Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft
File:                     xM4RIyFRinKEfG1X56ijVDRVNzs.mft (raw, json)
Hash identifier:          MZFQ3evbSIVvdulV5fwa1ijRg3aMybCDJAB8Ag84RNo=
Subject key identifier:   E0:C9:B6:30:A6:AF:38:C3:72:82:F0:12:F7:59:3E:C4:CF:64:1B:5B
Authority key identifier: C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B
Certificate issuer:       /CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B
Certificate serial:       3445
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft
Manifest number:          3445
Signing time:             Fri 31 Jan 2025 15:12:34 +0000
Manifest this update:     Fri 31 Jan 2025 15:12:33 +0000
Manifest next update:     Fri 07 Feb 2025 15:12:33 +0000
Files and hashes:         1: xM4RIyFRinKEfG1X56ijVDRVNzs.crl (hash: zm6I5QWtNQc8/0N6MWbXOhWo6XGXOD3u+XSnla266Xo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13381 (0x3445)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B
        Validity
            Not Before: Jan 31 15:12:33 2025 GMT
            Not After : Feb  7 15:12:33 2025 GMT
        Subject: CN=679ce862-ac81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:9a:b3:27:9c:03:3d:e5:b8:3b:16:ba:d0:
                    00:d3:2b:4d:b5:91:db:4c:1a:d8:c4:68:4a:3d:cc:
                    d4:f2:a6:46:ce:a8:d9:52:27:8b:f7:9f:6b:53:1d:
                    3f:9b:f8:3e:fd:27:cd:f4:e1:1b:b0:42:51:9a:a9:
                    64:90:e4:b5:04:a3:aa:3e:d7:8d:61:34:4f:2e:79:
                    24:bb:55:c1:9a:7e:42:a4:c4:a0:4d:42:08:6c:b4:
                    b5:03:47:7c:01:7b:f1:36:f3:ea:b0:f8:ac:c0:4a:
                    a0:a9:38:0b:9c:46:9b:fb:da:20:47:19:73:ef:48:
                    3e:3e:b5:71:26:13:c0:42:80:b6:d3:55:b0:8c:49:
                    e9:d4:e4:6f:1c:ea:f5:0d:64:87:d4:4e:26:d0:61:
                    0f:01:12:77:33:e6:d6:c9:f1:b7:1f:47:2b:03:71:
                    79:56:86:a4:02:19:73:d6:a6:2a:f1:3e:13:a5:d1:
                    4d:16:23:91:09:25:cb:37:1c:73:28:59:9e:cd:e2:
                    72:83:f0:fa:05:14:34:ed:8c:f5:67:99:eb:ae:7e:
                    1a:20:ff:6f:77:32:d1:43:36:20:bb:d5:ff:4c:ec:
                    b0:40:19:ba:08:90:5f:43:3f:9f:dc:1d:6e:08:9e:
                    eb:49:94:ea:3f:e2:5f:04:92:30:3d:e1:cb:8d:09:
                    98:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C9:B6:30:A6:AF:38:C3:72:82:F0:12:F7:59:3E:C4:CF:64:1B:5B
            X509v3 Authority Key Identifier:
                keyid:C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:eb:b2:34:64:7e:7b:50:56:d1:4d:e1:7e:60:ab:7b:e7:9c:
         0c:31:68:fe:03:0f:1e:62:60:a3:9a:e4:da:32:c8:22:b9:4f:
         83:4d:c6:58:2d:af:76:1f:92:21:1d:3c:1f:ea:ee:57:56:4c:
         56:e6:9d:ed:92:f8:86:7b:d7:96:ea:a3:31:d2:dc:fb:42:8f:
         1a:b7:7b:f7:f0:bc:96:b8:53:c7:97:d5:58:3a:a6:85:de:23:
         00:24:85:e0:ee:14:7c:7c:da:3e:61:a5:83:86:3c:23:3c:52:
         59:95:7c:d5:d2:a8:a2:6b:6e:dd:78:27:0e:0d:52:f8:dc:da:
         4e:8c:ba:e4:be:3f:19:5b:c3:ce:5a:c5:37:10:30:b9:50:6e:
         73:ed:4b:f4:88:53:2f:2c:18:80:7a:ee:0b:9c:b2:d2:23:a4:
         44:22:08:ac:8d:ed:00:4e:a2:21:9f:61:d5:01:f5:6d:13:4a:
         b2:e8:2c:47:19:e2:ba:6e:c0:fe:0b:07:90:79:e0:af:29:09:
         82:53:42:64:50:36:bd:6b:8f:a7:11:7a:2b:59:0d:30:02:c7:
         36:7e:2d:0c:d3:d5:7f:4f:a8:2a:00:65:ce:50:39:69:62:61:
         b7:0c:78:99:68:99:7a:88:97:07:43:4f:0b:09:01:af:03:a2:
         fb:e9:07:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:37 2025 by rpki-client