Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
File:                     mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft (raw, json)
Hash identifier:          23UnPEmw6ShZ4F/VokRDW02/1j/vtDEReuMTLtVu6fY=
Subject key identifier:   9F:33:02:2B:2B:67:3A:91:92:57:2A:D5:2B:70:BF:E3:4C:F2:D5:ED
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Certificate issuer:       /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial:       0A6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
Manifest number:          0A3D
Signing time:             Fri 28 Mar 2025 20:00:41 +0000
Manifest this update:     Fri 28 Mar 2025 20:00:40 +0000
Manifest next update:     Fri 04 Apr 2025 20:00:40 +0000
Files and hashes:         1: mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl (hash: uH0bQWqoZl9ykQ8XJdLl84E1CQaxeHTQXDNzmrVAvFU=)
                          2: 07CD68A213AD11EFADED003DC4F9AE02.roa (hash: gbSrDMCrPI8A3+3d0sfCicNLcWdleMd0w7YOfrmP/TI=)
                          3: DB701E584E6311EEBED9743CC4F9AE02.roa (hash: Zd7NoechSfahxSRsj2v3JsOwSTFCMebH21LUprHvV20=)
                          4: 011CBE6CDF8911ED942E2A67C4F9AE02.roa (hash: SFbvxZ2XG8g69o3YZw4mocDKsXgtaeblyR+TN86Ur60=)
                          5: 8D864528E26911EFB89A9142C4F9AE02.roa (hash: y31kJqG82XvEmO9/QRkcWiRFKFh5zoKjaSnnJfP7MyE=)
                          6: 8A533506C9DC11EE8B24C55EC4F9AE02.roa (hash: L2UnCfNPLgYDfL3nmk5SGHkno1H3kXJJBZN9FhtxlXQ=)
                          7: DC4A492A4E6311EEBED9743CC4F9AE02.roa (hash: GMZ//QDkBiynojhpbrl7EytSa00iqEIB/AB0/Z7GlXI=)
                          8: 66E400CACB4C11EE8E404546C4F9AE02.roa (hash: mvVRFtNTY10bq4ZO+LKEMEdrzCb/tsvmp6na5wzt45Q=)
                          9: 01D6C542776C11EF9A0CEA56C4F9AE02.roa (hash: yd/SOlvp9mrxaUSwn8FcZ74+WiXfNeapwvKAhRJ4Sx8=)
                          10: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (hash: 4HveBCpHvV1swaBGF9e6bY77B+cKbG0JrVqTZsmASrs=)
                          11: BACC498C9EFC11EC856FCB09C4F9AE02.roa (hash: 2GC7KAVMhvV+YXc4GAZ/vzQonWiNlY6zwWOHBpULon8=)
                          12: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (hash: MEzvVgdoK3WuLUFmv9SwilQrCS7SZE01USmJAX6/Oss=)
                          13: 8B8856F4C9DC11EE8B24C55EC4F9AE02.roa (hash: 9pxxuNY/fuCdOuU7dA3COe6L1OGNmS3muKknh0X0O9M=)
                          14: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (hash: Mm2/BkteGaDDz+jKCOQ2/1mPEBu0lMlfQI/ZFwneEPA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2669 (0xa6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB493
        Validity
            Not Before: Mar 28 20:00:40 2025 GMT
            Not After : Apr  4 20:00:40 2025 GMT
        Subject: CN=67e6ffe8-e3b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0a:32:46:26:3d:db:64:a8:43:51:46:d0:99:
                    e8:68:b7:ca:5e:6d:5c:e9:3d:69:f4:8f:9d:e8:de:
                    7b:15:f3:da:1a:96:a7:b8:93:68:38:71:68:da:47:
                    6b:6d:8f:a0:17:86:2e:0a:2f:89:ef:a2:fa:60:5b:
                    b5:06:48:fb:78:26:0b:8b:09:ed:ac:e1:ce:ad:92:
                    75:91:f2:36:8d:c7:57:be:fe:04:8c:f6:ad:78:30:
                    c7:5b:85:07:ff:43:c6:50:56:8a:20:f6:63:c5:28:
                    d7:94:8d:24:47:68:54:19:f3:bd:28:1a:c4:98:d6:
                    50:10:f4:b0:48:5e:c1:1c:bc:49:32:e4:a9:00:f5:
                    ce:f2:65:bd:3a:c3:0a:71:e5:6d:d4:03:74:33:a2:
                    fa:b9:a8:ef:c9:aa:04:6c:fc:bc:20:1e:47:15:62:
                    a8:0d:44:f5:30:e2:2e:29:0b:ed:df:d3:45:60:a1:
                    af:18:03:27:91:ad:f6:31:c2:79:f2:c1:12:a5:ed:
                    77:92:27:ef:4d:04:7b:bd:cb:02:0a:74:4d:b5:67:
                    b6:46:b2:00:4a:a8:9c:64:e7:c4:95:a2:87:ef:b9:
                    5c:7c:41:17:c7:0a:05:1e:7f:ae:b3:a7:9c:a4:1f:
                    59:dd:4c:53:e2:7c:47:9b:8e:3e:f4:e1:b6:85:ce:
                    d6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:33:02:2B:2B:67:3A:91:92:57:2A:D5:2B:70:BF:E3:4C:F2:D5:ED
            X509v3 Authority Key Identifier:
                keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:78:50:5b:68:97:0d:d0:be:8d:1b:5d:36:7d:1b:dd:f3:56:
         40:1f:cf:89:e5:57:8c:50:fc:61:fb:1e:b1:93:0b:d6:ed:c8:
         7a:7c:7a:46:37:5e:cb:a8:5a:01:d7:a6:e0:f4:1c:17:28:f3:
         b0:57:59:dd:ff:62:8a:c6:e6:ad:32:b6:d7:95:0a:0f:82:eb:
         65:7e:e9:6a:3e:4e:ba:24:89:c4:89:e6:5d:59:67:21:22:9b:
         94:a1:23:a3:06:7a:c6:cd:58:b4:4f:13:fb:22:b1:74:b0:08:
         bd:cf:9b:ce:1f:50:09:0b:4a:5e:a0:f0:62:c1:d2:b9:8d:a5:
         c4:1e:3d:dc:b9:2f:f5:5a:e4:82:53:db:d5:77:5c:94:b4:33:
         fc:1c:c9:76:56:6a:4e:d7:f7:61:62:3c:63:24:84:25:6a:af:
         77:9d:c0:ba:c8:97:ee:de:d8:ae:ac:d5:eb:3a:45:c1:a3:b4:
         e5:96:1b:42:2b:ed:34:05:41:7d:e7:dc:05:87:fe:bb:7d:cc:
         ed:7b:ad:55:2d:6b:ed:74:50:b8:e9:87:be:dd:bf:5a:5e:5b:
         22:a5:32:fc:5f:5d:5a:59:de:a6:11:b3:43:21:6a:2a:1e:9a:
         22:83:e1:2c:c3:48:56:39:f8:70:88:c5:f6:52:33:46:f3:76:
         ee:d4:32:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:52 2025 by rpki-client