Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
File:                     JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft (raw, json)
Hash identifier:          o38/srvKe4ekgOincSPv8GlrsDMw5RHa8XgTAoj9SvE=
Subject key identifier:   C3:50:8E:84:C0:6C:0E:B0:D8:D1:07:BA:9C:73:B9:EA:68:9A:E4:57
Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
Certificate issuer:       /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Certificate serial:       1F64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
Manifest number:          1F19
Signing time:             Fri 28 Mar 2025 16:09:25 +0000
Manifest this update:     Fri 28 Mar 2025 16:09:25 +0000
Manifest next update:     Fri 04 Apr 2025 16:09:25 +0000
Files and hashes:         1: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl (hash: wxjeFQ1ff71z6jEwyy1dea2B6Qm38/cBHpcXu3pVcng=)
                          2: 5B425102C0E911EF978F1385C4F9AE02.roa (hash: k1pIrPdvh6z0dp5En85XqdbWfUA4ZO6tHmuvy2durEk=)
                          3: 51242EA0157A11EEBF2E043CC4F9AE02.roa (hash: gdgPydJrUkK8DpVlQ4wmxtIpuGhoHfbxVdF/ULwigco=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8036 (0x1f64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F731E
        Validity
            Not Before: Mar 28 16:09:25 2025 GMT
            Not After : Apr  4 16:09:25 2025 GMT
        Subject: CN=67e6c9b5-a6b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2d:b3:9d:7d:6a:65:6b:41:35:dc:a7:77:03:
                    c7:92:0f:fb:70:4e:09:66:61:1e:fb:63:a0:8a:93:
                    0a:6d:b3:99:93:c3:63:3c:03:2d:5a:7b:fc:80:f9:
                    6d:dc:13:39:33:13:52:b3:80:c2:48:b7:9c:08:d7:
                    05:13:9b:9c:71:4a:10:fa:1f:21:af:2e:93:de:f4:
                    00:c4:19:97:fe:3c:6c:68:ae:38:b2:77:23:5f:89:
                    c0:00:7f:1d:5c:0d:cf:eb:bf:c2:ef:e1:5e:b9:95:
                    8d:96:25:33:8c:af:ee:aa:5c:a4:1d:00:41:f2:f2:
                    4a:68:d3:4f:45:a0:c8:dc:12:d4:0b:46:ab:7a:4f:
                    94:61:84:82:c4:3a:31:27:c6:86:13:13:fa:13:a7:
                    c4:96:72:99:0f:92:2c:b8:7a:15:c0:c2:26:b2:0b:
                    f8:2b:3d:de:2c:72:ec:72:6c:d6:25:da:ee:c0:2a:
                    39:99:1d:15:67:cf:0f:89:27:bd:1d:2a:98:92:bd:
                    e5:84:6f:db:e8:fb:e6:b1:5b:3a:b7:a0:09:65:21:
                    b5:f5:cd:ad:6f:0c:fa:e0:c8:05:9e:4d:e2:9c:8b:
                    48:5a:fc:b8:4c:35:52:0d:51:81:6c:5f:bc:cd:c0:
                    89:5c:a0:be:20:c6:07:9d:34:99:09:8b:33:8c:06:
                    e3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:50:8E:84:C0:6C:0E:B0:D8:D1:07:BA:9C:73:B9:EA:68:9A:E4:57
            X509v3 Authority Key Identifier:
                keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:65:3e:2c:76:3e:47:e5:71:f8:5b:1f:00:06:09:90:aa:33:
         3e:16:16:5f:27:4f:90:be:be:d6:4d:10:3b:fb:78:c8:23:50:
         e4:71:73:46:19:e6:cc:0b:6a:bb:44:7e:a6:08:55:7c:9d:0b:
         d7:88:4d:94:b5:fa:cc:77:a0:7d:d5:d3:78:41:bd:4f:88:9f:
         53:5e:6a:07:3c:a5:6b:84:76:33:87:98:c6:7e:d9:30:1a:e3:
         e1:21:33:f3:97:37:28:73:1f:d6:e1:3a:43:7f:73:c0:16:40:
         83:44:fa:2d:55:46:16:84:00:c5:d6:99:7a:ec:f0:53:b7:1f:
         8c:25:a2:90:02:96:5e:ca:fb:bd:cf:9a:ee:13:ef:22:91:a6:
         b9:52:ff:01:8b:94:6d:5b:31:d9:b6:0d:e3:fa:b1:d2:eb:7d:
         b1:03:a8:15:98:6e:08:3a:dc:4c:91:da:32:1a:b3:7a:4c:d8:
         9e:09:a2:f9:d8:08:b3:c4:dd:c0:2b:cb:32:92:f2:59:71:e3:
         5f:a8:05:21:19:44:70:7c:c8:6d:c1:81:b3:f6:62:cf:7c:f1:
         e3:26:bf:1e:6c:29:7b:6c:85:3a:a9:98:50:04:50:0b:be:93:
         68:68:18:9a:41:2d:7d:c2:f6:62:8f:f8:71:c6:95:4b:b9:39:
         1f:bb:b8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:19 2025 by rpki-client