Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
File:                     em4wIQZCz0-7QXPzUnSOHqXCx8M.mft (raw, json)
Hash identifier:          Ok5eSFYp4UxgSqjPUSLSvr/qXp9T0gFmm/SLNs0MT0Y=
Subject key identifier:   19:33:C0:93:3E:F8:E9:18:D0:09:38:74:5A:61:7F:22:B6:BB:60:A6
Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3
Certificate issuer:       /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3
Certificate serial:       1816
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
Manifest number:          17F7
Signing time:             Fri 28 Mar 2025 16:39:54 +0000
Manifest this update:     Fri 28 Mar 2025 16:39:54 +0000
Manifest next update:     Fri 04 Apr 2025 16:39:54 +0000
Files and hashes:         1: em4wIQZCz0-7QXPzUnSOHqXCx8M.crl (hash: OSF+qMjMxWCFsNip8XMelS4Vl5mS3aV23pKu3GZcZZQ=)
                          2: 708DE4A87AB011E8B7AB0E53C4F9AE02.roa (hash: mlV5FElI2KfwPw+F74U5A5+ugzB0GpF8appz7O1hrRc=)
                          3: F49AA4A889C211EEADFCF27CC4F9AE02.roa (hash: d2SHnZ0bs3Ad8y5hDn3mylfyHabzy/8uFTs+4jhjfXE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6166 (0x1816)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D9FC
        Validity
            Not Before: Mar 28 16:39:54 2025 GMT
            Not After : Apr  4 16:39:54 2025 GMT
        Subject: CN=67e6d0da-e8a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a0:1f:ca:1b:c3:ca:18:d7:41:2e:44:e5:e6:
                    e6:27:50:38:13:14:6a:b8:19:e5:42:95:6f:79:5d:
                    9c:cc:2a:48:da:20:c1:bd:0f:ef:85:0e:1d:03:92:
                    3b:80:35:86:ab:1f:78:d6:2e:f6:a2:9e:ca:fe:f2:
                    8e:eb:c1:70:ac:1b:33:c8:96:a8:21:fe:dd:73:ec:
                    e2:ca:13:ac:50:ff:49:e3:89:b6:1b:72:33:2d:86:
                    5a:2f:4f:ff:8b:1c:13:1e:98:c8:14:c4:ae:f6:50:
                    4c:a2:66:e2:fd:45:0c:6e:22:e8:03:22:0d:3a:13:
                    1b:db:13:e4:af:03:f6:d7:ef:63:e8:e0:99:aa:ef:
                    f2:d6:2c:4d:51:93:12:84:c6:ee:c2:eb:2c:8c:72:
                    a1:aa:ca:bb:90:ee:2e:b4:d0:06:91:f6:5e:26:05:
                    2b:a1:6f:66:d8:1e:8e:10:5c:7b:5e:80:71:55:12:
                    03:2e:4a:26:a9:cf:7e:70:8e:a9:27:21:1f:1f:c8:
                    b9:07:f4:6d:6a:06:8c:26:ee:88:2e:9a:fd:4f:0f:
                    9f:81:08:98:f9:4d:8f:66:14:06:7f:fc:09:39:11:
                    f5:f0:34:7f:6d:64:64:d6:5f:dc:fd:87:41:55:6f:
                    c8:aa:06:f4:b1:98:49:69:01:39:23:f6:59:60:f2:
                    0f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:33:C0:93:3E:F8:E9:18:D0:09:38:74:5A:61:7F:22:B6:BB:60:A6
            X509v3 Authority Key Identifier:
                keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:9b:a6:ab:5e:79:fa:d9:55:9a:d8:b7:cb:70:c1:d7:a4:cd:
         77:9b:fc:e0:3a:15:c8:e6:a2:e5:50:6d:54:be:87:62:94:87:
         be:d7:d1:04:46:fb:dc:f0:88:68:53:47:ed:eb:fe:36:75:96:
         26:1f:e4:b1:c3:4f:43:5e:0a:9d:dd:d0:2c:ec:a4:db:3a:48:
         15:5e:3b:21:e8:a5:78:7a:41:ac:f8:e5:bf:6f:68:12:bb:e2:
         36:f1:53:fe:b9:66:c4:df:3f:ff:41:0a:40:1a:c0:50:27:4a:
         3c:26:89:6b:42:e3:aa:cd:f8:d1:ff:42:85:74:50:0e:cf:b5:
         0d:a6:1e:00:d5:92:68:4a:19:94:53:fc:21:95:ff:1c:8c:a0:
         40:f1:c3:55:7a:f9:69:bd:ed:fa:52:a3:37:b6:bc:98:32:fb:
         b7:2b:52:dd:a4:e0:02:84:44:1d:3f:ad:7e:23:10:07:f1:ab:
         b8:53:12:d4:0a:f5:9a:18:08:34:f5:92:56:70:08:81:97:ef:
         38:0f:88:72:48:61:99:59:3b:a7:d4:19:75:cb:5d:fc:00:51:
         ad:fb:61:a3:e3:fb:9b:f7:9f:bc:fb:b5:88:31:25:09:62:5c:
         f8:f6:5d:34:cf:c1:bb:2b:07:c7:d9:01:c8:dc:ad:a2:43:b6:
         35:4c:0b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:34 2025 by rpki-client