Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft
File:                     EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft (raw, json)
Hash identifier:          VU7UrfnpS+BxVq4N87G1klBFS6Wk9hGlY7ka/9D41+Q=
Subject key identifier:   BA:70:A9:74:93:41:98:BE:5E:2F:54:0D:1F:22:DA:A2:68:0A:22:BF
Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F
Certificate issuer:       /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
Certificate serial:       1511
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft
Manifest number:          14DA
Signing time:             Fri 28 Mar 2025 16:57:54 +0000
Manifest this update:     Fri 28 Mar 2025 16:57:54 +0000
Manifest next update:     Fri 04 Apr 2025 16:57:54 +0000
Files and hashes:         1: EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl (hash: 0BJ8lKOS8NEwsnURzsZGYlLkZH7kivmqCWQOfioVVaM=)
                          2: F99707CEBAC511E9A77CDE7BC4F9AE02.roa (hash: iZLozjkQrVx5Rip88rCFEDljYu/qf4k+eN+MjfIimJg=)
                          3: E7084A18E1FF11ED8291C918C4F9AE02.roa (hash: 22WycCO2D6eQ7c9Ztptk+GoHCg5R5HirhILZQLigfu4=)
                          4: E80E94F8E1FF11ED8291C918C4F9AE02.roa (hash: kECSc2k2CaiRsvSFGXMs8HjoZv1f2IbszM5+85kIArk=)
                          5: 065737305C9511EDABB9FA49C4F9AE02.roa (hash: A8fyC9uXabeEBw+br5m/fOOprlHijT/2fFIlwKoMBqg=)
                          6: E5E5AB76E1FF11ED8291C918C4F9AE02.roa (hash: CiXjYFbJpNi1ITHCA0SILZGRQg5iqEkM1Bq1AJzf7WQ=)
                          7: E4C72AB2E1FF11ED8291C918C4F9AE02.roa (hash: w7JrosLb1zf7bhUbagql/3rcPRQ0GPFS/s48tA3r0tk=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5393 (0x1511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59FC
        Validity
            Not Before: Mar 28 16:57:54 2025 GMT
            Not After : Apr  4 16:57:54 2025 GMT
        Subject: CN=67e6d512-e966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:58:60:e0:d9:17:ba:cb:fd:c8:14:b2:21:
                    e8:5a:48:fa:61:d6:fb:b0:c9:7a:5e:34:fd:27:68:
                    9e:aa:b9:9e:ce:17:f5:32:70:b1:5d:6b:e6:36:54:
                    14:81:e6:bd:69:89:42:22:10:30:66:31:80:f6:e4:
                    ed:cc:74:5d:57:29:1a:8b:d1:a4:84:0c:83:23:b3:
                    3e:dd:54:66:4f:12:b1:14:6e:64:c2:38:bc:9b:00:
                    da:5e:f3:dd:f4:40:94:bd:22:ef:c4:88:ec:bf:54:
                    4a:ad:bb:e3:c8:f0:29:2b:78:02:16:a8:b0:8f:7f:
                    6a:40:3c:7c:0a:9f:6f:fd:d5:40:5d:c2:08:c8:ca:
                    06:35:b8:82:a1:77:81:6f:58:a9:b4:85:e7:f0:23:
                    04:d0:8d:c2:c0:1b:ca:f4:5f:ed:57:16:33:fa:16:
                    a8:6f:4f:9c:a2:31:91:ef:c0:1b:7c:47:3a:89:d9:
                    6b:49:c6:ea:51:7c:38:26:cb:7d:a9:4d:63:5f:67:
                    09:93:43:1f:ad:a8:0b:96:2f:9a:da:6b:99:d5:5f:
                    f2:4c:ee:4e:d0:07:0a:97:4d:1a:ba:8f:1e:e9:7f:
                    d5:2c:55:53:3d:5e:a4:f3:bf:aa:8b:63:d1:ec:cf:
                    65:d5:8e:a3:39:39:73:b6:8c:a7:e8:a8:57:18:e2:
                    e6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:70:A9:74:93:41:98:BE:5E:2F:54:0D:1F:22:DA:A2:68:0A:22:BF
            X509v3 Authority Key Identifier:
                keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:34:ef:be:2d:1d:c4:9d:91:48:c3:9f:03:54:c9:3e:e5:c1:
         5c:52:ea:6f:29:e7:4d:b6:8d:55:28:ec:be:f2:a6:e7:ff:e9:
         00:e2:ae:74:f5:15:46:e0:90:3c:ab:f1:3d:4c:47:aa:78:33:
         c6:d5:8a:ea:4e:d4:44:6e:92:91:c3:b1:da:34:df:90:08:d2:
         ef:87:18:5b:ad:62:b8:6f:ed:b3:7f:69:a5:11:ad:03:ae:98:
         65:59:68:5d:05:66:35:d4:b9:aa:e9:76:9c:ce:a9:e6:7d:0a:
         4b:1d:b1:4e:09:84:a1:09:3e:67:6d:99:e8:6b:9a:a8:c6:f3:
         c0:29:4f:c8:70:c2:eb:3a:cc:bf:20:d7:8b:6f:8d:1b:72:29:
         79:db:1d:7f:33:b5:d4:f8:50:11:91:b8:8c:80:3c:27:7f:c4:
         a3:f8:1d:e6:13:8f:2c:d7:a1:d6:2b:fd:52:cd:5f:64:28:05:
         b9:58:b5:da:cb:a4:dd:64:3d:7a:85:99:dc:8a:46:95:2a:f2:
         3d:09:b9:8b:b8:a3:0b:3c:29:c2:83:c5:92:bd:b1:a7:24:fc:
         88:68:2f:ae:7f:54:27:a9:ef:b3:64:02:47:55:80:98:87:5e:
         ca:9f:9a:35:e7:4d:8d:58:3d:70:ad:74:39:19:d5:03:37:f5:
         93:16:02:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----