Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
File:                     SXscTqbbFagx-8FyKi9jR0UM80E.mft (raw, json)
Hash identifier:          A76RYrpB86sIF1JfQoMUJvELjU3lcOIqpkDl8m3fNXY=
Subject key identifier:   62:FB:12:96:D1:9C:42:0A:22:46:16:F7:83:FA:6C:43:1F:71:F4:0D
Authority key identifier: 49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41
Certificate issuer:       /CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
Certificate serial:       346B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
Manifest number:          3466
Signing time:             Fri 28 Mar 2025 15:23:19 +0000
Manifest this update:     Fri 28 Mar 2025 15:23:18 +0000
Manifest next update:     Fri 04 Apr 2025 15:23:18 +0000
Files and hashes:         1: SXscTqbbFagx-8FyKi9jR0UM80E.crl (hash: qRbYI+81DU+RrW5EXP7ZWS23EHZmKSSykbJCFYNDx2g=)
                          2: E72434CA69E011EFBD9DBA75C4F9AE02.roa (hash: rYc9zikfT0tRDa7zasMyBZpEVFa00oL4CS7Q4S+HlQg=)
                          3: E6C24E8669E011EFBD9DBA75C4F9AE02.roa (hash: 0DLMcfV/Llm+3fYXZIJn54Ysw/AzVCrvYXgQgG2YQmU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13419 (0x346b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D366E
        Validity
            Not Before: Mar 28 15:23:18 2025 GMT
            Not After : Apr  4 15:23:18 2025 GMT
        Subject: CN=67e6bee7-0e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:04:4c:a2:18:68:e7:6f:86:af:1a:01:54:a5:
                    89:9d:55:e7:41:31:8d:5b:5d:9a:b6:17:84:05:56:
                    d7:5b:5c:cd:57:4d:b8:94:7f:e9:26:24:75:9d:c5:
                    d6:07:0c:dc:31:f3:bd:37:75:e7:2d:2d:b3:86:eb:
                    ee:8c:af:3e:22:d6:8d:07:19:cf:7d:04:5b:90:08:
                    e0:0b:c1:ae:cd:16:cf:b8:cc:a0:f0:24:12:15:89:
                    65:40:32:27:81:fd:78:fd:a3:47:a9:69:5d:c3:9c:
                    9c:4a:11:85:77:17:b1:00:3b:7d:f1:2c:ba:0b:23:
                    0d:75:ce:5a:69:68:15:52:49:46:79:93:95:1b:85:
                    00:19:47:3c:e5:31:d0:ad:06:fd:b5:ae:9c:98:23:
                    ff:48:f0:fb:d1:65:a8:09:ad:20:66:1b:a2:41:da:
                    00:48:f1:15:8b:30:c8:34:ad:c1:07:5d:a5:13:b0:
                    a4:41:22:fa:20:d6:06:0e:01:2f:80:38:02:14:8c:
                    24:16:ac:30:85:4e:b6:e8:9e:d9:b3:f0:46:d0:94:
                    4b:89:c5:15:bd:ca:a1:ba:b6:42:99:71:dd:ff:04:
                    33:1f:e2:f3:b5:12:df:c1:32:d5:bc:a7:26:35:0d:
                    6e:03:a6:80:69:c9:df:e2:2d:0d:68:0d:d5:88:f7:
                    4c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FB:12:96:D1:9C:42:0A:22:46:16:F7:83:FA:6C:43:1F:71:F4:0D
            X509v3 Authority Key Identifier:
                keyid:49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:6f:6f:2d:b8:47:38:0b:c7:5d:86:94:41:10:2a:be:b8:81:
         ac:22:62:1e:7d:75:07:ab:8f:53:ba:9d:9d:91:75:fe:50:52:
         06:fa:68:37:01:88:49:2c:7e:89:b3:40:fb:0b:e9:4c:69:df:
         75:a8:ac:ce:ce:98:44:bf:77:e2:3c:cd:fb:51:c9:4c:e7:f0:
         a0:f8:78:22:46:8f:e2:8d:b0:f5:da:6b:1c:6f:5d:6a:80:fb:
         a3:37:4f:0b:a4:55:a5:3a:56:53:5e:b3:b5:41:97:b8:7d:61:
         a4:bd:f3:c2:00:15:8d:5e:02:d4:88:d6:43:1d:f7:0e:98:80:
         44:a8:27:3e:da:69:36:e2:28:0d:35:24:5a:c0:08:14:90:6a:
         f1:ba:3b:4c:56:f6:24:5b:d6:e8:bc:5c:e0:48:65:ee:b1:db:
         83:e2:11:37:6c:c7:59:11:41:67:e1:2d:82:9b:d5:87:16:99:
         9b:c4:39:0d:8a:56:73:16:51:43:7d:ad:27:0d:e1:9b:7b:f1:
         fc:ef:a6:04:05:0a:67:61:8e:e2:f2:b8:b3:28:e8:ae:bf:f7:
         4a:af:21:dd:87:2c:f1:ef:82:d9:6e:a4:ee:1f:a8:07:ef:17:
         fe:b8:86:dd:be:7c:ad:d4:93:b3:cf:f3:aa:bd:ab:79:ab:4e:
         f4:0b:19:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:56 2025 by rpki-client