Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
File:                     iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json)
Hash identifier:          pKGxkcbS9h152dH1eRciovkLAFgFgXWh5eHHu03NuLc=
Subject key identifier:   72:30:C1:09:8F:29:FC:0F:69:32:D8:5E:5F:1A:5C:E0:00:E6:99:92
Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19
Certificate issuer:       /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
Certificate serial:       1651
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
Manifest number:          163D
Signing time:             Fri 28 Mar 2025 16:49:50 +0000
Manifest this update:     Fri 28 Mar 2025 16:49:50 +0000
Manifest next update:     Fri 04 Apr 2025 16:49:50 +0000
Files and hashes:         1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: 7Pj2FniJ1yJCimLX7zQRV/tQk/szFN/IShxYQht05o4=)
                          2: E1ADA4BC062B11F08449516EC4F9AE02.roa (hash: irCyzZt8lLVT2O/nBYFOPs0nEEY6FDn9ohpC+rSN6lg=)
                          3: E259315C57CA11EA8D931284C4F9AE02.roa (hash: UF4UGi4YvKSRTlKCNcjEh8f4bqwvLQuk9xLcKAJKTWQ=)
                          4: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: slzLXwHdalwSZSG2cdS37Tf6mGAWnLHG4M+IywxJpUk=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5713 (0x1651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187465
        Validity
            Not Before: Mar 28 16:49:50 2025 GMT
            Not After : Apr  4 16:49:50 2025 GMT
        Subject: CN=67e6d32e-2834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:49:c6:f4:a2:37:5b:ea:8a:ff:39:80:97:2e:
                    b0:0c:9a:86:e0:d3:c3:d5:8a:c1:31:e3:7b:87:27:
                    87:62:39:f6:45:5b:ed:b1:8e:fe:0c:b0:1c:78:69:
                    3f:f0:46:84:94:01:81:1c:0a:5c:3c:04:f0:79:27:
                    d1:95:37:5a:c3:a7:ac:76:e6:03:52:0a:2b:5f:0f:
                    a3:3c:ec:95:f4:fb:d7:38:16:cb:42:37:7d:8c:98:
                    45:24:1c:33:e9:4a:25:6c:76:fe:e7:ad:33:70:54:
                    b4:20:34:54:b6:db:14:8a:1e:af:a1:9c:6a:f8:50:
                    42:74:b9:0d:61:31:ed:dc:a0:61:32:e5:a2:e0:7a:
                    ab:8c:7b:95:ed:2a:74:17:c0:e5:e8:f9:c0:c1:6e:
                    6c:83:fb:a6:99:97:d2:d0:00:5a:b7:ca:eb:5f:d5:
                    dc:3d:1c:81:ae:09:c0:b3:b3:86:f1:3a:99:23:7c:
                    51:88:d6:95:6b:5f:82:d4:4d:e3:fe:5b:10:b2:a6:
                    fd:bf:a9:91:91:ca:aa:88:86:df:33:db:d9:e8:f8:
                    7e:ef:d0:ed:a3:be:4b:71:79:71:c5:5a:3f:72:29:
                    85:65:d9:df:35:de:95:58:eb:41:2d:14:42:ae:cb:
                    87:13:19:8a:06:7e:c0:94:00:42:7c:f1:98:56:bf:
                    be:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:30:C1:09:8F:29:FC:0F:69:32:D8:5E:5F:1A:5C:E0:00:E6:99:92
            X509v3 Authority Key Identifier:
                keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a7:24:8e:e8:18:18:cd:36:59:73:e0:9d:c6:21:4c:a6:32:
         89:25:c6:39:f1:27:9e:8a:c3:b0:be:c2:0c:55:be:4e:6d:17:
         cb:a0:a7:e0:e5:ed:9e:d3:7c:aa:f2:ed:54:b0:d6:1f:a6:a3:
         50:f3:c8:c9:01:06:6d:16:b1:a1:5e:1a:25:45:18:f0:7f:a7:
         08:f8:43:87:09:5e:a4:e4:5a:3e:28:80:5e:5d:9e:81:e9:1f:
         36:39:03:71:c9:68:91:84:83:a1:93:c9:e7:34:aa:e9:21:d6:
         f3:84:1f:65:fb:5d:ae:cd:2c:e3:c5:fd:dd:e3:c4:6c:c6:33:
         d2:62:1c:16:e0:c5:e9:fe:0e:cd:8a:f4:2d:01:25:20:76:40:
         a2:0d:e4:47:64:6a:86:76:75:f4:52:57:c2:11:f0:16:bd:86:
         c5:b6:1e:d6:6e:3a:39:aa:af:ee:da:d1:01:a7:7f:9d:a6:ef:
         17:99:28:77:e4:88:55:cf:95:08:83:e9:99:15:6c:18:b3:b3:
         a3:d0:1f:8e:0d:d0:f0:3b:ca:d9:25:1a:90:9c:ea:fa:40:47:
         f5:74:35:4b:3e:81:3a:99:12:a2:18:f2:b1:53:33:f5:13:35:
         e1:bd:1c:60:6d:49:42:d1:2f:06:df:23:15:8d:e3:0c:c9:16:
         45:bc:b1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----