Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft
File:                     q6TDlMi5vRUbOziWObjG_4BwSfI.mft (raw, json)
Hash identifier:          ZNt62NAPbtmqdINrm4Drp8cH8dolnIQ7xQIyf3BU810=
Subject key identifier:   B0:FA:69:49:E7:39:27:36:12:7F:2B:98:13:F8:A7:1C:3C:2B:2D:25
Authority key identifier: AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2
Certificate issuer:       /CN=A91F77FC/serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2
Certificate serial:       0DDE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft
Manifest number:          0DD6
Signing time:             Fri 28 Mar 2025 18:01:19 +0000
Manifest this update:     Fri 28 Mar 2025 18:01:19 +0000
Manifest next update:     Fri 04 Apr 2025 18:01:19 +0000
Files and hashes:         1: q6TDlMi5vRUbOziWObjG_4BwSfI.crl (hash: uDKaHi9MPd0ql875tgMrbz2qni/7ZN87DQGHERuIwmg=)
                          2: 70783ACCAF3411E99DF2F83EC4F9AE02.roa (hash: T9i0DKwHASY+s6SnXICLRaNhTKqbk+FbtGkLEMvl4c4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3550 (0xdde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F77FC
        Validity
            Not Before: Mar 28 18:01:19 2025 GMT
            Not After : Apr  4 18:01:19 2025 GMT
        Subject: CN=67e6e3ef-93b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:30:23:8a:a7:1a:e2:34:54:30:8d:68:61:32:
                    86:82:86:06:8b:c9:a1:91:14:7e:4e:89:1c:d2:01:
                    50:37:63:3a:50:5c:6e:d6:7e:ba:2f:64:de:f0:6c:
                    98:5f:03:7b:d3:48:c9:55:0e:28:42:bc:aa:e1:5a:
                    9e:47:9b:be:a6:e7:10:fc:1c:76:f6:08:a0:6f:20:
                    5f:43:5d:06:71:d3:c9:5f:89:4a:4f:ed:11:67:a8:
                    36:87:6e:9b:13:77:a9:a4:d0:5a:44:a8:59:f3:ff:
                    f2:d8:c2:62:ac:b3:25:5d:2d:21:f8:52:c1:c6:99:
                    2a:b2:99:11:1d:cd:1c:54:e6:26:57:7e:86:64:2a:
                    50:7f:be:5c:2f:b2:5c:4e:0a:ae:83:5a:ca:4b:93:
                    38:04:cf:fb:54:7a:f1:0e:8d:e1:f9:cf:76:d0:18:
                    e7:3e:b6:41:2c:3a:61:a5:7e:17:9f:b2:d6:53:aa:
                    4b:89:f5:a7:b7:9a:fd:59:bb:d6:87:82:71:da:bb:
                    f2:77:70:d8:7b:b4:ac:a2:bb:28:fe:0b:39:c9:be:
                    e5:3c:ba:d7:f8:42:03:3f:a7:f5:2c:60:79:03:6a:
                    63:74:82:3a:ea:56:81:cb:5d:27:d9:f5:2b:59:28:
                    70:c2:55:35:bd:30:84:26:3d:cd:fa:31:1b:91:71:
                    19:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FA:69:49:E7:39:27:36:12:7F:2B:98:13:F8:A7:1C:3C:2B:2D:25
            X509v3 Authority Key Identifier:
                keyid:AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:76:5d:24:57:e7:f7:0a:93:08:77:90:69:e2:81:f7:46:99:
         19:84:36:3e:d1:06:a8:45:cc:37:85:47:58:bb:c6:3d:0e:9a:
         b8:ac:c0:6a:4a:42:b9:8e:4f:ff:25:f2:79:7c:d0:fb:76:af:
         62:24:71:44:91:b0:8f:b6:8e:b9:54:dc:4d:86:16:c1:85:d1:
         94:13:8b:1d:fa:be:f1:f5:34:d6:78:bb:b9:c3:3b:23:aa:33:
         45:3d:6f:8a:72:1a:6b:13:99:4c:70:0d:e4:74:5c:b3:ec:67:
         aa:6e:f1:1c:f4:12:f9:dd:f5:36:e1:a6:7f:5a:ce:e6:b1:b6:
         23:02:88:fe:c2:60:2a:72:77:c7:9d:d6:fb:09:ea:5c:56:60:
         5a:f1:0c:ed:42:41:60:d0:30:8c:09:b5:1f:bb:55:05:5c:06:
         76:d1:14:a5:e3:87:5a:d9:99:79:32:f5:04:90:9c:53:8b:3c:
         60:4f:03:26:3b:18:39:f7:dd:27:86:6c:cf:27:19:39:36:4a:
         71:8f:5c:0c:01:92:f6:a9:b4:51:03:a3:1b:39:c4:66:af:b3:
         85:90:bb:cc:b9:0c:13:06:e2:b1:2c:98:00:39:b9:26:9e:36:
         b4:86:08:46:9d:ca:1d:7c:9b:df:89:10:d6:0b:7d:68:4a:e6:
         d7:3c:a7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----