Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
File:                     IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json)
Hash identifier:          /mF+FZHZvI17SEGwLkbwTTAQmEkJSuMuI7IbD0voDm4=
Subject key identifier:   35:22:10:CE:63:3F:5B:C3:D2:6A:9F:D3:E1:25:F4:77:D2:B4:D3:EA
Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42
Certificate issuer:       /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
Certificate serial:       10F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
Manifest number:          10CC
Signing time:             Fri 28 Mar 2025 17:26:38 +0000
Manifest this update:     Fri 28 Mar 2025 17:26:37 +0000
Manifest next update:     Fri 04 Apr 2025 17:26:37 +0000
Files and hashes:         1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: uQTbMYC9KN8l/2KH2tlKP3cOvbOmGrlBx1kxpNRW4j4=)
                          2: 13D21C6EFEBA11ED9D83553FC4F9AE02.roa (hash: r+D93hp7rhoCWl0RjXcOFWA7GJmeyzAs1dX6WsQydZM=)
                          3: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: tWTho3aXOfmUFjTTDFR6B98CoHeEv+Tq3wQD28el+4I=)
                          4: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: GqbKfXTNwN0SIpQjwmZy3ObDrSaqHo6sguNM1x2JWQA=)
                          5: 1856F8E8CCC411EFBDE7CF74C4F9AE02.roa (hash: Y01w5gm4XEkWiJJ++96hvfqzFt3ILa8sFuFGF5KXcKs=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4336 (0x10f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E57DC
        Validity
            Not Before: Mar 28 17:26:37 2025 GMT
            Not After : Apr  4 17:26:37 2025 GMT
        Subject: CN=67e6dbcd-7b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:25:3b:53:dc:06:e5:72:cd:b4:d8:86:82:61:
                    b6:ee:11:a8:80:55:30:48:b3:61:72:b0:72:8a:92:
                    64:d4:01:6c:21:3d:64:7a:f9:94:5f:81:5e:eb:e5:
                    4b:e5:82:a0:c9:6b:f9:97:bd:19:10:8f:b6:57:4e:
                    96:f8:3f:81:a6:1c:c0:fb:46:0c:bd:c4:a1:78:79:
                    e7:7e:7c:e2:ea:82:71:f6:a1:92:5b:02:f4:b8:4c:
                    21:c5:fc:b9:e4:e0:ed:86:f1:13:09:f6:ff:c1:bd:
                    a8:bf:28:61:3e:bb:78:96:de:73:1a:a6:f3:85:6c:
                    5a:47:c9:31:d9:c8:94:11:3b:8e:1a:6a:7f:d7:aa:
                    1b:26:6c:f5:5f:4c:0f:b7:67:16:34:7d:5e:35:bf:
                    7b:9d:c1:b5:43:9b:45:77:93:3c:26:e0:f7:cd:5d:
                    97:1a:36:e9:d9:7c:e0:d1:8f:d3:50:f2:43:65:1f:
                    84:7f:94:74:86:eb:05:2b:a8:86:81:70:66:13:fa:
                    3b:5c:3a:f2:95:98:47:f0:87:19:23:95:73:d6:03:
                    19:77:80:e4:5f:53:b8:8a:0f:c9:00:94:13:76:24:
                    b4:ec:f8:66:cc:be:2a:08:d8:7d:e6:42:72:7a:3f:
                    93:3a:16:6e:58:00:22:62:c6:8b:c6:73:a6:86:ac:
                    57:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:22:10:CE:63:3F:5B:C3:D2:6A:9F:D3:E1:25:F4:77:D2:B4:D3:EA
            X509v3 Authority Key Identifier:
                keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e2:db:69:53:80:a7:ff:0f:a5:b0:55:a6:b7:05:6f:9f:96:
         c9:7b:0c:eb:95:9f:cf:d6:bd:d0:3e:c5:10:a9:05:51:f6:38:
         95:d3:f8:04:1d:17:90:a6:8c:00:79:8e:36:16:0e:5e:3e:61:
         77:d7:e7:43:2f:15:ac:82:45:f5:09:37:d5:da:fe:a1:f5:fb:
         7a:0a:43:fc:08:86:4e:3b:54:d4:07:44:a1:dc:8e:0d:cd:7f:
         b5:df:04:ee:e6:15:b4:07:72:93:45:44:df:9d:f3:21:e6:f1:
         8c:71:ae:10:67:39:5a:ab:b5:3b:c6:37:d7:dc:bf:d0:2b:1f:
         67:4d:60:a0:18:54:38:f2:a7:33:58:ea:91:a5:36:68:4b:e1:
         f0:31:c3:fc:0e:7f:d0:0c:64:3b:3d:9f:e6:61:8d:e5:a9:eb:
         1b:78:86:3b:95:38:cc:71:aa:49:a9:70:96:42:37:4c:ad:f4:
         3f:fb:1d:c7:ca:61:53:3e:46:af:26:8e:e3:08:63:0f:02:59:
         04:f2:e4:ca:70:38:b7:c9:96:a9:11:b2:61:54:b2:0d:7e:61:
         21:58:f3:6e:e0:2b:78:d5:af:66:67:c8:56:d2:06:b7:58:2a:
         fc:01:4d:58:6d:cb:a6:35:73:cc:cb:45:55:78:cd:15:30:c2:
         26:e7:70:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:45 2025 by rpki-client