Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
File:                     N-rtpCQtUJYrh7SiB6xMNEszBgw.mft (raw, json)
Hash identifier:          waBmFi8diMslZa/qZ774fKI0tJtEdDay+Zdnvs6Q0TQ=
Subject key identifier:   00:33:8E:88:36:58:90:1F:C0:56:4D:83:26:B9:2E:F0:81:B6:E3:77
Authority key identifier: 37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
Certificate issuer:       /CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Certificate serial:       0DF6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
Manifest number:          0DBC
Signing time:             Fri 28 Mar 2025 18:28:43 +0000
Manifest this update:     Fri 28 Mar 2025 18:28:43 +0000
Manifest next update:     Fri 04 Apr 2025 18:28:43 +0000
Files and hashes:         1: N-rtpCQtUJYrh7SiB6xMNEszBgw.crl (hash: RuYB7Iqa6PRGIfh6hMaaqpcXHX9TGndNbSNS8+kC2iE=)
                          2: C65A7B2E2DA511EDABDD0D5AC4F9AE02.roa (hash: XXEtd4acA5WN5nQ55u0c/6B2fLJ5iEmhPHp1iyDBTHg=)
                          3: 0EB7AAC0F32211EEA6B7BD5CC4F9AE02.roa (hash: F3ruMwZ8Zkd7JvEXX/ban+THiOr2874j2Qf3JBG20Oc=)
                          4: 571B65E63DB411EEAA68F342C4F9AE02.roa (hash: c5cKsH/wywjFJuntQ2zEXHvdACLKbLED/IyUky+0prg=)
                          5: 4B058994B18D11EC886B063CC4F9AE02.roa (hash: hz9U6Vrjf2uu8O9hhyxsvGgsibbnQkjfxQGCzPSoo1E=)
                          6: 2D6E9D74F5DA11EEA64D3F7DC4F9AE02.roa (hash: fPCtXIFdgFLuZAHIhoHiaIFtzRJQc1tSW5oOJQOgGHI=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3574 (0xdf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0741
        Validity
            Not Before: Mar 28 18:28:43 2025 GMT
            Not After : Apr  4 18:28:43 2025 GMT
        Subject: CN=67e6ea5b-93b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2c:da:38:42:ba:9a:18:ae:8c:e4:a9:e4:4a:
                    76:06:24:43:da:62:7b:82:08:9d:61:41:12:c9:00:
                    ac:42:a1:c6:88:28:fb:d4:cc:77:ea:31:21:29:e0:
                    10:7e:a5:de:0e:99:cd:92:8e:f2:28:76:01:9b:28:
                    b3:07:9f:bc:2f:36:59:bf:8d:06:74:00:58:d1:5d:
                    cc:da:f7:0f:d1:b2:02:cc:fc:cb:a9:2c:db:af:3f:
                    6a:4f:a0:7a:36:3e:87:d3:82:b1:a2:5b:46:6b:6c:
                    a4:65:b9:8a:59:c3:78:a4:14:1c:00:d9:f4:13:8d:
                    86:92:dd:9c:3a:e4:24:24:ae:95:31:bf:14:01:4a:
                    a8:3b:20:24:82:88:c3:17:62:b3:64:02:16:4b:ef:
                    2e:fb:a5:3d:e7:47:f3:a9:78:6c:05:9e:ab:d7:f2:
                    a6:96:f8:2a:9e:8d:cd:0e:70:d1:07:09:47:9b:d6:
                    ea:8b:2e:03:66:bc:fd:f4:cd:5b:b3:16:8c:b4:aa:
                    55:ac:24:28:cd:78:a8:bd:8e:d9:7f:33:37:ee:b7:
                    2b:40:00:39:54:27:77:6d:7f:5c:64:21:5f:94:62:
                    90:64:1a:cc:11:cf:ec:b9:9c:04:99:af:88:95:50:
                    24:d7:bd:9d:f5:3c:5f:62:a5:f2:eb:f7:22:3c:ee:
                    19:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:33:8E:88:36:58:90:1F:C0:56:4D:83:26:B9:2E:F0:81:B6:E3:77
            X509v3 Authority Key Identifier:
                keyid:37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:d7:b9:0f:65:47:52:19:fc:d8:42:6e:0a:36:fa:5e:a4:26:
         1d:b0:f8:dd:79:89:26:41:f4:8d:99:65:f2:85:ba:e1:75:58:
         b1:87:a6:2c:ea:4f:ac:b1:d9:31:ed:1c:e2:d6:68:34:83:7d:
         b4:3b:a6:31:fe:3b:cc:fb:27:4b:e2:d3:a0:33:bd:d0:4a:da:
         71:4a:d1:64:bf:fc:70:66:0b:f1:29:fd:f2:3d:8a:40:58:73:
         b3:b9:23:a0:a8:86:35:bc:8f:30:4a:63:10:46:d9:55:72:c7:
         6d:0d:d4:77:39:22:f0:0b:89:51:f0:10:2e:0c:38:b9:65:af:
         60:04:24:60:09:39:0f:ee:c5:73:89:24:91:5c:12:f4:1a:bd:
         63:5a:23:81:90:06:ce:ce:a6:05:9d:a6:3b:cc:41:4e:8f:49:
         48:1d:65:2d:b6:af:e6:ea:8e:6e:a3:50:b4:a5:4f:f0:b3:ce:
         5d:9a:15:d2:16:25:eb:75:c4:15:a9:3e:d7:9b:96:c2:b0:3f:
         3d:41:be:60:25:73:75:5b:06:18:69:89:83:0e:c7:bd:c7:b7:
         81:04:c1:66:64:8d:2f:76:a4:3a:1e:b1:7a:51:ac:92:2d:a3:
         49:26:ba:ec:2c:f8:aa:fc:2c:94:3b:30:25:8d:c5:82:ec:36:
         ae:d4:3f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:35:58 2025 by rpki-client