Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
File:                     fmfojMQDeKlwRj3y0LBgiOZdubA.mft (raw, json)
Hash identifier:          gQS4reV1FzjD/vg7cAGP3iKfdFtLbAzin2wx1/av2eY=
Subject key identifier:   7E:A5:0A:18:7C:09:26:DB:69:CC:37:5C:4F:17:F0:B0:B1:D2:B3:0F
Authority key identifier: 7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0
Certificate issuer:       /CN=A91C9D04/serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0
Certificate serial:       08F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
Manifest number:          1EA3
Signing time:             Fri 28 Mar 2025 16:53:42 +0000
Manifest this update:     Fri 28 Mar 2025 16:53:42 +0000
Manifest next update:     Fri 04 Apr 2025 16:53:42 +0000
Files and hashes:         1: fmfojMQDeKlwRj3y0LBgiOZdubA.crl (hash: yaP443TSk2t8p013l0kJCHKoJ7xpOtiuXauVQCW/tuY=)
                          2: A1DFD796A65511EABDAED713C4F9AE02.roa (hash: vKmmh6WIOEqHjc9HRB9xmdHJEo2LxIyyZG3CXzn2ZyE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2295 (0x8f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9D04
        Validity
            Not Before: Mar 28 16:53:42 2025 GMT
            Not After : Apr  4 16:53:42 2025 GMT
        Subject: CN=67e6d416-cb07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:62:ef:0e:f7:e6:7c:31:e1:ce:66:cd:c1:3f:
                    13:78:77:5d:47:c8:2c:b1:ed:bc:bb:a7:9b:90:33:
                    3a:4d:01:d8:2f:b3:d1:6d:95:4a:ff:76:59:72:73:
                    68:b8:f7:50:2d:eb:06:07:31:1c:17:ba:46:45:4d:
                    22:da:89:30:f5:77:c5:1d:12:c5:2c:f5:8b:58:e1:
                    68:c4:3c:13:d7:9d:a8:f9:f6:43:3f:d7:87:cd:22:
                    dd:88:fb:3e:99:8e:60:8b:ca:96:d6:5a:62:2c:c7:
                    f8:0a:67:53:84:65:f1:c3:19:88:36:06:38:01:e0:
                    bb:d5:85:cf:70:95:ca:83:de:90:72:72:c5:12:71:
                    01:42:43:0e:03:2f:98:0f:23:c5:2d:30:4f:15:2f:
                    84:c4:d7:a6:0e:19:bd:a5:81:c5:c9:f5:02:5d:7c:
                    23:3a:6a:83:b1:bd:3f:86:33:0f:c9:e6:85:1d:3e:
                    fc:f3:e6:17:fa:4d:c1:84:3b:16:4c:d0:ea:93:45:
                    e5:b9:da:12:ad:4e:dd:2a:e4:cd:9c:fa:11:b5:8e:
                    49:73:a4:de:a4:7c:53:55:f6:b2:5f:8d:0d:76:db:
                    80:f2:20:f9:64:49:1b:fe:19:f2:65:34:6e:33:87:
                    94:e8:a9:e5:43:e3:66:34:84:22:6f:8b:62:34:38:
                    e8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A5:0A:18:7C:09:26:DB:69:CC:37:5C:4F:17:F0:B0:B1:D2:B3:0F
            X509v3 Authority Key Identifier:
                keyid:7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:45:cf:6d:8b:af:36:cb:72:6d:0e:ab:3f:69:6f:36:fa:85:
         34:fb:ac:a3:ba:e0:bd:fd:08:ce:31:b7:8b:c6:e1:cd:15:e8:
         88:e7:ee:94:0a:e4:84:3a:c4:c4:1b:fe:5c:3e:47:56:78:73:
         04:2e:7c:31:d7:64:aa:fd:bb:73:bc:c2:7d:a0:4a:ee:8a:c2:
         c4:2a:54:7c:4d:b6:60:6a:01:f8:9d:2a:21:a1:b2:e0:82:3d:
         00:7b:df:4b:78:4b:6d:74:61:a5:a1:d4:5c:bf:d4:19:7c:17:
         03:b1:d7:5e:72:cf:55:f4:05:d8:60:74:26:fe:ab:e7:35:a4:
         1e:53:a4:03:46:1c:13:dc:e9:e8:7c:c8:e2:39:ec:c1:fb:69:
         ea:70:85:3f:ce:a2:07:e5:ba:6c:bd:52:9d:87:6e:8b:8a:06:
         1a:62:6f:75:08:99:59:6a:53:54:40:5d:03:e1:4a:2a:e2:8f:
         d2:28:54:f6:ba:56:5d:71:24:66:d8:62:03:14:f9:0d:d7:9f:
         58:5c:f2:78:b9:57:ca:9f:91:7f:7c:b0:2e:a0:23:6c:0b:73:
         3d:88:24:fd:0c:fd:ba:ea:62:a1:b9:e5:97:74:c6:5a:29:5e:
         df:09:70:03:34:00:fc:58:9c:52:3c:1a:67:2c:42:e8:4a:8f:
         c1:8a:29:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----