Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.mft
File:                     eLec-CdRhh8nml-lBJMVONrc2vo.mft (raw, json)
Hash identifier:          3QNi3NrriI7QfeZDvodpia6Uom7LmJNmPkRBzTuKmvs=
Subject key identifier:   BD:EE:E4:8C:0C:04:00:AD:06:88:93:31:6D:3B:81:46:A1:9A:45:3E
Authority key identifier: 78:B7:9C:F8:27:51:86:1F:27:9A:5F:A5:04:93:15:38:DA:DC:DA:FA
Certificate issuer:       /CN=A9110650/serialNumber=78B79CF82751861F279A5FA504931538DADCDAFA
Certificate serial:       02F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eLec-CdRhh8nml-lBJMVONrc2vo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.mft
Manifest number:          02F3
Signing time:             Fri 31 Jan 2025 01:22:28 +0000
Manifest this update:     Fri 31 Jan 2025 01:22:27 +0000
Manifest next update:     Fri 07 Feb 2025 01:22:27 +0000
Files and hashes:         1: eLec-CdRhh8nml-lBJMVONrc2vo.crl (hash: TUNJA6/VQf1U8AI868SlXdl8bdJ9kB6mtw5D+3iBi9g=)
                          2: C9445C48D54F11EF96DECA53C4F9AE02.roa (hash: Esk5oKr6bpSe5R6pwy/KGSngmegv4z2afH8x0VXVxT4=)
                          3: 424653EEC6CB11ECB185E43EC4F9AE02.roa (hash: z9y1RZky0Mui28fgGdt8snXkNVzMUMLSs70EilJUUug=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 761 (0x2f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110650/serialNumber=78B79CF82751861F279A5FA504931538DADCDAFA
        Validity
            Not Before: Jan 31 01:22:27 2025 GMT
            Not After : Feb  7 01:22:27 2025 GMT
        Subject: CN=679c25d3-ed3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0e:52:01:3e:0c:0f:e6:3a:43:82:41:94:90:
                    55:dc:ca:2b:cc:c8:5c:13:93:d6:bc:4f:2b:cf:b9:
                    d9:67:8b:6a:8f:97:a3:c1:23:85:0f:a7:7e:f3:94:
                    46:3e:75:b8:f4:a3:ab:5c:2a:10:a7:27:ec:6b:4c:
                    15:4b:67:2c:1d:32:ee:84:83:56:ca:ee:fd:b4:9a:
                    e0:23:96:38:2b:3b:7a:25:03:95:01:1a:da:56:98:
                    65:d7:bf:83:b4:a0:da:ee:ff:65:6d:50:fe:01:da:
                    ce:16:76:78:7f:9e:ae:3f:97:a4:2b:13:d3:ac:85:
                    50:eb:52:3f:54:46:f7:d1:c3:a1:ac:c6:4e:42:b9:
                    a3:50:1c:f4:6f:b3:7e:bd:44:bd:5f:da:9a:d1:40:
                    7d:c1:c5:a7:74:5f:98:6a:cb:15:56:c6:b2:d1:68:
                    02:a0:90:d3:e8:83:c0:cb:1c:4b:c0:17:75:6f:2c:
                    95:02:41:83:9d:35:90:8d:6a:d0:35:be:68:83:dd:
                    cc:10:cf:dd:95:41:17:8d:6a:f6:95:6d:8f:0c:63:
                    fa:ca:af:7b:7c:7e:00:8e:dd:2e:57:e3:a5:c3:e1:
                    b6:ac:5d:fd:b6:93:b7:64:53:b9:6b:a4:7e:81:11:
                    7d:46:f6:ac:f7:ea:de:bc:f3:29:1b:b9:75:90:00:
                    c4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EE:E4:8C:0C:04:00:AD:06:88:93:31:6D:3B:81:46:A1:9A:45:3E
            X509v3 Authority Key Identifier:
                keyid:78:B7:9C:F8:27:51:86:1F:27:9A:5F:A5:04:93:15:38:DA:DC:DA:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eLec-CdRhh8nml-lBJMVONrc2vo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:bd:f0:32:c8:b4:ff:27:dd:ca:8b:92:6c:f9:24:dd:e4:04:
         32:91:57:00:c0:15:78:dc:b3:6a:c8:09:c6:b8:ac:28:45:a3:
         9e:51:95:cd:07:b6:c8:22:27:9e:e6:12:49:4c:37:80:83:da:
         58:83:2a:73:02:0b:39:d4:c7:aa:98:6b:17:e8:07:65:04:36:
         48:f2:b3:a0:a0:51:78:a2:16:af:33:8e:23:62:74:ed:e4:83:
         55:81:00:13:61:3f:dd:f7:65:b6:53:00:69:53:81:9d:28:3c:
         b5:0f:43:9b:b6:f1:cd:06:4e:36:09:aa:5b:27:97:23:75:9a:
         b7:06:5f:78:b6:6f:a5:1e:81:86:10:c7:77:fe:ad:58:99:ac:
         03:cb:e2:72:26:44:b5:ac:3f:41:9c:7e:54:cd:3f:c7:96:78:
         69:38:80:e5:fd:d7:c3:06:16:ba:d9:ee:6c:08:cb:8d:3c:ed:
         75:4c:e0:ac:60:7e:c3:6e:37:4e:46:57:be:dd:37:1d:1d:80:
         a6:a6:9c:f5:25:c9:20:e1:ee:72:02:a9:d6:c6:92:0e:f5:13:
         ee:8c:54:c6:9e:8b:78:4e:84:ea:fc:1f:8e:43:f5:9c:05:1f:
         7c:db:9a:61:02:56:24:ed:fc:57:09:ff:dd:1e:1d:4e:ed:96:
         00:ec:2b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:48 2025 by rpki-client