Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
File:                     Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json)
Hash identifier:          f1cuLH9y3SVV6d80uelwhT1pGJOleIqQyqPSETJAg6Y=
Subject key identifier:   4D:70:AF:CB:03:EF:16:52:10:37:CF:1C:5D:58:6D:8C:EB:63:AC:25
Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9
Certificate issuer:       /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
Certificate serial:       314B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
Manifest number:          3137
Signing time:             Fri 28 Mar 2025 15:31:53 +0000
Manifest this update:     Fri 28 Mar 2025 15:31:52 +0000
Manifest next update:     Fri 04 Apr 2025 15:31:52 +0000
Files and hashes:         1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: uVTEomiTVl787M2t8f+R2ivrb/4FqDHv4npMdFtiKkk=)
                          2: 33B0CCAEBCE311EA953FBB5EC4F9AE02.roa (hash: v67lW37yOK1EE+Ye9daXrMBIu71X0smdg0I3L06d6Kc=)
                          3: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: W3sK8AJb9TonKRiMiC+GBOGQDVtd6T29hWzDhem/MOk=)
                          4: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: pswsUG0qEzo4Lxip378d+/jtEbIDA6UOlyLDYYpHdnM=)
                          5: 33036E24BCE311EA953FBB5EC4F9AE02.roa (hash: h9X/Ha5+JAajFHpKe4PaLiXxR7AjtPZF1G/S4br67kg=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12619 (0x314b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1461
        Validity
            Not Before: Mar 28 15:31:52 2025 GMT
            Not After : Apr  4 15:31:52 2025 GMT
        Subject: CN=67e6c0e8-3ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e8:77:2e:49:f1:69:b0:4a:54:40:33:1f:d0:
                    a5:a0:29:5a:eb:57:e0:27:49:09:87:c3:4c:b2:91:
                    c3:bf:d1:a2:ab:e7:5c:77:50:9e:67:bf:5f:cb:64:
                    56:94:ab:2e:39:73:a1:a6:bf:e0:e2:4a:cf:88:ad:
                    a1:26:67:35:97:55:0b:75:82:a4:ca:68:60:75:aa:
                    d3:d6:02:99:b0:6e:b4:2c:0f:3a:61:0c:5b:49:19:
                    87:14:ef:6b:6e:14:4a:3a:09:1d:e9:d1:f7:6c:f0:
                    5e:00:75:4b:6b:67:7e:23:2e:a3:1d:87:12:12:82:
                    d6:c6:85:8b:9c:50:b1:42:7f:7d:e8:c8:61:6a:54:
                    10:c5:f8:8a:1b:5d:b4:b2:20:a8:d1:ff:2e:69:b5:
                    a5:d4:2b:7a:9a:2f:3b:7e:22:9d:70:00:d9:e6:4b:
                    46:87:73:10:09:2e:5e:e3:9e:af:27:6d:c6:1f:35:
                    d9:21:67:91:bc:ea:2b:ca:f5:bb:8c:1b:ff:e4:f7:
                    69:9f:64:90:cf:c6:43:a0:30:24:ed:d5:c2:37:e2:
                    4b:b4:cf:ca:b0:7a:21:c2:26:9c:70:d0:a7:d0:da:
                    b7:0e:6c:32:31:dc:5d:ee:f2:da:20:6b:cb:7a:9f:
                    04:35:ef:3a:73:5c:f1:a1:dc:39:cf:d5:30:44:75:
                    00:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:70:AF:CB:03:EF:16:52:10:37:CF:1C:5D:58:6D:8C:EB:63:AC:25
            X509v3 Authority Key Identifier:
                keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:6a:33:96:21:cb:ca:02:30:b6:78:6e:95:9e:1e:a4:99:a0:
         b2:88:f6:f7:aa:e4:6c:1c:d2:18:1e:6d:da:34:f0:23:e5:55:
         77:7e:14:f8:30:8b:07:e9:df:f4:f7:59:7b:11:d3:d8:d9:ce:
         3d:f2:ca:73:9e:96:06:5e:b5:f2:c4:57:20:e7:7f:9e:30:20:
         96:dd:ff:49:f1:db:e2:57:f2:59:f4:25:07:22:a1:29:44:c4:
         33:4b:72:81:67:e7:3c:96:23:cd:88:0a:1f:54:1d:a5:dd:f0:
         33:74:1c:8a:e7:64:88:85:71:cb:df:66:8b:05:f4:b8:e1:50:
         51:47:41:29:90:b5:1d:78:d8:77:57:31:73:f3:4c:90:a1:3e:
         bc:7d:7e:3b:49:6d:a5:3f:f5:78:2c:5a:20:f3:a9:47:b8:1a:
         79:51:13:7a:ca:8d:01:5a:87:72:b9:a0:b2:75:98:a9:5c:3e:
         44:f9:31:cd:d6:70:c3:09:f9:e5:39:c7:94:73:bd:82:3b:4d:
         12:8a:79:42:9f:0e:b6:2b:08:ce:d2:97:07:79:66:5d:72:53:
         33:3a:d0:07:e0:ca:d3:ef:c8:74:08:47:12:50:3d:37:2f:19:
         57:f9:85:fd:8e:1f:3d:76:49:0e:de:80:0b:87:79:7d:12:06:
         31:ba:b6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----