Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft
File:                     tY0p97gQfxWFtf_nDFAsbI9dMwI.mft (raw, json)
Hash identifier:          VJzMh6oBjTreJ3Vc1lV+xuDCZXkm85yBiY8F182klqw=
Subject key identifier:   8B:AB:EE:0C:C8:9B:28:42:75:9D:F2:FC:1F:3D:81:F9:C2:A5:C6:CF
Authority key identifier: B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02
Certificate issuer:       /CN=A91B3CA4/serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302
Certificate serial:       0837
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft
Manifest number:          0821
Signing time:             Fri 28 Mar 2025 21:06:14 +0000
Manifest this update:     Fri 28 Mar 2025 21:06:13 +0000
Manifest next update:     Fri 04 Apr 2025 21:06:13 +0000
Files and hashes:         1: tY0p97gQfxWFtf_nDFAsbI9dMwI.crl (hash: /HV0286+MdhrkH/93WonO1L4Eo41ocEjjSNNkkbld/Q=)
                          2: C33EB0EC7C4211EB933D233EC4F9AE02.roa (hash: d3qr5RqMQclwYYIrxTT2M2ZEqEhw3tr48jNwaXCY/ZQ=)
                          3: 3C3F21BAD6F011EE9B38B67DC4F9AE02.roa (hash: Gf0OG44Gbrw/oSuWZaX2oN0pSzBlgivn+JOWWsA/Jy4=)
                          4: 8F44F16A4BCC11EDA2E6375FC4F9AE02.roa (hash: A3kThrVaT5oRwxsCsohgrMXC95qG/MeuK1hdFh/7ma0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2103 (0x837)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3CA4
        Validity
            Not Before: Mar 28 21:06:13 2025 GMT
            Not After : Apr  4 21:06:13 2025 GMT
        Subject: CN=67e70f45-47bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:41:53:7d:f6:e3:2f:a0:e9:ad:54:6a:11:36:
                    8b:f3:50:f8:0f:4a:1c:81:f6:81:45:be:28:32:77:
                    76:93:e6:c3:8d:31:08:18:eb:5c:f6:13:12:1c:e9:
                    40:8a:f8:37:12:39:bb:cb:53:9c:9a:8a:68:16:f4:
                    ef:d2:e6:e0:48:e2:82:1d:39:35:79:f4:27:2b:f5:
                    4c:91:df:58:a7:d4:fb:8a:20:66:17:48:1d:e1:ad:
                    4d:fb:49:01:8c:1d:b8:24:7b:31:07:58:43:7e:3d:
                    c4:e8:fc:12:4b:83:4d:24:8a:ba:ad:92:56:b2:1e:
                    38:e4:68:87:cc:1c:c6:74:2b:02:14:22:1e:ee:a1:
                    e2:5a:21:96:fd:5a:9d:e1:7d:b8:b4:33:50:39:94:
                    2d:90:67:7c:cf:de:6a:25:fb:22:ab:b8:54:2e:cd:
                    cf:4b:20:37:9e:cf:12:23:58:23:d2:ab:9d:33:0f:
                    16:23:fd:42:e3:4a:de:0b:bd:ad:d6:39:0b:fb:54:
                    32:39:5c:c5:8c:79:a3:48:c7:d5:9f:4b:9a:87:0f:
                    26:e3:b9:d9:36:95:14:39:91:56:f0:3b:1b:0c:7f:
                    fa:6b:bb:86:00:d1:94:de:89:95:0d:67:a8:c4:ea:
                    74:a6:44:8c:eb:e8:bd:9e:35:a2:1d:16:d7:b7:eb:
                    43:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AB:EE:0C:C8:9B:28:42:75:9D:F2:FC:1F:3D:81:F9:C2:A5:C6:CF
            X509v3 Authority Key Identifier:
                keyid:B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:aa:1e:2d:18:46:68:95:e4:9c:04:09:92:a0:8b:ce:ed:01:
         d2:6f:45:ae:2b:e3:62:6c:d0:0a:5f:03:06:0d:6e:cb:2e:c1:
         ae:60:fd:87:77:ac:c6:2a:30:96:68:66:e8:b6:5c:5e:6e:97:
         3f:66:5e:e5:3e:9f:b8:c8:62:1c:41:9b:a8:2d:41:d2:17:09:
         1b:74:0f:23:cd:20:c2:1b:71:ca:13:e9:c8:4a:92:fc:ca:9e:
         81:74:21:31:c8:3f:ba:43:fe:e3:9d:9f:df:5a:49:6a:cd:26:
         a5:06:ab:e8:d2:61:85:96:ce:fd:35:c6:7c:b2:93:cf:dc:25:
         5a:f8:a1:81:a3:91:94:06:20:e3:57:54:92:71:8a:19:60:73:
         ea:12:ad:8c:a0:8c:c3:07:fe:4d:24:e7:63:36:85:ea:3a:d9:
         13:03:3e:0f:77:2a:f7:b2:e4:13:61:29:27:1f:4f:34:44:9a:
         78:ec:4d:46:6f:d4:3c:74:d1:5e:ec:bd:09:00:58:b8:5e:11:
         a5:b7:73:8e:26:c3:e7:7f:dc:84:61:dc:38:a5:3d:e6:bb:cd:
         89:4e:2a:eb:af:74:fc:e3:4a:3e:e7:e0:3d:25:47:05:fa:1b:
         23:c6:e3:ee:aa:9c:66:a8:6a:6c:ff:ab:4e:6d:41:f3:ab:40:
         b6:9b:cc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----