e:7b:08:45:39:7b:1b:37:24:a4:48:61:4c:
         77:a4:32:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----