Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft
File:                     D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft (raw, json)
Hash identifier:          vgQSn6R8r9NhGi8jOys2iUT6qj4oUfmorwz5fY3MdVc=
Subject key identifier:   01:0C:6D:E5:E9:35:25:E4:D2:32:63:2E:A2:2F:FC:80:CE:9E:2A:98
Authority key identifier: D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40
Certificate issuer:       /CN=A91E54810000/serialNumber=D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940
Certificate serial:       2FB4226D093264E876825010CF16D2C6ACC869CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft
Manifest number:          02DA
Signing time:             Thu 27 Feb 2025 20:34:59 +0000
Manifest this update:     Thu 27 Feb 2025 20:29:59 +0000
Manifest next update:     Fri 28 Feb 2025 22:36:59 +0000
Files and hashes:         1: D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl (hash: j8kkyTQXiNGglmP/gBU/3LrFqnyBmG9Um75PYDMma3g=)
                          2: 3130332e3137332e3232352e302f32342d3234203d3e203538333439.roa (hash: VdYrRIXaalZFja4r2vfmeQxVdjoRkrrMoFXlD0zUnkk=)
                          3: 3130332e3137332e3232342e302f32342d3234203d3e20333938373034.roa (hash: NOGiiY918DvBlQquMQqchM/2tk+zFTCvEUe0hw6M5FA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b4:22:6d:09:32:64:e8:76:82:50:10:cf:16:d2:c6:ac:c8:69:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E54810000
        Validity
            Not Before: Feb 27 20:29:59 2025 GMT
            Not After : Feb 28 22:36:59 2025 GMT
        Subject: CN=010C6DE5E93525E4D232632EA22FFC80CE9E2A98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:21:37:67:49:1a:2a:6e:f0:47:47:f8:25:
                    a5:d4:46:65:16:22:af:b1:b1:2b:22:98:cf:e1:7c:
                    87:32:fd:6e:5b:8b:3f:10:1c:94:5e:b6:9d:23:a6:
                    34:f3:de:8d:c6:6a:8f:96:d9:ee:18:51:f4:07:73:
                    f1:fd:41:c9:66:51:da:f0:ff:58:bb:56:c7:44:8b:
                    bb:d5:47:41:30:ca:d9:fa:08:06:85:d4:03:50:31:
                    6b:c8:41:c2:56:f2:3e:4a:54:53:79:12:56:75:7f:
                    ff:be:c2:c3:e8:42:98:3c:3d:5a:41:f6:d3:f0:dd:
                    fd:3e:e4:74:f6:58:0a:72:ff:81:c0:8e:a7:98:ec:
                    b2:8e:04:9d:2d:ac:c4:9d:88:12:f9:e9:b0:3d:80:
                    d5:6d:52:d3:3c:f2:ea:c0:b4:b4:cc:af:d4:dc:9b:
                    6a:7e:05:15:bd:3b:15:74:7c:0d:18:6f:d7:81:2b:
                    62:b3:bd:f9:76:98:16:93:f5:e6:f5:5d:1c:cb:0d:
                    a3:56:3b:6e:37:d1:01:c6:3e:03:fb:6d:cd:c8:8a:
                    24:65:5b:49:de:0f:4d:60:45:3c:11:f0:c1:6e:75:
                    63:90:96:5e:e5:8f:5d:13:62:42:9e:57:0a:b5:fd:
                    79:d0:a6:de:d1:c3:e0:65:1a:80:f5:75:29:0d:fd:
                    e2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0C:6D:E5:E9:35:25:E4:D2:32:63:2E:A2:2F:FC:80:CE:9E:2A:98
            X509v3 Authority Key Identifier:
                keyid:D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:45:ce:17:12:24:e0:39:8e:df:7e:bb:b4:af:1d:4c:e3:0d:
         45:99:9d:e8:7a:f1:ed:ac:79:5a:99:c0:5f:ec:ee:c7:e3:8c:
         80:0e:c2:8d:0a:d4:e8:75:4a:4c:de:3c:45:36:aa:6a:2f:27:
         cc:43:c2:65:ee:cf:62:6d:86:00:c7:5c:41:45:6d:ec:8b:62:
         ff:bf:e7:43:83:2b:f9:32:da:24:30:2d:69:df:75:90:eb:e1:
         92:21:a0:42:5d:a8:1c:9f:84:48:7e:20:01:50:d9:c7:a5:3e:
         d1:9b:21:7d:e5:fb:1e:6e:d2:6a:8e:18:18:e4:01:5d:8d:b4:
         a4:4c:ca:b7:ab:e9:bd:3f:0f:3e:b4:d4:9d:42:10:76:0d:82:
         e2:61:d6:d5:3f:e6:1d:e8:86:33:89:3d:0b:9b:7a:06:3b:94:
         59:dc:b1:1b:8d:62:20:43:7c:22:35:10:2b:c2:c4:41:29:7f:
         dc:0d:3a:d1:5e:a0:c0:eb:bd:8c:9b:99:ea:09:cd:6b:41:78:
         a8:64:a1:74:ef:7c:f7:45:7a:07:96:a9:f7:1b:5c:28:d6:06:
         7a:eb:aa:f7:f9:29:84:81:16:43:f6:c9:d1:91:89:5c:83:5c:
         37:e1:d8:f0:5c:0f:a2:6c:32:96:d3:9c:d9:ed:47:d0:87:4c:
         b4:42:a3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----