Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
File:                     B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft (raw, json)
Hash identifier:          GJaDtlFOAfsVQ8CfBMYfUgtLY4excSFLdhtQOxrQpME=
Subject key identifier:   2B:A3:4A:C8:5F:54:C5:83:0E:B5:C2:46:43:CC:52:1B:9D:F4:21:D0
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Certificate issuer:       /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial:       67B3C90FEA7C5196D48D62AFA7477A7C20113E31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
Manifest number:          063F
Signing time:             Thu 03 Jul 2025 02:16:53 +0000
Manifest this update:     Thu 03 Jul 2025 02:11:53 +0000
Manifest next update:     Fri 04 Jul 2025 03:00:53 +0000
Files and hashes:         1: 3230332e33302e36302e302f32342d3234203d3e2037353436.roa (hash: ntRsyK9fzeeS8dMxETQpCxrPaauKuo+JBiWxiZzdtGE=)
                          2: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (hash: r4ECuFZt/L5fS+cZP8XPnWcJahGSY+Jt42LE76pHOT4=)
                          3: 323430333a376530303a3a2f33322d3438203d3e2037353436.roa (hash: Kxb90CXH6CMSXvWzjc9fpBhV8G0Ol0T3Vx0vlyxyafg=)
                          4: 3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (hash: 7Xv6tB9T/KjUN8TySusNpmGTsOOvyBlLXRnYBKe44dU=)
                          5: 3132322e39392e3132302e302f32322d3234203d3e2037353436.roa (hash: xpwTWZBP7/eHtTbqk9F/apgXLOcT+0v7j0EpR9aSWOI=)
                          6: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl (hash: pfJTDw0dcrsT5EH/n1ptZt2q2ssVHnKd0a/ZuibCqaU=)
                          7: 3230332e372e3139362e302f32332d3233203d3e2037353436.roa (hash: DF0B2w1ci15U2MWgi9NHF/RrZ7F8ylilgRl/5FkgJoA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b3:c9:0f:ea:7c:51:96:d4:8d:62:af:a7:47:7a:7c:20:11:3e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
        Validity
            Not Before: Jul  3 02:11:53 2025 GMT
            Not After : Jul  4 03:00:53 2025 GMT
        Subject: CN=2BA34AC85F54C5830EB5C24643CC521B9DF421D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:08:5a:e4:9d:35:3c:8c:9a:bb:7f:ad:5f:2d:
                    cd:9e:71:58:e8:22:9e:7e:42:b4:55:67:76:6e:25:
                    f6:f9:9f:a0:52:bd:3e:ad:37:0d:ee:ad:3d:fe:12:
                    7d:09:c9:e7:a7:cf:a3:fe:e2:a8:46:81:42:6f:8f:
                    37:ba:96:5c:7a:d7:96:74:68:ca:e4:c2:f7:01:6d:
                    ac:e4:70:e3:ef:b8:46:0d:ac:93:57:32:c9:92:eb:
                    f3:07:a4:2c:8f:e0:5b:d0:b4:70:b3:94:1d:49:61:
                    29:d7:f2:9a:40:72:a2:06:95:34:55:f4:a1:13:41:
                    65:ae:6f:3c:61:91:e8:21:3c:9e:43:8e:ec:1e:78:
                    4b:d3:81:22:fa:6f:be:42:58:93:a9:cd:02:18:24:
                    ee:21:17:e7:97:39:b0:0f:65:88:76:5b:0e:5a:a8:
                    59:6f:5a:14:07:91:f6:39:bc:c6:7e:e7:12:b9:42:
                    81:bb:29:4a:37:74:77:66:78:5f:9e:da:dd:af:2c:
                    03:6c:2a:a4:ae:87:a1:f7:79:8e:fa:8d:00:ea:91:
                    f6:10:ad:9f:8c:41:3e:71:83:80:51:10:e9:73:c5:
                    81:cf:85:5e:53:0b:37:6d:9f:80:7c:d9:aa:cd:e2:
                    c0:31:1f:ab:56:6e:98:ff:f1:cf:60:ef:40:ea:d6:
                    e7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A3:4A:C8:5F:54:C5:83:0E:B5:C2:46:43:CC:52:1B:9D:F4:21:D0
            X509v3 Authority Key Identifier:
                keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ee:7a:26:ee:a7:1a:8f:21:27:9d:fa:c4:92:6c:64:fc:0a:
         22:04:42:9b:02:0a:95:16:52:a6:b4:fc:dc:64:bf:7f:fa:f0:
         3c:ff:83:2a:18:a7:b4:60:57:cf:1b:de:5a:a3:0d:c5:f4:4e:
         2a:07:ae:62:19:fe:58:1b:76:b8:76:20:ae:ef:b4:cf:a2:84:
         db:71:7c:7c:1f:83:48:c6:23:70:56:1e:65:6f:0a:b9:d2:4e:
         43:f4:46:0f:f1:8c:68:d9:9f:62:91:a0:a0:84:0d:5b:56:4a:
         54:51:76:10:6a:aa:cf:70:7d:49:34:c4:8a:c8:37:09:b8:53:
         c1:b5:2c:c9:8a:e3:3b:02:56:7e:da:63:81:cb:59:06:2e:cd:
         6b:6e:aa:86:81:94:09:dc:e8:83:c3:24:ce:88:88:9e:f8:a2:
         22:43:73:7b:15:14:cb:fa:d1:10:0f:29:ac:a3:6a:ec:fe:df:
         d1:ca:92:62:8d:77:4e:45:c5:a4:b6:6b:b0:e7:98:f3:ab:3f:
         ea:c7:c4:ee:25:f8:3f:03:f6:00:ba:fe:0a:ca:e5:d0:d9:1b:
         58:42:30:66:ab:9e:69:2a:6e:58:d3:39:9d:c8:19:40:43:d0:
         83:e2:73:df:cb:1a:30:b6:00:2b:34:59:6e:3a:fd:d0:23:e4:
         f6:40:2f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 08:19:24 2025 by rpki-client