Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
File:                     FZbEu-cy2oXLg-incIc-o0E3AaU.mft (raw, json)
Hash identifier:          YVDqeQKNQ8jCHyx9knX5tTJfVvSnJvDXq1kdKdnueTQ=
Subject key identifier:   FB:E2:4F:72:9C:85:41:37:C1:AC:06:A5:52:A6:C6:77:47:8B:1F:CB
Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5
Certificate issuer:       /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
Certificate serial:       133A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
Manifest number:          1311
Signing time:             Fri 28 Mar 2025 17:10:03 +0000
Manifest this update:     Fri 28 Mar 2025 17:10:03 +0000
Manifest next update:     Fri 04 Apr 2025 17:10:03 +0000
Files and hashes:         1: FZbEu-cy2oXLg-incIc-o0E3AaU.crl (hash: dn1zI7g+k0gCIHFY8l2dbTvMnKOX6ItySHISrFdrbnY=)
                          2: 56094384320611EA84C94231C4F9AE02.roa (hash: mZoT1sj2WR9PydzJ0T/LJHzRsHoob8BeC9+MkrsPnys=)
                          3: 443241A0321B11EA83044473C4F9AE02.roa (hash: n0sRanfJ+3KhBJUHh6jH9cwbJaaTZCbfJ+87aODuzgM=)
                          4: 1FD07ED231FB11EAA335E10FC4F9AE02.roa (hash: y17aQP9C+LDn4Yph2n6mf2nnVwvpkbeV6pXqgmt1qVQ=)
                          5: 4B18BBA8A9F811EEB85DBD24C4F9AE02.roa (hash: sd3UhNYbHggo+XcciVWTFZxv/tGVhGFf2hY/GpsuhSs=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4922 (0x133a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91771E3
        Validity
            Not Before: Mar 28 17:10:03 2025 GMT
            Not After : Apr  4 17:10:03 2025 GMT
        Subject: CN=67e6d7eb-4e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d1:b9:6c:8b:c2:69:94:07:6b:59:a2:67:8f:
                    34:7a:fb:57:f1:f2:80:6e:05:75:3c:29:d7:53:75:
                    b2:c7:9e:22:01:6f:19:36:18:ca:d4:01:0d:59:d2:
                    34:31:a0:27:13:c5:be:2e:e7:3b:de:c7:12:8a:1a:
                    17:78:ce:58:b2:63:5b:1d:0e:67:58:d2:60:93:d9:
                    26:a0:4d:61:3e:f7:9b:bd:c3:59:18:5a:d8:92:eb:
                    1d:de:b5:3b:7e:79:9d:7a:06:37:43:25:b0:60:5e:
                    41:e0:e8:98:4b:d9:8d:6b:03:5c:9d:3e:3a:9a:47:
                    38:92:6c:19:10:e3:17:ab:6e:ef:41:a2:1a:c3:7c:
                    17:1c:7e:39:b4:f7:66:49:f2:ae:25:e0:b2:91:71:
                    4e:f9:a4:f4:8e:95:d2:2d:b4:15:6b:86:b2:57:59:
                    c4:df:98:d4:78:64:af:9e:c0:aa:81:b5:72:8f:1d:
                    b5:5b:a9:d5:ea:05:79:3a:b0:08:dc:1f:9c:5f:51:
                    b8:01:ea:36:e0:50:b9:93:e7:91:e1:f3:4a:12:ca:
                    d8:5d:55:07:43:d3:78:a8:e6:40:9f:53:77:8d:19:
                    58:4c:03:7a:86:5c:43:a9:53:ae:64:34:ac:33:7b:
                    20:32:ca:c6:17:4d:1f:17:54:23:74:36:8f:b2:75:
                    4c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E2:4F:72:9C:85:41:37:C1:AC:06:A5:52:A6:C6:77:47:8B:1F:CB
            X509v3 Authority Key Identifier:
                keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:83:f7:62:3a:58:0a:45:7a:8f:d6:bd:ae:d0:f2:93:f0:2d:
         15:d7:fa:18:43:7b:c7:df:78:e0:28:6c:b3:39:d3:e3:75:89:
         cc:48:b6:aa:e9:65:c7:f1:f3:3f:a1:0d:9c:40:66:3a:27:b8:
         88:7e:46:a0:58:38:db:73:bf:9a:ab:c6:c8:f8:37:db:99:7f:
         58:bb:cd:0a:dd:0c:51:ab:d2:2b:c2:1a:c6:f3:9c:b1:d4:37:
         7c:2b:54:f2:48:13:b7:c6:e5:16:b3:40:3a:bf:a4:3a:c9:01:
         11:6d:75:ff:18:84:d5:23:72:fc:e9:2d:6e:ff:57:36:c2:43:
         90:fb:c5:e6:42:80:49:9e:a1:9c:31:92:63:33:9f:1b:7e:6c:
         8d:e6:66:4a:ab:60:88:63:55:cf:40:31:2c:f5:d0:57:95:9f:
         58:c1:53:e8:1d:82:98:5a:ef:c8:72:8c:ae:bf:ff:e6:82:09:
         63:6b:1e:56:80:4e:1e:2b:7f:ae:e7:9f:d1:2f:4a:b1:13:e0:
         3d:64:36:54:1a:77:a1:0e:9b:ee:a2:67:46:74:f2:fc:49:4e:
         2d:e4:52:f8:ea:62:e7:07:10:f3:3f:a3:74:9a:13:57:14:9b:
         c6:9c:c8:5b:41:fa:f4:97:aa:7a:f7:8c:c1:22:dd:28:b2:0c:
         a1:d7:ca:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:28:52 2025 by rpki-client