Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
File:                     TvlHO1VK4acroJgf_v4Tji1IDsw.mft (raw, json)
Hash identifier:          okgs/8Fi5VDLbKZJvScJYjs+6LwdRdu12ZtgED+IeIw=
Subject key identifier:   DD:12:D9:9F:AD:A4:25:0F:93:60:3F:D2:2E:18:2A:9B:A3:24:8E:E6
Authority key identifier: 4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC
Certificate issuer:       /CN=A91DB4C3/serialNumber=4EF9473B554AE1A72BA0981FFEFE138E2D480ECC
Certificate serial:       0933
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
Manifest number:          092B
Signing time:             Fri 28 Mar 2025 20:33:11 +0000
Manifest this update:     Fri 28 Mar 2025 20:33:11 +0000
Manifest next update:     Fri 04 Apr 2025 20:33:11 +0000
Files and hashes:         1: TvlHO1VK4acroJgf_v4Tji1IDsw.crl (hash: m90itFeC0yOEsKCNck8qDpePaYT+qStkuODu5p/OpPI=)
                          2: E32E2F000EE811EE90BBC818C4F9AE02.roa (hash: rZTxgnVXWMDQsg0oTYE7f4kyKGpDxh1zgyaFzYbZkqY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2355 (0x933)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB4C3
        Validity
            Not Before: Mar 28 20:33:11 2025 GMT
            Not After : Apr  4 20:33:11 2025 GMT
        Subject: CN=67e70787-48c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:4d:d0:7c:3f:f1:52:ec:f9:62:69:49:98:
                    bb:fe:0c:3f:8f:4e:f5:7e:6a:41:63:82:c1:78:3e:
                    21:a7:24:bc:85:bb:7c:5d:58:3c:ca:01:1d:c0:ed:
                    cf:a3:a9:b7:fd:66:8a:40:70:c3:b0:df:7d:34:9e:
                    f7:6c:9a:11:63:1a:b9:5d:ab:26:5e:a4:38:7e:c7:
                    e8:97:6e:2f:8c:6a:12:a0:7d:8e:20:5b:35:c6:f7:
                    5f:49:b9:24:1b:4b:2e:18:1c:4c:2c:df:b4:9c:83:
                    27:0f:da:f4:f1:27:d4:d1:a3:9d:cc:36:06:c3:64:
                    02:81:cf:01:52:02:2a:53:ee:3f:37:e4:ed:44:ab:
                    08:76:bd:9c:1a:32:b2:51:91:0c:2d:45:08:6e:0e:
                    7c:87:ab:a9:40:c9:47:14:5c:60:02:1e:f6:dd:2f:
                    33:6b:d8:5a:3a:4e:82:74:e1:80:d1:15:d7:bb:ef:
                    d2:3c:40:3b:76:23:3e:05:98:12:5d:0b:07:00:63:
                    7b:31:b2:c7:9d:4c:0b:59:9a:9f:06:f4:1c:4f:63:
                    42:1e:0d:da:e2:97:cb:6c:3a:1c:67:cf:8f:11:cc:
                    f6:61:1e:cd:39:ef:1e:fa:65:92:46:67:ff:16:93:
                    24:d3:5d:95:5b:20:ba:85:a5:bf:05:ea:8b:96:20:
                    5c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:12:D9:9F:AD:A4:25:0F:93:60:3F:D2:2E:18:2A:9B:A3:24:8E:E6
            X509v3 Authority Key Identifier:
                keyid:4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:5a:82:b4:92:54:5d:7c:fa:da:d1:57:30:94:a1:0b:51:95:
         8f:5c:1e:d6:e9:fd:d5:0e:18:9d:d0:be:72:d8:b6:b9:3b:49:
         2b:c7:b3:22:41:4e:85:db:50:98:07:04:09:95:9d:c9:db:ad:
         c5:ca:49:35:cf:26:e9:5f:42:cc:e4:4e:bd:8c:44:ec:29:75:
         86:e6:2f:e6:68:1b:7e:10:8b:c2:45:86:2c:6d:21:b0:d6:fa:
         9b:13:5d:a8:ef:39:b0:b8:2f:eb:33:19:45:1e:a3:44:21:5d:
         76:2f:34:61:7d:65:c1:45:3e:36:ad:8e:97:9b:f7:36:f4:ba:
         8c:fb:3c:59:fe:53:28:c3:3b:43:fc:f8:1a:25:a6:79:c3:79:
         a8:8a:5c:8d:63:3b:0b:3c:56:75:43:be:a3:1e:65:ac:9b:ec:
         21:0d:03:ce:e8:58:98:4f:f2:9f:48:45:1a:c6:ba:87:de:97:
         e6:b1:74:4d:cd:3f:b9:09:79:83:61:c0:71:df:05:4b:9d:0c:
         25:a7:e2:9a:8e:a4:16:d2:68:7d:3e:9b:9a:60:59:9e:8f:a3:
         0a:4b:1f:f2:fa:0a:ab:fb:09:11:84:46:2a:f5:cd:fc:c1:2e:
         5b:5c:f4:30:cf:da:c3:a8:95:20:d7:41:c7:06:84:d8:d6:00:
         86:a9:7a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----