Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft
File:                     mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft (raw, json)
Hash identifier:          QEkLZ9k62cSjj6JaOB0sCWtUdIW4W+N7WumQALCwJlY=
Subject key identifier:   71:F8:8B:1D:86:61:37:C1:86:8C:08:4E:38:00:D3:3C:D8:BD:65:1A
Authority key identifier: 9B:39:9B:FB:D1:69:35:67:48:F8:15:F2:CA:80:48:E9:D5:FA:4F:E4
Certificate issuer:       /CN=A9196492/serialNumber=9B399BFBD169356748F815F2CA8048E9D5FA4FE4
Certificate serial:       0702
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft
Manifest number:          06FD
Signing time:             Fri 28 Mar 2025 22:12:32 +0000
Manifest this update:     Fri 28 Mar 2025 22:12:32 +0000
Manifest next update:     Fri 04 Apr 2025 22:12:32 +0000
Files and hashes:         1: mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl (hash: 0p4IaduJCzM+0HNrbeiVJjk6tLUpaQ74i+DlCTkT3Xg=)
                          2: 20DAF9FA384011EBA5FE7359C4F9AE02.roa (hash: MX4yOu1oCqUSOCDHmBztUTuNn37/SxpV/qX8mmPxh2M=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1794 (0x702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196492
        Validity
            Not Before: Mar 28 22:12:32 2025 GMT
            Not After : Apr  4 22:12:32 2025 GMT
        Subject: CN=67e71ed0-0cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e3:73:a3:07:79:0d:c9:76:bb:94:5a:3d:15:
                    4e:bc:e3:d4:2a:50:08:58:61:f0:44:fb:23:7f:79:
                    ea:70:7b:97:57:6c:c8:91:40:4f:fa:6f:eb:31:00:
                    d8:9f:91:0c:06:49:ac:0e:8a:56:22:a6:8d:d9:7a:
                    86:49:96:68:66:a2:50:a3:73:20:b1:d3:6c:f2:6a:
                    71:85:0a:01:38:e5:3b:1d:d9:a4:ad:e2:6d:38:f5:
                    6e:bf:c8:fd:44:41:aa:f5:e4:c6:b4:cc:3e:2f:3b:
                    da:44:a1:1c:f0:b5:07:c2:0a:37:07:bc:a7:b9:b7:
                    c8:97:33:7f:5a:53:95:ea:c4:e5:c2:65:4f:1c:f3:
                    eb:d9:82:a7:51:05:81:a1:ea:00:ba:fb:59:10:ef:
                    81:d1:17:4e:34:30:76:2b:22:3d:b1:74:ba:66:88:
                    79:90:f8:c5:58:54:40:4c:84:61:09:ef:d3:e4:24:
                    70:3a:d8:c9:78:41:b6:88:61:42:2a:f4:77:ae:c0:
                    fe:76:04:31:08:28:c2:87:4f:a5:6f:e8:fb:f3:e3:
                    44:b3:69:bd:02:f2:27:81:e4:c3:f2:fc:0e:e3:1b:
                    e8:29:6c:9b:79:e8:36:cc:87:a2:8a:7c:75:4e:0b:
                    df:34:33:62:b8:d9:c3:f5:5d:ca:d7:a4:87:16:74:
                    de:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F8:8B:1D:86:61:37:C1:86:8C:08:4E:38:00:D3:3C:D8:BD:65:1A
            X509v3 Authority Key Identifier:
                keyid:9B:39:9B:FB:D1:69:35:67:48:F8:15:F2:CA:80:48:E9:D5:FA:4F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:aa:e4:fc:6d:6b:dd:c0:7e:60:2c:f2:5c:95:f5:df:17:77:
         be:e3:07:14:b6:26:50:68:1e:4b:62:0d:78:9e:37:83:6e:9b:
         02:c7:66:17:b8:72:19:e7:e2:47:97:80:f5:4d:96:7a:ae:9d:
         b2:d8:18:40:56:b7:e4:ec:72:b5:cd:1b:ef:56:58:3e:c0:2d:
         b9:b5:5f:62:22:5a:86:6b:f6:35:52:e8:47:7a:9c:f8:24:30:
         9c:61:71:76:4e:5a:ee:82:a7:fc:90:d0:f4:c0:bc:e1:dd:55:
         91:1d:c7:f4:68:65:c5:bf:e0:3c:d2:42:e0:8f:1a:65:63:cd:
         b9:76:e3:f8:4f:fe:70:89:19:cf:48:52:3c:33:0e:bd:fc:5e:
         ae:e3:76:58:3c:40:da:b4:08:50:2a:46:26:a1:b2:d5:0d:6e:
         00:cd:3b:3b:33:d1:9f:8a:1d:c5:da:0c:05:cc:8c:cd:fa:12:
         15:db:b5:9f:9b:e8:86:07:19:15:9b:6c:ad:f2:f0:60:53:5e:
         52:16:a0:df:1a:5d:d8:c9:9c:73:73:1d:6a:15:17:2b:b3:10:
         ff:81:0f:48:5f:20:b7:84:38:c7:a6:1f:fb:1b:be:d8:f7:5e:
         d6:89:6d:13:2e:82:80:49:a9:1e:02:ac:dd:be:2e:74:47:93:
         07:fc:59:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----