Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
File:                     fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json)
Hash identifier:          mf6tIBiyuxt+6Un2FmmmJNTZyRZzap4o+6zT/Ragm5U=
Subject key identifier:   52:D4:03:DC:0E:13:C6:E2:BC:17:62:A9:97:7F:F6:52:44:4D:09:16
Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
Certificate issuer:       /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Certificate serial:       093B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
Manifest number:          08D5
Signing time:             Fri 28 Mar 2025 20:57:06 +0000
Manifest this update:     Fri 28 Mar 2025 20:57:06 +0000
Manifest next update:     Fri 04 Apr 2025 20:57:06 +0000
Files and hashes:         1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: sw8EXJAiLIKs3usBnPmfwEEjYGR05VWqEcgwGsj2E0Y=)
                          2: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: a0K/4suOukzalMmGXoAuXRRlPLJmkTGLqgOEswzREmw=)
                          3: 501941C093F211EEA029A113C4F9AE02.roa (hash: AzLlJkV6uweEFCMcx/o9vS17187fN+9zNJtq2qRlwjg=)
                          4: 781C64FAF58611ED89273159C4F9AE02.roa (hash: KQsiNAY3rgJSqaPcQR/vrNEFqpIv1dzI+sj/d5igWno=)
                          5: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: tfdFxm7zDzSNY8KLHsb30XY14VNoD7lmA8Phn0Ip+7k=)
                          6: 9672E862793811EE92C54834C4F9AE02.roa (hash: VZDkUmHUSNQz0PuWGeefW0AZnX5klCTCiKAwXgSpJ9o=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2363 (0x93b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7770
        Validity
            Not Before: Mar 28 20:57:06 2025 GMT
            Not After : Apr  4 20:57:06 2025 GMT
        Subject: CN=67e70d22-d843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:68:e8:d3:51:0b:6b:83:99:7e:db:5d:16:b7:
                    79:25:90:3c:02:04:ad:46:db:4b:e0:cf:a2:aa:38:
                    49:25:84:df:72:6c:1c:66:0a:98:ff:06:49:81:d2:
                    1e:dd:8e:73:ca:61:9c:50:00:ce:0c:ae:56:66:f4:
                    a1:f0:70:16:32:93:57:0f:a2:3a:f3:29:99:09:8c:
                    e9:8c:b2:01:f0:a0:c0:26:f4:5e:26:65:e6:fc:4b:
                    03:bc:c9:d9:fe:9f:61:84:64:db:ab:4c:be:24:3c:
                    53:07:b3:b9:c5:0b:dc:ab:b1:41:33:90:59:cf:3b:
                    eb:2d:c0:e8:11:cf:32:1f:2b:26:fd:a5:2e:3a:26:
                    c6:a4:a9:33:10:ea:8c:ad:aa:36:3e:48:70:f1:11:
                    be:e4:ba:b7:8b:f6:54:2a:09:57:b1:99:72:3e:e9:
                    ba:1a:0a:8e:de:54:66:f1:eb:7c:c0:6b:ab:b5:cf:
                    02:77:35:22:20:a2:31:fb:e7:e6:b0:37:a8:f9:5e:
                    dd:ee:c9:3c:87:37:9e:f4:fd:20:e1:a2:08:86:7c:
                    11:9b:0b:56:2c:7b:62:9e:ff:4b:d3:fb:82:50:81:
                    05:2e:d1:30:a9:05:9a:b6:cb:0e:2c:e3:5e:50:ab:
                    0b:d5:21:88:ca:e8:08:59:b9:03:92:dd:7a:13:90:
                    f0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D4:03:DC:0E:13:C6:E2:BC:17:62:A9:97:7F:F6:52:44:4D:09:16
            X509v3 Authority Key Identifier:
                keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:31:a3:75:90:31:26:4b:e0:51:aa:f5:a2:da:6f:19:f6:9a:
         b7:cb:0e:55:9d:ba:0e:7c:e1:41:49:a6:01:5c:08:0d:4c:cf:
         20:db:0c:59:b3:d1:d5:0b:8d:8a:0c:5e:3b:32:87:c4:39:4b:
         2b:00:5f:da:fd:ab:e9:4a:53:61:b7:86:45:f3:7b:52:85:cf:
         67:ef:4b:2a:bc:51:9e:64:7f:3b:9b:b4:10:df:86:ee:a2:0d:
         58:b5:16:35:ad:fe:df:64:f7:b3:72:32:f4:b2:43:28:ac:2e:
         77:c5:8e:fd:9c:8c:6c:79:b8:5b:49:ae:e1:0d:b5:08:97:9a:
         e3:cd:12:ef:a6:86:44:d6:e7:5c:71:e4:54:9a:ed:cc:4c:44:
         ab:c2:73:bc:9b:c8:3e:fc:bf:63:80:53:29:56:2e:0e:11:9a:
         43:2d:fa:79:34:e9:83:53:d6:50:e2:fd:6f:ad:78:0a:64:14:
         a0:2c:e9:cf:31:8a:d7:a7:74:4a:3c:a0:b0:ca:56:09:60:fd:
         42:09:77:9e:a1:6e:1b:73:69:f2:af:6e:ca:e5:41:d8:8c:14:
         ae:33:75:fd:28:37:d8:04:4f:37:90:a0:72:27:93:d0:e8:3a:
         ef:c6:eb:72:68:2f:c1:54:bb:78:71:31:73:4e:6a:6d:13:a3:
         d2:d7:0e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:35 2025 by rpki-client