Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft
File:                     9ouGJos33oELlo2481f3c-mDv20.mft (raw, json)
Hash identifier:          T5ogHALZ45R/dXOd7bVtfqW85PvXiOK7d4R5vhtALaU=
Subject key identifier:   9A:B1:A7:0E:A2:31:88:E6:8C:F7:B0:32:AA:CC:7E:07:5D:F3:95:77
Authority key identifier: F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D
Certificate issuer:       /CN=A91755F6/serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D
Certificate serial:       0A64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft
Manifest number:          0A56
Signing time:             Fri 28 Mar 2025 19:53:11 +0000
Manifest this update:     Fri 28 Mar 2025 19:53:11 +0000
Manifest next update:     Fri 04 Apr 2025 19:53:11 +0000
Files and hashes:         1: 9ouGJos33oELlo2481f3c-mDv20.crl (hash: +ZEYm/JpyYThKjHJhbbr/N2DMtyu+CLazbFQkbRPF/E=)
                          2: B47A0CDA660F11EB8A1DB351C4F9AE02.roa (hash: H4e74ZinlJCi8Ce5k2+xoUaWpmTeMUpAH6pvARiWvT4=)
                          3: B5A31A8E660F11EB8A1DB351C4F9AE02.roa (hash: avX93lYjNGPU0QBDXZmo4QQhmDBOoggvH8lp86XWLOU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2660 (0xa64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91755F6
        Validity
            Not Before: Mar 28 19:53:11 2025 GMT
            Not After : Apr  4 19:53:11 2025 GMT
        Subject: CN=67e6fe27-334b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:da:be:b3:f9:82:4e:f1:30:a8:8b:b1:5c:
                    f3:01:98:92:6a:1b:f5:ad:ba:be:78:c2:88:18:f6:
                    56:99:e9:b2:77:ff:4b:a3:71:85:37:77:f5:24:3f:
                    db:75:56:16:52:ec:d4:37:78:c8:b3:e5:e6:b7:8e:
                    3e:fc:1d:14:c3:53:7b:c8:de:a1:4d:a8:05:bc:1c:
                    9a:6f:73:c6:75:37:07:bb:03:8c:3c:60:92:1e:3a:
                    e7:88:91:6e:bb:80:be:d4:58:61:b3:ff:5d:f6:41:
                    e9:1c:87:ee:b9:bf:1a:98:f3:37:34:d5:ed:fc:3d:
                    77:17:d5:b4:38:eb:e3:a3:a0:a5:d4:d7:1e:a6:3b:
                    26:7e:0c:ee:50:ab:a5:9c:0f:50:1b:a1:67:28:27:
                    65:94:7f:b4:73:1c:15:d2:88:3f:1b:4f:83:64:e7:
                    0b:b1:e2:cb:d7:c0:83:47:f1:15:cd:9a:60:d6:ec:
                    c7:c7:b0:81:81:5a:21:5f:9b:0d:f1:3b:45:df:9e:
                    63:c7:a9:93:b5:24:11:5f:71:59:0c:36:8b:40:1b:
                    cb:84:eb:81:34:e1:42:25:5f:55:1c:ee:42:1f:b3:
                    cd:87:1c:6c:91:e2:db:8d:2e:a9:a1:f2:f0:53:ae:
                    03:f4:4f:e5:bf:43:95:f9:94:c5:c1:ff:aa:71:ed:
                    11:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B1:A7:0E:A2:31:88:E6:8C:F7:B0:32:AA:CC:7E:07:5D:F3:95:77
            X509v3 Authority Key Identifier:
                keyid:F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:5f:09:1f:19:03:91:93:fb:a7:7c:18:0c:d8:ce:f4:56:9b:
         02:e1:fc:40:89:ca:98:67:dd:bb:b6:98:27:53:c7:43:fe:71:
         ac:fb:cb:52:b3:ac:a7:8d:34:13:4f:d4:08:91:f0:55:1d:90:
         d8:0f:a5:48:76:cd:19:6d:0b:d8:2e:90:f8:08:a8:36:72:28:
         df:6d:f6:96:9c:a8:8a:ce:a4:3d:2b:d1:e1:f6:03:e1:bc:9d:
         f7:4d:66:38:f1:0d:47:7b:f6:31:69:70:da:50:33:ea:6a:0b:
         8f:e1:00:d0:1b:06:ac:ab:7f:85:bd:fd:6a:88:a7:b4:fc:f1:
         c5:a1:c3:41:fc:b9:43:65:7f:79:25:90:c3:38:fa:79:b1:40:
         c8:ab:e6:db:3f:71:83:6f:f4:f8:9a:1e:dc:aa:1e:71:14:12:
         5d:c6:20:5b:11:38:74:86:24:5e:38:2c:40:8a:4e:5a:dc:9f:
         a1:50:c7:1a:ad:82:db:34:53:ce:3c:b0:e9:a3:b4:27:55:59:
         ea:21:aa:6c:c4:b5:86:a9:a0:11:7d:6d:0a:bd:df:3f:2c:d9:
         30:4d:f4:e2:cd:3c:bd:44:7e:1a:ee:3c:54:aa:0d:73:eb:02:
         e5:05:e8:a9:fe:df:f9:e3:92:44:e1:7b:4e:97:4d:2c:b6:a9:
         c7:d6:85:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----