Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft
File:                     62gLfeTEobRDq9eZuvUkndSw6pA.mft (raw, json)
Hash identifier:          UAxrSHNnLkCX3iIduVq+sOYE3KdvrApd5GoU3Gf02jY=
Subject key identifier:   2A:BF:C3:83:B2:3B:E7:21:E1:E4:2C:CF:7A:FE:55:E3:D2:3A:9B:25
Authority key identifier: EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90
Certificate issuer:       /CN=A91DC866/serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90
Certificate serial:       348B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft
Manifest number:          3479
Signing time:             Fri 28 Mar 2025 14:53:29 +0000
Manifest this update:     Fri 28 Mar 2025 14:53:28 +0000
Manifest next update:     Fri 04 Apr 2025 14:53:28 +0000
Files and hashes:         1: 62gLfeTEobRDq9eZuvUkndSw6pA.crl (hash: 98vRORGJ2HdWcldcduJMd4gytZUgW7u5smd5+QiARgM=)
                          2: D55D2990561F11E7B9B5FB2CC4F9AE02.roa (hash: 6l+okkOVayeN3r7Oa8ISbsZRxypv5sX/p1C5qPHUzI4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13451 (0x348b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC866
        Validity
            Not Before: Mar 28 14:53:28 2025 GMT
            Not After : Apr  4 14:53:28 2025 GMT
        Subject: CN=67e6b7e8-25d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:16:92:99:b4:e3:fd:31:fa:e8:7d:6e:c5:
                    6e:c3:ef:d7:5d:8b:4c:1b:06:46:8d:8c:16:f9:d5:
                    ab:11:01:a7:d7:5e:2e:63:da:55:7b:be:a4:b0:70:
                    30:0f:58:18:7f:b3:ce:24:de:9f:1f:b6:46:80:5d:
                    4d:08:7c:c7:4f:9f:7e:49:f5:5e:ca:c3:ac:c8:f2:
                    c2:50:0d:ff:38:1f:0a:ec:e8:d2:27:e1:94:66:fc:
                    08:44:1e:be:71:9c:b9:b0:70:70:b8:4b:30:de:5c:
                    fa:8f:7d:fd:60:d0:c7:a4:d5:e9:b7:3a:d9:41:cc:
                    4c:53:7c:55:41:81:83:72:88:f8:3f:17:1e:1e:30:
                    17:e1:b8:61:e9:1f:b6:77:d4:56:66:e6:10:bf:1e:
                    7f:6e:45:38:b6:54:30:2b:fd:a9:35:8d:6a:77:71:
                    39:3d:6e:2a:85:ca:a4:52:79:6b:50:25:2d:35:10:
                    1c:a2:21:29:4c:fc:5c:88:c3:5f:40:e1:1a:da:88:
                    26:bf:11:97:b9:31:33:ab:2d:60:e2:c9:64:cc:15:
                    28:e8:e5:a2:70:40:28:75:c3:ee:f1:4c:27:dd:d2:
                    95:8a:38:83:bd:d0:4d:e4:c8:d2:9d:93:25:07:fc:
                    06:d2:a5:f5:20:83:0a:68:2f:60:c9:49:74:6c:1a:
                    f3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BF:C3:83:B2:3B:E7:21:E1:E4:2C:CF:7A:FE:55:E3:D2:3A:9B:25
            X509v3 Authority Key Identifier:
                keyid:EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:00:6e:98:c5:b2:a8:4b:7a:dc:62:0f:8d:8f:f4:86:3e:f4:
         71:b8:dc:6f:86:33:c8:23:d6:61:4c:88:b2:82:17:a0:29:be:
         17:94:8d:a8:3f:12:4b:97:1a:77:1b:f1:02:96:c5:ea:f5:e8:
         29:22:ef:52:88:b1:8c:b4:12:41:ac:6f:10:e3:09:02:98:bf:
         6c:af:38:43:c3:7b:0d:a0:f6:75:67:34:ba:28:78:9e:53:82:
         94:8e:37:f9:21:70:6a:bc:3e:c6:63:8f:14:47:71:33:a8:43:
         cb:9a:2d:1d:22:91:e3:a8:20:f0:da:a8:d0:c6:06:72:ec:de:
         de:3b:62:a3:9e:03:51:9e:0c:75:5b:8d:2d:84:fb:25:26:bb:
         18:a9:e8:24:bd:a7:4c:3e:b5:8c:bb:7c:26:fc:0f:3a:66:06:
         ed:76:35:99:21:99:dd:8e:11:c3:5a:8d:b5:96:91:59:04:93:
         77:64:fd:58:ec:f7:af:48:1c:96:7a:ec:dc:cb:0d:13:37:87:
         c1:c9:97:d0:9d:a0:ac:5d:30:0c:da:35:e5:4a:1f:25:bf:bc:
         69:88:1f:c1:e5:61:df:b3:3d:61:fc:80:a8:db:3a:bc:b5:c2:
         7a:d8:45:48:2d:1e:8d:19:2d:1c:d0:2a:75:28:4d:c0:fd:17:
         01:cf:73:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----