Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
File:                     B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft (raw, json)
Hash identifier:          0RuHTmY/Qu3xnm5UrW2woV/hpgvMG3rM8sZ8lz+vLiw=
Subject key identifier:   0E:6D:C7:CF:72:E6:BD:DA:83:A3:E1:E3:A3:8C:B8:FE:AE:3C:3E:FE
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Certificate issuer:       /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial:       5B54E91D916D99E4251FB039F2A706A474CBB466
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
Manifest number:          063D
Signing time:             Fri 23 May 2025 02:43:05 +0000
Manifest this update:     Fri 23 May 2025 02:38:05 +0000
Manifest next update:     Sat 24 May 2025 06:37:05 +0000
Files and hashes:         1: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (hash: r4ECuFZt/L5fS+cZP8XPnWcJahGSY+Jt42LE76pHOT4=)
                          2: 3132322e39392e3132302e302f32322d3234203d3e2037353436.roa (hash: xpwTWZBP7/eHtTbqk9F/apgXLOcT+0v7j0EpR9aSWOI=)
                          3: 3230332e372e3139362e302f32332d3233203d3e2037353436.roa (hash: 2WwNl1pB5rNdmdA0ZckBBDyrcj3CVHHtlaccRQqUQAY=)
                          4: 3230332e33302e36302e302f32342d3234203d3e2037353436.roa (hash: ntRsyK9fzeeS8dMxETQpCxrPaauKuo+JBiWxiZzdtGE=)
                          5: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl (hash: n04uqF6iCJCkFei5kRyosstkcDVSq/ndE7L2yLGjuN0=)
                          6: 323430333a376530303a3a2f33322d3438203d3e2037353436.roa (hash: Kxb90CXH6CMSXvWzjc9fpBhV8G0Ol0T3Vx0vlyxyafg=)
                          7: 3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (hash: 7Xv6tB9T/KjUN8TySusNpmGTsOOvyBlLXRnYBKe44dU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:54:e9:1d:91:6d:99:e4:25:1f:b0:39:f2:a7:06:a4:74:cb:b4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
        Validity
            Not Before: May 23 02:38:05 2025 GMT
            Not After : May 24 06:37:05 2025 GMT
        Subject: CN=0E6DC7CF72E6BDDA83A3E1E3A38CB8FEAE3C3EFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:13:0b:87:f0:c7:7c:f8:95:41:76:0d:7f:11:
                    75:5e:22:e8:db:ce:0c:f6:ee:6d:49:89:e2:9d:9d:
                    a2:a8:32:4d:bb:ae:98:c1:3b:cd:ba:da:21:1f:5a:
                    22:19:26:17:84:96:f3:47:4c:13:65:bd:21:ab:d9:
                    6e:a3:f0:8e:5c:5b:51:cd:04:21:77:b8:8d:9d:5f:
                    0c:87:6e:e5:d9:bd:7e:50:63:db:1c:cf:a0:a3:81:
                    9a:d4:6a:e0:13:e2:7b:83:92:71:eb:47:44:4d:95:
                    01:94:21:c2:58:f2:95:a2:6f:bf:ce:83:c8:cc:a7:
                    34:14:6d:83:4e:db:b7:63:b5:8f:a6:77:a6:61:36:
                    ee:0c:2e:df:6b:08:0c:2c:8f:10:cd:1f:91:ce:a7:
                    cb:51:bc:26:84:02:79:94:65:75:82:80:a3:e3:30:
                    74:22:5c:19:52:69:0a:19:88:71:c3:26:5a:1f:98:
                    22:e6:65:c7:be:31:65:54:95:3d:d6:1f:e3:2d:3c:
                    10:47:68:30:9a:0d:71:93:b8:75:ce:59:5b:59:cb:
                    89:ce:83:44:0d:bb:73:ad:b0:06:37:1f:6f:5b:d1:
                    d0:2a:69:ad:0c:0b:98:2b:2f:cf:b4:af:ba:30:cc:
                    18:78:b3:fa:00:13:3f:03:c8:66:db:61:cc:fe:22:
                    cb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6D:C7:CF:72:E6:BD:DA:83:A3:E1:E3:A3:8C:B8:FE:AE:3C:3E:FE
            X509v3 Authority Key Identifier:
                keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a6:de:1d:cb:a0:89:05:e2:43:d6:46:1f:2a:f6:47:e5:f6:
         99:7f:03:a7:f9:ce:16:d5:85:3a:85:16:6b:b1:2e:ff:d8:19:
         0d:94:c3:1c:c4:15:74:fb:6c:67:2f:4c:a6:c4:b9:88:8b:4b:
         38:12:b4:d6:1a:8e:bc:46:d5:59:60:f8:45:c8:9d:d3:5b:57:
         3c:fb:1f:9a:81:72:43:8b:71:f3:25:b0:ad:74:75:ae:70:0d:
         d5:59:0e:66:94:32:8f:10:09:e1:6d:9c:97:1f:de:3d:54:ef:
         6b:b2:08:e6:68:7b:a8:26:f4:8d:b9:04:46:19:07:58:60:5c:
         c8:30:6a:59:ed:52:c7:72:23:a4:9a:8e:99:34:e8:4f:61:95:
         06:b7:68:7d:ec:60:96:af:6c:1c:de:9b:33:9c:81:9c:6f:4b:
         10:78:9e:c4:40:57:70:89:d0:62:e7:89:f5:af:11:19:98:37:
         20:12:68:12:98:70:47:5f:14:2f:21:2f:ac:43:af:02:d4:b0:
         c9:8a:31:23:00:75:17:77:58:fd:db:8c:7e:b7:95:b2:fd:d9:
         17:6d:e6:28:4c:b1:77:7f:d0:a1:42:72:bc:25:95:8c:ca:1e:
         b7:aa:91:37:dc:cb:be:5a:26:0a:f4:a0:e1:6a:36:98:72:bc:
         12:0a:d9:af
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUW1TpHZFtmeQlH7A58qcGpHTLtGYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRTUzOUMwMDAwMTEwLwYDVQQFEyhCNzM1MUIwNUIx
NjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0MB4XDTI1MDUyMzAyMzgwNVoX
DTI1MDUyNDA2MzcwNVowMzExMC8GA1UEAxMoMEU2REM3Q0Y3MkU2QkREQTgzQTNF
MUUzQTM4Q0I4RkVBRTNDM0VGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKETC4fwx3z4lUF2DX8RdV4i6NvODPbubUmJ4p2doqgyTbuumME7zbraIR9a
IhkmF4SW80dME2W9IavZbqPwjlxbUc0EIXe4jZ1fDIdu5dm9flBj2xzPoKOBmtRq
4BPie4OScetHRE2VAZQhwljylaJvv86DyMynNBRtg07bt2O1j6Z3pmE27gwu32sI
DCyPEM0fkc6ny1G8JoQCeZRldYKAo+MwdCJcGVJpChmIccMmWh+YIuZlx74xZVSV
PdYf4y08EEdoMJoNcZO4dc5ZW1nLic6DRA27c62wBjcfb1vR0CpprQwLmCsvz7Sv
ujDMGHiz+gATPwPIZtthzP4iyxMCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQObcfP
cua92oOj4eOjjLj+rjw+/jAfBgNVHSMEGDAWgBS3NRsFsWGeneOV8LL/ye4RKfMA
tDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNC9CNzM1MUIw
NUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi90elViQmJGaG5w
M2psZkN5XzhudUVTbnpBTFEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz
MDAwMDAvNC9CNzM1MUIwNUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAVabeHcugiQXiQ9ZGHyr2R+X2mX8Dp/nOFtWFOoUWa7Eu/9gZ
DZTDHMQVdPtsZy9MpsS5iItLOBK01hqOvEbVWWD4Rcid01tXPPsfmoFyQ4tx8yWw
rXR1rnAN1VkOZpQyjxAJ4W2clx/ePVTva7II5mh7qCb0jbkERhkHWGBcyDBqWe1S
x3IjpJqOmTToT2GVBrdofexglq9sHN6bM5yBnG9LEHiexEBXcInQYueJ9a8RGZg3
IBJoEphwR18ULyEvrEOvAtSwyYoxIwB1F3dY/duMfreVsv3ZF23mKEyxd3/QoUJy
vCWVjMoet6qRN9zLvlomCvSg4Wo2mHK8EgrZrw==
-----END CERTIFICATE-----
Generated at Sat May 31 16:49:06 2025 by rpki-client