Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
File:                     4-snntAeg57yRYBuBFH8FVAJJqI.mft (raw, json)
Hash identifier:          4PVfhmwjerif+3K7yO7U+hlhdVx3E3FfWDbFBExl61w=
Subject key identifier:   18:3C:D6:87:84:7C:87:D6:10:EF:6E:B3:EC:2E:36:51:C5:B2:55:10
Authority key identifier: E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2
Certificate issuer:       /CN=A91B2C53/serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2
Certificate serial:       0794
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
Manifest number:          078A
Signing time:             Fri 28 Mar 2025 21:37:35 +0000
Manifest this update:     Fri 28 Mar 2025 21:37:34 +0000
Manifest next update:     Fri 04 Apr 2025 21:37:34 +0000
Files and hashes:         1: 4-snntAeg57yRYBuBFH8FVAJJqI.crl (hash: yy9geHJriyRWGC4/wfhVXgWlEFjf7P+RAlVIfudFG9k=)
                          2: EBD94A14049A11EBB73A8663C4F9AE02.roa (hash: wMcaf6KjNyS0A+6aPLv02H8xkgAGjk1qWQXSXwZEtXM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1940 (0x794)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2C53
        Validity
            Not Before: Mar 28 21:37:34 2025 GMT
            Not After : Apr  4 21:37:34 2025 GMT
        Subject: CN=67e7169e-e97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a8:77:c5:c9:8e:4c:94:28:61:dc:eb:c1:cf:
                    96:c1:b9:ec:47:9e:43:b7:be:5a:2d:0f:89:3e:5b:
                    ad:81:18:24:1a:9d:17:b6:7e:08:27:21:79:06:ca:
                    85:99:6a:69:07:a4:2d:f4:84:10:63:e2:2e:8c:4a:
                    09:3c:01:9e:06:d1:0d:01:ee:b1:c0:fc:36:43:f3:
                    36:8c:71:87:40:61:df:03:74:d9:e7:6f:dc:6c:c8:
                    53:b6:4b:62:f7:bb:68:22:cf:80:5b:4b:53:63:52:
                    46:f8:37:6a:78:f2:43:e9:a8:31:11:9d:b2:fe:bb:
                    df:58:02:63:9f:f3:f4:8e:87:ad:5d:4a:99:59:b6:
                    6d:84:81:12:9c:a7:08:0d:ed:ee:48:db:02:c4:58:
                    2c:62:01:f6:9b:40:a0:16:a5:21:2a:54:02:a2:dc:
                    bf:0a:d0:25:66:77:96:ec:ee:4e:1d:d3:64:40:85:
                    bf:c5:97:11:bc:a8:f8:fd:48:32:f5:05:d9:83:ba:
                    fe:70:d9:f8:5f:97:5d:be:9e:26:9d:15:af:1f:26:
                    c0:99:b3:d1:cc:69:c8:88:8a:89:3f:b1:2c:c5:09:
                    00:cc:a9:f5:97:f8:de:c5:82:81:2f:86:ea:9e:13:
                    ea:0d:11:1f:10:a2:81:2b:42:45:03:87:36:21:bb:
                    b9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3C:D6:87:84:7C:87:D6:10:EF:6E:B3:EC:2E:36:51:C5:B2:55:10
            X509v3 Authority Key Identifier:
                keyid:E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:cb:1b:14:c2:bc:86:b8:f9:1f:a5:e9:81:84:80:22:43:06:
         46:1f:c9:9d:7d:be:1c:0d:03:9a:d8:b7:87:1d:89:2e:80:88:
         4c:68:44:66:8f:08:98:93:60:25:d1:51:21:c7:34:cc:c5:22:
         f8:ab:4b:fe:03:a0:bf:50:48:0d:09:88:96:cb:d6:bd:d3:18:
         b8:5c:4c:ba:1a:d8:09:fe:96:9e:0b:d6:49:d5:11:98:2a:81:
         5c:1e:0b:ac:9b:5b:93:b5:3c:7c:6f:b1:f2:cc:08:c8:be:3e:
         ae:d3:d4:e6:31:e2:9d:4d:3e:a5:30:21:12:b7:e9:a4:c7:56:
         62:89:f7:f2:af:7f:42:bf:95:55:c7:9c:8b:88:38:d6:1f:9d:
         4d:f9:93:e0:a2:ca:4f:69:6a:1b:30:ea:4c:0d:24:44:f4:68:
         f6:33:bb:a2:00:7a:0a:f2:14:16:41:53:5a:e5:58:16:18:04:
         e4:64:03:29:54:47:e4:65:09:4a:8b:cb:b5:c7:d0:3c:46:2c:
         1e:47:eb:e3:a3:e8:d8:67:7a:5a:44:44:55:9a:32:b9:12:a3:
         c0:49:73:90:d8:70:55:8f:52:22:ef:35:6b:03:79:06:a9:9a:
         0c:09:27:ac:57:94:6f:65:b3:51:4a:bc:d4:e2:97:be:74:15:
         3e:64:ac:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----