Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft
File:                     PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json)
Hash identifier:          NBadvhP+DjW0Ew1jEVd1KZo6cW8gfqsVD6NCZg3KIxc=
Subject key identifier:   2E:C5:2D:14:80:F9:C3:B2:20:55:3C:B3:3B:14:51:FD:25:66:24:BD
Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72
Certificate issuer:       /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft
Manifest number:          E8
Signing time:             Sat 29 Mar 2025 04:49:49 +0000
Manifest this update:     Sat 29 Mar 2025 04:49:49 +0000
Manifest next update:     Sat 05 Apr 2025 04:49:49 +0000
Files and hashes:         1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: 4CgRmnlZWp4YdYrgMOeK/mzPG73QgpX8OIjxlrGrX/A=)
                          2: 78321A66068D11EF92608943C4F9AE02.roa (hash: blVnz565/hVxOKVO1xLhYGke1dIuGSft6BcnljQwFaw=)
                          3: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: mLl/OI3EV7/JM4Fr1G9RnDxTwZqnfUJgsg+LaOLb7Wc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172BD3
        Validity
            Not Before: Mar 29 04:49:49 2025 GMT
            Not After : Apr  5 04:49:49 2025 GMT
        Subject: CN=67e77bed-5d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:17:37:2c:7a:b6:da:f2:cb:e8:50:52:97:b3:
                    0e:11:2b:9f:13:22:cd:34:6d:90:7d:81:88:9c:39:
                    54:fb:80:36:93:50:b5:63:f2:e3:5d:5d:9b:f4:c6:
                    cd:83:1a:72:bb:4a:01:c2:45:fa:45:d3:e1:a5:91:
                    4b:1e:74:86:48:ca:c7:11:6c:14:e6:17:c8:ba:dc:
                    4a:17:cc:29:ab:b0:ec:9a:f3:9b:c0:31:b5:40:d8:
                    21:22:af:85:52:2e:68:21:8a:dc:1a:95:e5:32:ca:
                    c4:f8:13:33:e1:b5:cf:a6:bd:19:ab:44:44:67:04:
                    6e:7f:a5:04:7e:ff:2d:6a:8f:8d:a1:2b:35:14:bd:
                    23:a8:85:39:0d:2d:64:30:d4:10:94:59:82:e0:13:
                    0e:d0:54:77:92:25:f3:4b:54:c9:0a:e0:b1:d1:74:
                    dc:da:cc:1a:63:6d:45:84:e9:0c:b8:d3:08:03:0d:
                    fc:e9:64:30:69:58:51:79:8a:0b:4c:d7:d2:c1:62:
                    7c:1c:ce:2c:02:56:61:c2:a0:18:9d:e6:a9:ff:cd:
                    27:c3:16:4e:93:84:f5:e3:77:a6:3e:44:d8:06:1f:
                    88:54:82:a5:42:42:2b:3d:68:83:69:0e:87:f8:e9:
                    a5:6c:bb:bb:c3:93:48:ad:12:6c:ae:08:53:cd:4a:
                    48:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C5:2D:14:80:F9:C3:B2:20:55:3C:B3:3B:14:51:FD:25:66:24:BD
            X509v3 Authority Key Identifier:
                keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:d2:52:b5:d0:48:ff:a9:a2:98:30:5d:d8:cf:19:ef:c7:a0:
         10:6e:7c:fe:8e:dc:97:b2:b7:bd:27:76:47:82:9b:1b:bf:7c:
         3d:1d:d7:43:2d:fa:cb:9c:ee:91:49:9b:c7:6f:76:8e:1f:8d:
         67:04:c5:b9:d3:31:e8:87:f1:6b:4b:c9:43:ed:52:6a:6b:a0:
         b4:60:bd:b8:4c:83:3d:46:f3:48:99:1e:e6:27:b9:b1:a7:4d:
         5c:79:c8:1c:b4:47:4b:46:c8:16:5c:ec:f4:72:42:34:53:d3:
         62:9e:2b:0e:06:db:75:50:45:e8:8b:d6:6a:c8:c4:24:c8:3b:
         5e:2c:37:20:68:42:bf:18:41:1f:30:cf:0a:1d:00:80:ea:20:
         ba:6b:0f:5b:17:20:0e:c9:3d:11:09:79:40:68:c2:e5:6c:73:
         03:56:b1:49:e2:00:0f:4b:45:3c:d8:6b:e5:4d:e6:35:01:74:
         20:5c:f9:b2:71:4b:65:c5:02:ad:f5:50:e8:7b:11:f8:9a:02:
         31:4a:45:22:28:b2:37:43:50:f1:68:16:54:4e:72:5a:86:37:
         ef:c0:07:a0:8f:4b:a7:8a:73:70:07:99:8e:ea:8f:e7:d4:77:
         24:8b:15:05:87:bf:10:e5:30:24:68:8f:07:67:d5:cf:ae:37:
         f0:00:99:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----