Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
File:                     SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json)
Hash identifier:          1AUEkTAPz8LE3mumUtzA3Hn3arOyH/QGraFx2g4U0Wg=
Subject key identifier:   28:E5:7A:80:1B:82:ED:96:D6:34:F7:E4:5A:16:5D:5F:74:3D:44:A0
Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E
Certificate issuer:       /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
Certificate serial:       0785
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
Manifest number:          077D
Signing time:             Fri 28 Mar 2025 21:40:40 +0000
Manifest this update:     Fri 28 Mar 2025 21:40:40 +0000
Manifest next update:     Fri 04 Apr 2025 21:40:40 +0000
Files and hashes:         1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: ExuuptCcVymquOBvNopqGZBV/YRnAlElNeLn2tJQXGk=)
                          2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: Y7eFgzF/UlzHZlIaZMMT6p/6Ir1lnrNlq+1rkd8Vdws=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1925 (0x785)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D09D4
        Validity
            Not Before: Mar 28 21:40:40 2025 GMT
            Not After : Apr  4 21:40:40 2025 GMT
        Subject: CN=67e71758-6ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2f:29:3f:de:97:d1:e0:4e:93:8f:d9:65:91:
                    6d:66:29:1c:e3:42:7b:68:34:85:ec:49:7f:06:10:
                    d6:18:4d:6a:6a:af:cb:1f:39:6f:32:a8:66:55:f2:
                    4b:5a:6c:c9:13:d1:22:7b:44:b6:b5:51:8f:ca:7b:
                    ed:2e:28:2e:ed:9f:d6:ce:76:14:6b:f3:51:df:f0:
                    8d:0c:f3:c6:73:3d:26:9d:4b:33:fa:29:d1:7f:0c:
                    42:82:c5:44:7a:96:05:da:2d:37:4a:09:a2:51:82:
                    fe:79:2b:f1:5e:e5:b5:0d:17:00:d0:37:31:a0:34:
                    9e:19:b4:ff:c5:43:6d:d8:41:61:99:2d:8d:73:bc:
                    4a:d6:e0:7e:ca:4f:4b:40:be:9a:89:4b:d3:e9:6e:
                    07:a1:b9:67:42:ba:08:4f:d3:15:e6:a1:7e:48:ec:
                    2b:6c:78:86:b4:42:27:d6:82:10:fc:e9:99:77:7f:
                    d5:2b:73:24:5c:64:df:be:a0:bb:b7:ec:a1:fa:cb:
                    65:50:bf:3e:05:66:97:67:8f:4d:50:ce:e3:49:f2:
                    31:c1:ee:57:3c:6e:77:53:8c:0d:94:5b:0f:9a:de:
                    3a:78:90:3b:54:b5:1f:28:3b:f6:f5:75:2f:78:ae:
                    ea:9e:53:19:e5:c7:ad:99:2f:ca:89:ff:12:a9:b5:
                    e4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E5:7A:80:1B:82:ED:96:D6:34:F7:E4:5A:16:5D:5F:74:3D:44:A0
            X509v3 Authority Key Identifier:
                keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c8:33:76:11:ba:8d:28:43:2a:4f:0e:98:28:ab:21:83:e7:
         73:e6:f2:75:c5:63:53:78:64:ef:20:31:0d:05:f3:76:47:16:
         f6:20:c7:b9:8c:ba:22:fe:88:8c:1f:53:88:98:97:db:71:25:
         7e:c2:b9:60:ff:3d:4d:01:1f:16:eb:64:8e:47:67:b4:68:99:
         30:39:eb:a9:13:72:6a:96:c0:ed:db:64:4e:34:8e:be:95:a7:
         b0:f1:1f:e5:a3:9e:20:d3:13:76:0a:1d:b5:1d:24:6e:5e:5a:
         df:c1:68:37:92:92:5a:88:67:83:59:68:c3:f4:b3:43:83:4e:
         af:d0:b3:80:22:96:29:c1:e2:b7:24:3a:a9:ca:f8:fd:52:1a:
         86:af:55:6d:5d:86:fe:44:cb:d5:73:3d:49:81:93:29:56:08:
         b4:84:b4:03:a6:f3:ef:e2:26:38:1d:17:4a:fb:82:dd:db:02:
         b2:1b:88:d6:78:b2:99:3e:55:5c:ae:b8:4e:41:54:8a:5a:6e:
         8a:84:de:32:aa:8e:72:79:da:30:ff:32:21:e2:23:7d:72:12:
         3e:c6:95:62:c5:8f:c8:ef:13:a5:02:87:b5:4b:4e:f9:d8:68:
         ac:d4:06:fc:d4:11:f8:19:29:ca:74:ee:11:c1:60:7c:ab:34:
         17:31:b8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----