Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
File:                     30356EF46D594DA57C7697011183ACFFE04613E0.mft (raw, json)
Hash identifier:          Lb93BjYCCoqDUYRoeipioC6K6xxg2Koghqh/IPThaVI=
Subject key identifier:   18:A7:17:BF:53:B3:60:EB:92:91:C0:E6:79:A3:2C:76:FF:C1:EC:89
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Certificate issuer:       /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial:       5C1458E2B9235E25DF55E6D01D313E8039BC4DAE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
Manifest number:          0640
Signing time:             Fri 23 May 2025 02:43:05 +0000
Manifest this update:     Fri 23 May 2025 02:38:05 +0000
Manifest next update:     Sat 24 May 2025 05:17:05 +0000
Files and hashes:         1: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (hash: OFQUaZfxmar8QdwOWotCs19NcWRunbT96cEQtkG/1Oc=)
                          2: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (hash: yogL8/81axQDf/PWzTASWBYKmDx9+f4U8iWDqKSfbiU=)
                          3: 30356EF46D594DA57C7697011183ACFFE04613E0.crl (hash: lIIaIqPayQJG7rDS5wKpIZuF9RqzZKlSGEuclCwpdac=)
                          4: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (hash: /+sJT+4M3YxlKiSTmSS+QE+W2EVnE9RJ/vLKVPLkgic=)
                          5: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (hash: L0lWQ5cza5vzg//b4IOx6GUQ2FbNhEwtk8QfgcTn3pQ=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:14:58:e2:b9:23:5e:25:df:55:e6:d0:1d:31:3e:80:39:bc:4d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
        Validity
            Not Before: May 23 02:38:05 2025 GMT
            Not After : May 24 05:17:05 2025 GMT
        Subject: CN=18A717BF53B360EB9291C0E679A32C76FFC1EC89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e1:80:1c:9c:0c:79:77:70:d7:05:67:8b:99:
                    2e:24:9b:e3:e1:3c:25:ba:37:1b:be:3e:12:14:5a:
                    08:38:7f:2e:fd:fe:13:93:ed:7b:24:37:f6:0e:e4:
                    f9:de:63:25:65:62:aa:95:a4:58:d3:a5:b3:dd:d1:
                    9d:62:5b:db:5c:56:33:c5:13:93:f0:bf:7c:0f:a3:
                    51:a8:c9:17:82:7e:e4:9b:a4:75:85:4c:68:33:e0:
                    ef:e9:bc:71:dc:79:07:79:1f:90:48:aa:e2:a0:7e:
                    41:ec:4c:e6:62:b1:16:99:dd:c9:5d:6c:44:51:9b:
                    c7:22:b4:5b:05:23:85:bc:dd:fc:0e:a5:10:64:f4:
                    d9:e6:f2:04:2b:03:94:97:33:6f:65:a2:53:6d:2d:
                    ad:d4:4e:51:23:77:57:fb:03:69:12:b7:5f:f5:74:
                    0a:c1:a3:59:39:dc:32:86:b5:9c:3a:e9:61:5e:f9:
                    a5:51:97:44:03:7a:bd:80:24:4b:7c:b5:d1:f7:d0:
                    64:00:75:77:c8:3c:8e:fd:00:86:8e:6c:e6:7d:21:
                    fa:a1:e4:0e:ad:00:83:94:f3:73:2d:43:da:66:48:
                    e0:5d:9f:f3:73:fd:64:20:6d:8d:01:da:a1:c0:16:
                    f0:a7:7c:26:ea:6d:69:92:dc:62:9c:10:01:9f:8e:
                    f4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A7:17:BF:53:B3:60:EB:92:91:C0:E6:79:A3:2C:76:FF:C1:EC:89
            X509v3 Authority Key Identifier:
                keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e0:b9:74:c0:d8:be:be:9d:fa:86:c5:50:a4:26:99:f2:55:
         8a:94:fa:9c:f3:e1:86:78:f6:90:26:ac:43:f6:b7:8a:2c:83:
         bf:6c:79:4e:7a:b4:cb:44:1e:0a:6a:38:c6:dd:1f:cd:f7:47:
         8f:80:85:97:ec:87:87:64:e5:8f:bc:44:4c:6c:65:9c:b8:d2:
         b7:ee:ba:7b:7a:a8:e7:c8:5c:4a:a4:10:bf:2d:fb:73:62:36:
         9e:ad:cb:d9:1b:54:d1:69:79:fb:1c:1f:d1:d1:71:a1:30:f3:
         6a:e4:ae:8b:09:e4:bf:72:03:2b:ad:c4:b1:fa:9c:e9:d1:e5:
         3f:de:5a:18:b3:71:d7:5f:08:e0:e7:e1:13:24:b2:e2:c2:d3:
         ac:fe:44:9d:9f:18:b3:8a:ae:ee:90:55:16:08:4f:ce:d9:13:
         52:d8:74:e9:85:4a:67:01:22:92:4d:a2:05:a5:66:9a:35:4c:
         f9:91:8a:b5:83:60:e9:44:a4:85:97:98:b3:bf:da:8b:76:31:
         29:0e:31:61:ae:ba:71:d4:1e:6e:76:a3:3e:a1:54:e6:dd:a0:
         5b:11:d1:46:ba:fd:a3:b8:59:3f:af:ed:5c:b7:c9:55:33:25:
         0f:46:34:25:f7:a4:97:ca:2f:b3:a2:21:28:c9:c0:42:51:29:
         bc:f1:e5:f9
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUXBRY4rkjXiXfVebQHTE+gDm8Ta4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTA1MzAwMDAwMTEwLwYDVQQFEygzMDM1NkVGNDZE
NTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwMB4XDTI1MDUyMzAyMzgwNVoX
DTI1MDUyNDA1MTcwNVowMzExMC8GA1UEAxMoMThBNzE3QkY1M0IzNjBFQjkyOTFD
MEU2NzlBMzJDNzZGRkMxRUM4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALLhgBycDHl3cNcFZ4uZLiSb4+E8Jbo3G74+EhRaCDh/Lv3+E5PteyQ39g7k
+d5jJWViqpWkWNOls93RnWJb21xWM8UTk/C/fA+jUajJF4J+5JukdYVMaDPg7+m8
cdx5B3kfkEiq4qB+QexM5mKxFpndyV1sRFGbxyK0WwUjhbzd/A6lEGT02ebyBCsD
lJczb2WiU20trdROUSN3V/sDaRK3X/V0CsGjWTncMoa1nDrpYV75pVGXRAN6vYAk
S3y10ffQZAB1d8g8jv0Aho5s5n0h+qHkDq0Ag5Tzcy1D2mZI4F2f83P9ZCBtjQHa
ocAW8Kd8JuptaZLcYpwQAZ+O9OsCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQYpxe/
U7Ng65KRwOZ5oyx2/8HsiTAfBgNVHSMEGDAWgBQwNW70bVlNpXx2lwERg6z/4EYT
4DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMC8zMDM1NkVG
NDZENTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NRFZ1OUcxWlRh
VjhkcGNCRVlPc18tQkdFLUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz
MDAwMDAvMC8zMDM1NkVGNDZENTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0Uw
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEANeC5dMDYvr6d+obFUKQmmfJVipT6nPPhhnj2kCasQ/a3iiyD
v2x5Tnq0y0QeCmo4xt0fzfdHj4CFl+yHh2Tlj7xETGxlnLjSt+66e3qo58hcSqQQ
vy37c2I2nq3L2RtU0Wl5+xwf0dFxoTDzauSuiwnkv3IDK63Esfqc6dHlP95aGLNx
118I4OfhEySy4sLTrP5EnZ8Ys4qu7pBVFghPztkTUth06YVKZwEikk2iBaVmmjVM
+ZGKtYNg6USkhZeYs7/ai3YxKQ4xYa66cdQebnajPqFU5t2gWxHRRrr9o7hZP6/t
XLfJVTMlD0Y0Jfekl8ovs6IhKMnAQlEpvPHl+Q==
-----END CERTIFICATE-----