Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
File:                     5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft (raw, json)
Hash identifier:          A2fl2TxdI2c+8i9xNsjlPBjycwGcVgHUk0Ug9WRjVUU=
Subject key identifier:   80:1C:DF:E3:DF:F4:63:7B:DC:D4:DB:D6:6E:99:4A:5A:31:7F:81:FD
Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30
Certificate issuer:       /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930
Certificate serial:       3499
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
Manifest number:          3479
Signing time:             Fri 28 Mar 2025 15:11:13 +0000
Manifest this update:     Fri 28 Mar 2025 15:11:12 +0000
Manifest next update:     Fri 04 Apr 2025 15:11:12 +0000
Files and hashes:         1: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl (hash: RNq2N3QHjoryUkLA12wbNbevSlYfWjXxbgXne+9RHqc=)
                          2: 32DFCCDCEB8011EAAB806163C4F9AE02.roa (hash: d8SyVppxPlIuR4fpNFIkYTURn6Yx4CMf1TSPHGG+TtY=)
                          3: 9A4EE834EB8111EA87E2C165C4F9AE02.roa (hash: 2HjZqBm6c0Bz0zik/PCkuHSNvhZSOIqG0dnIWyE0YeQ=)
                          4: FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa (hash: EbIaf/1Sy/3aBx9khl+6A1cQZxzTMmTyasNR7QqdjR8=)
                          5: 60DA0694D9E111EA82120960C4F9AE02.roa (hash: 0RxGIy0cRn46gMQ4a+LKJK3dXVABCl5t2jG6UZ82riU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13465 (0x3499)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEEB8
        Validity
            Not Before: Mar 28 15:11:12 2025 GMT
            Not After : Apr  4 15:11:12 2025 GMT
        Subject: CN=67e6bc10-38d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bb:e1:cd:ad:48:3b:2f:e0:e5:50:15:f7:69:
                    a8:57:35:2e:3e:04:f6:fd:2a:8e:9d:ed:27:8a:b1:
                    60:67:cd:71:cf:db:94:89:14:7f:28:dc:b0:2a:da:
                    a9:a5:9c:09:d5:db:ae:b6:79:22:f0:47:6c:16:10:
                    46:06:4c:30:5f:d6:a9:5d:2e:83:b6:4c:cc:80:1a:
                    85:63:25:8c:93:49:01:af:d5:34:ec:25:6f:db:02:
                    ff:91:cf:e9:5c:0d:37:19:ac:39:c3:5c:0f:de:d9:
                    7d:59:0f:ce:e6:5e:ad:4e:e0:24:d8:23:08:9e:71:
                    49:50:1f:ba:f9:3b:70:38:60:0e:6d:e9:e6:5a:52:
                    7e:f7:bf:93:32:b5:3d:e1:36:6b:06:ba:45:d4:39:
                    03:fd:b4:5b:51:cf:57:f0:59:8e:13:fa:d7:bd:32:
                    d5:58:e0:a2:4e:26:b0:9f:cf:62:36:35:80:ae:c5:
                    66:41:87:6c:68:3e:d6:df:8a:e7:cc:9f:3e:b0:61:
                    7b:a5:2d:03:38:3b:0c:3d:4f:7a:dc:0d:86:4a:94:
                    fe:ae:9a:e7:43:dd:d0:32:e0:1e:df:bf:a4:a0:9a:
                    77:b0:86:9b:31:2c:36:10:ea:93:b8:53:e1:7b:ed:
                    3b:4d:f2:59:9f:59:87:2b:8b:12:1f:f9:b1:3e:30:
                    43:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1C:DF:E3:DF:F4:63:7B:DC:D4:DB:D6:6E:99:4A:5A:31:7F:81:FD
            X509v3 Authority Key Identifier:
                keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:92:88:25:d2:2d:3e:36:36:b4:09:04:db:e6:9a:0a:5a:59:
         0e:8c:ba:c2:be:8c:7c:00:d9:52:ca:81:8f:f1:aa:1d:ae:4c:
         ce:e4:e0:92:35:be:ac:c7:78:36:11:83:aa:00:46:af:30:af:
         37:ef:a1:3e:26:2c:6f:e4:97:5e:42:9c:27:d6:94:c7:60:ab:
         4e:5c:1f:21:ba:b0:e1:40:fe:4c:a3:89:84:7e:74:11:c2:74:
         37:62:ff:95:06:c2:43:85:ba:29:e3:2d:c2:ce:52:2d:9d:88:
         f3:bb:c3:7b:73:ec:f1:81:b5:49:10:37:8a:b8:f4:7a:34:e6:
         ca:d9:4c:1d:54:f2:23:70:6a:ff:73:3a:dd:c6:d8:b7:16:ee:
         96:15:8c:5e:73:d4:c8:5b:31:1c:5a:65:2c:6f:11:16:09:20:
         b5:9a:6c:fd:2e:b1:80:09:61:d0:23:3c:7a:8d:ca:17:29:0d:
         a4:5e:ba:88:0f:c4:81:d8:7d:a3:cc:47:9f:47:65:34:00:56:
         f4:18:7d:9c:e6:43:f2:fa:71:ec:d5:7e:3f:ac:96:1e:6a:79:
         ad:55:a2:e3:25:93:28:bc:4e:11:2b:2f:f9:b4:c9:5b:63:2e:
         8e:d3:03:f2:5b:59:5f:3f:bb:c6:58:09:88:10:2a:f5:3d:a9:
         d0:e5:d2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----