Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
File:                     17AA392C0CFF754F6249006D89386F871B9693FA.mft (raw, json)
Hash identifier:          Qx8hca50TWb2g2i1lpBb6Ilhb8lVAu6FRrBpr/R6SXQ=
Subject key identifier:   DD:D1:AA:15:49:AD:28:FC:09:07:23:7E:EB:F2:F4:6D:63:01:A7:9A
Authority key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
Certificate issuer:       /CN=A917447B0000/serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
Certificate serial:       4AE6CD43BF870531FE3BEB7F93A195B8E0CEB622
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
Manifest number:          011E
Signing time:             Thu 12 Mar 2026 06:24:56 +0000
Manifest this update:     Thu 12 Mar 2026 06:19:56 +0000
Manifest next update:     Fri 13 Mar 2026 07:10:56 +0000
Files and hashes:         1: 17AA392C0CFF754F6249006D89386F871B9693FA.crl (hash: eVUZmIiDS90FaQvkWVNYLqk69ta7JRQJnkkk9QaU8xI=)
                          2: 323030313a6466343a353134303a3a2f34342d3434203d3e20313533333436.roa (hash: 0cKeFRvMg4K7CjG6EjM23reqsbS6dbzuJZqiCsKqNyg=)
                          3: 323030313a6466343a353134653a3a2f34382d3438203d3e20313533333436.roa (hash: 6d79MjPujLDyKtMpkk4jphJnh2+RAK01Ho2cDxHKrKM=)
                          4: 323030313a6466343a353134383a3a2f34382d3438203d3e2039383333.roa (hash: zl/9BBoJJ3neyY8UfSuYMMT4qwgA84XRS4rr+sykVxA=)
                          5: 323030313a6466343a353134663a3a2f34382d3438203d3e20313533333436.roa (hash: HOBlUUzXIgqWknT1VOL1nB3qMa6Fu6vRC1OMoEBjewg=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e6:cd:43:bf:87:05:31:fe:3b:eb:7f:93:a1:95:b8:e0:ce:b6:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
        Validity
            Not Before: Mar 12 06:19:56 2026 GMT
            Not After : Mar 13 07:10:56 2026 GMT
        Subject: CN=DDD1AA1549AD28FC0907237EEBF2F46D6301A79A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e0:37:07:48:82:af:71:6f:f9:bf:ec:72:9c:
                    c1:c0:a7:42:8c:59:67:99:10:df:80:6c:82:c7:38:
                    53:8d:df:e8:be:73:dc:67:a4:fe:03:9e:5d:4f:f5:
                    47:44:eb:00:78:f0:b7:ca:0e:87:4e:3e:f7:0e:39:
                    d3:69:b4:9b:4f:bd:40:85:e5:94:1b:f6:2f:22:83:
                    1d:fb:52:1f:60:49:6b:30:d7:aa:2a:e1:37:0a:48:
                    79:79:d4:0f:17:d6:58:84:67:24:a8:bb:64:8e:b3:
                    c4:88:a5:fb:c8:1d:ee:7a:46:d8:46:3d:96:4b:c1:
                    13:c8:91:ed:64:f7:bb:ff:6e:87:8a:47:d5:38:58:
                    2a:fd:fa:e5:c6:1b:a2:1a:7d:5d:b8:1e:6e:8e:f5:
                    a2:a9:ad:61:47:44:45:68:de:f2:9b:40:4b:f1:72:
                    9b:82:bb:ed:72:6c:c4:e9:30:8c:c7:6b:a7:27:4f:
                    17:72:85:59:cd:de:bf:08:88:4a:e9:82:3c:cb:e1:
                    a1:ba:d5:4e:54:59:e1:7a:33:71:87:04:77:f0:d7:
                    6d:3b:e2:8e:3a:26:bd:24:39:88:f5:7e:11:91:d9:
                    b7:4c:27:3e:b2:bf:9a:eb:8e:cc:f3:3f:23:ff:c2:
                    58:d7:d5:54:77:c0:45:6a:53:0a:94:b8:b1:33:b0:
                    58:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D1:AA:15:49:AD:28:FC:09:07:23:7E:EB:F2:F4:6D:63:01:A7:9A
            X509v3 Authority Key Identifier:
                keyid:17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:55:bb:d5:49:4f:46:f4:b8:27:ea:ec:e9:66:b3:89:96:05:
         99:d6:da:94:77:26:0d:39:86:3f:0f:39:45:0e:44:05:b1:f1:
         61:d3:dd:df:a9:7c:65:89:cd:fa:a3:ff:88:40:66:10:ab:c7:
         e4:5a:ca:aa:68:fb:b7:b7:3c:e9:c2:6b:98:24:21:95:33:09:
         c2:93:70:77:b9:34:ea:ba:2e:61:a1:f3:81:19:5f:fc:fd:64:
         01:9f:98:00:a4:56:11:78:c1:b7:a2:ec:e2:c3:e3:7a:f5:0e:
         aa:08:82:30:7b:f8:15:26:f4:ce:f3:c0:21:a5:e1:08:b4:63:
         14:cd:c7:54:6b:a9:6b:51:b9:f8:a4:30:78:49:98:cd:6b:8c:
         eb:e1:0d:7a:b6:82:47:81:b1:21:11:42:9d:b8:d9:9b:2e:a3:
         37:63:db:81:fe:ee:f1:41:29:28:38:06:0a:36:27:df:a5:ca:
         be:cf:51:bf:df:5b:85:45:c3:7f:58:33:5b:b9:fa:05:40:1e:
         2e:13:bf:6b:48:6a:e8:32:ef:1f:f0:2e:01:58:31:6e:04:33:
         47:9c:31:3e:1c:32:cf:e6:99:67:9d:68:c9:a4:75:e4:9a:54:
         d5:64:f7:f0:62:c7:79:44:2e:6b:05:8e:5b:44:80:0b:a3:e6:
         78:c0:15:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----