Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
File:                     t7c-ibYhCBYJzWiasK73-vFIkmw.mft (raw, json)
Hash identifier:          1bsl2Pibo+WF1GnvPs/tJmqD3CeF0OPndB6Xj2IpFD8=
Subject key identifier:   70:8B:6E:36:79:A9:60:43:F3:03:9A:B0:DE:07:13:F0:AE:D6:13:E2
Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
Certificate issuer:       /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Certificate serial:       261D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
Manifest number:          2597
Signing time:             Fri 28 Mar 2025 15:50:39 +0000
Manifest this update:     Fri 28 Mar 2025 15:50:39 +0000
Manifest next update:     Fri 04 Apr 2025 15:50:39 +0000
Files and hashes:         1: t7c-ibYhCBYJzWiasK73-vFIkmw.crl (hash: b92HynJW8FNlGXm1pzpUdlgjdbeJUdEeBtDEEP3xxmA=)
                          2: C9848396CD1711ED898C311FC4F9AE02.roa (hash: qiiCfqFkoE73eTUuEAWAlpV2z6GCWd7ckeeiGxi5A4g=)
                          3: AEEA3AE45BF611E984E25E54C4F9AE02.roa (hash: 8E9asmBCPDP2vspF6SfkqxDFa3zUOjR86wRCRSbANb0=)
                          4: BE402F16707F11EDBD17DD28C4F9AE02.roa (hash: OnnEcT/kT/2u+quSNu4e6UQE5EuukB+yT7k1rnta/B8=)
                          5: 4A479BB45A7911E998A6BE80C4F9AE02.roa (hash: 7w5j+dyzSy7t29HEAco9XLxp6MYZWlL3SdlWBrNw0GY=)
                          6: 1A982CC85A7C11E9A28B110DC4F9AE02.roa (hash: rA4hkIUyghNJGhY6y7qlDGe8Bvu+DeS8X5hf3GA24oo=)
                          7: 6223956A752011ED84F8CD3CC4F9AE02.roa (hash: qP1taxaDkzPIRlzYJOWEFK27iFdTzqw6PgRMtNqW7DY=)
                          8: 8F92939C46C711E9A5547325C4F9AE02.roa (hash: OMcalDpUDIv29WHDH5fBd3k9KPtvhZaxcTh0ykbSM4A=)
                          9: 3824883E72ED11EE812CE764C4F9AE02.roa (hash: SGtpHicj9fj12PvzOePuISsi6bvGYuZWMeMkAXSkEcc=)
                          10: BD9FC7C4707F11EDBD17DD28C4F9AE02.roa (hash: R4Hu6VZOII2INVF3IDAiNevmkDezpOVd/aGcqQwbfzw=)
                          11: FF145268EEAB11EFAD1FDC0CC4F9AE02.roa (hash: BUsQ5wBegaz/A2q7GTFIUHkDuT4PXl4dcLWVKVnr0mQ=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9757 (0x261d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1136
        Validity
            Not Before: Mar 28 15:50:39 2025 GMT
            Not After : Apr  4 15:50:39 2025 GMT
        Subject: CN=67e6c54f-4f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e1:6e:f3:25:83:ab:30:84:78:e4:fa:9c:58:
                    a1:4f:97:f0:e4:1e:1b:7a:5a:8b:09:9b:7e:87:82:
                    c3:0d:64:85:03:f0:09:c2:1b:40:67:3f:8d:0f:07:
                    44:d8:e3:0c:0d:ec:a6:2a:47:56:64:12:bf:38:94:
                    de:d1:df:03:03:0c:f2:ac:8c:5f:0d:22:c0:a6:b0:
                    8b:15:71:0c:8f:65:b4:05:53:75:17:ac:6e:55:b5:
                    f1:bf:8b:7d:31:d2:84:b5:f0:10:ea:0b:3c:81:f5:
                    d4:5a:d0:af:10:34:2a:75:62:db:c0:f6:bc:b5:bf:
                    81:32:6d:f2:02:c4:97:03:aa:cb:31:01:ce:26:6a:
                    25:4b:80:15:4a:2b:dc:50:ee:ee:7a:2c:a7:f3:19:
                    a9:f4:19:1c:04:2e:89:c4:c7:d7:8b:9a:bd:1b:8c:
                    86:68:4f:5f:59:75:b4:33:d7:19:95:57:ab:aa:64:
                    9a:bb:70:a7:45:09:6b:41:ab:07:90:2a:c8:31:70:
                    45:27:f8:11:b1:51:53:23:75:d6:88:73:b0:01:29:
                    0e:0d:7c:93:ad:73:83:eb:1b:9d:05:ec:83:d4:97:
                    a3:10:20:13:07:3e:3f:c6:11:aa:ce:5b:9a:fb:1b:
                    d8:cf:df:49:06:1a:9a:e1:e2:fe:b0:17:87:ba:87:
                    19:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8B:6E:36:79:A9:60:43:F3:03:9A:B0:DE:07:13:F0:AE:D6:13:E2
            X509v3 Authority Key Identifier:
                keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:2c:d3:ff:10:96:c8:31:2b:f7:7d:a8:90:0b:60:42:94:ea:
         80:ff:37:68:a6:45:59:46:92:e0:39:7e:90:44:03:39:ff:d1:
         66:b7:59:76:0e:29:bc:71:ec:bd:e4:fb:59:74:d8:75:bc:cd:
         df:4f:5f:fc:80:f8:e7:81:f6:b6:03:15:67:70:59:f8:ab:ab:
         cf:2a:65:f5:2e:42:f6:d9:0b:1d:20:e4:0d:9e:ae:4a:e4:e7:
         41:04:dd:46:ad:a7:50:19:ca:66:e4:0a:39:fa:56:80:76:a4:
         87:ad:76:00:8c:9b:f8:a4:30:70:48:7d:2e:c0:f9:fa:6e:21:
         0e:90:e2:37:22:1f:5e:50:68:06:ff:e3:17:7a:fa:a6:29:7f:
         9e:69:aa:46:d5:1b:c5:46:99:42:91:46:57:79:17:6f:c8:14:
         13:45:d7:7a:73:8a:ba:70:81:e4:a6:2d:17:db:8c:50:68:db:
         43:d0:ee:21:d3:43:b7:07:33:56:0c:23:0f:05:49:58:56:e4:
         80:94:d3:ba:22:91:e7:2b:9f:3a:32:05:7e:62:4a:da:70:06:
         b5:d2:84:2f:c6:e1:51:31:ab:29:74:c0:c3:ce:c4:c8:b9:44:
         8c:b8:97:f0:e6:25:89:93:6c:f9:32:d9:0e:4d:f3:17:4f:6e:
         1d:dd:e6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:36 2025 by rpki-client