Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
File:                     F-lBr577tRXXwktBjmn5hnx6FMo.mft (raw, json)
Hash identifier:          khyC5ro7/9WeHXrrXzf07QJnmlRQBCvuBv7QvqZtD4c=
Subject key identifier:   9F:4B:2D:0D:B3:C0:54:01:41:7E:36:4F:01:FD:78:09:EA:35:A9:1C
Authority key identifier: 17:E9:41:AF:9E:FB:B5:15:D7:C2:4B:41:8E:69:F9:86:7C:7A:14:CA
Certificate issuer:       /CN=A9129023/serialNumber=17E941AF9EFBB515D7C24B418E69F9867C7A14CA
Certificate serial:       7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
Manifest number:          7B
Signing time:             Fri 31 Jan 2025 05:45:26 +0000
Manifest this update:     Fri 31 Jan 2025 05:45:26 +0000
Manifest next update:     Fri 07 Feb 2025 05:45:26 +0000
Files and hashes:         1: F-lBr577tRXXwktBjmn5hnx6FMo.crl (hash: TpmiuNkF3wLDMyl91odOIB0Hj5eI4L1m7Q4K1DUmdJU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129023/serialNumber=17E941AF9EFBB515D7C24B418E69F9867C7A14CA
        Validity
            Not Before: Jan 31 05:45:26 2025 GMT
            Not After : Feb  7 05:45:26 2025 GMT
        Subject: CN=679c6376-0776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:72:95:df:8d:a3:ad:9b:88:17:f1:7f:c7:35:
                    e5:68:d0:56:99:5c:ed:c5:56:c1:df:ba:ed:be:57:
                    48:08:37:83:fa:fe:d0:33:b1:25:f0:05:ed:cb:4f:
                    86:01:53:82:24:24:43:6d:db:77:6b:04:2b:4f:57:
                    7b:8e:e4:83:0b:35:f8:6f:c5:98:b5:4f:0e:21:e8:
                    45:18:75:fc:ba:19:85:54:e9:01:fb:c3:25:52:20:
                    26:42:aa:4f:15:1b:c2:0c:9f:f0:93:4e:a1:84:45:
                    76:08:32:f4:b8:75:1c:58:4f:60:70:f6:fd:28:f4:
                    bd:b5:4a:47:86:1a:cc:72:89:77:4f:42:9a:59:b3:
                    53:99:54:c0:57:ee:d9:f9:47:b1:24:50:65:d0:63:
                    36:f3:c1:7f:07:02:ca:87:cf:5b:24:0c:b4:09:c5:
                    d0:bc:ef:e1:69:67:69:aa:88:bd:fd:ed:07:85:cd:
                    90:9a:76:09:09:43:ee:a3:24:92:59:b6:08:fd:f8:
                    6f:f9:34:2e:47:5f:65:05:2c:51:db:49:00:83:eb:
                    9f:94:c6:71:b6:06:5a:13:e7:03:8a:4a:6a:f0:65:
                    53:80:8e:cb:ce:85:13:7d:a8:18:0e:6a:c9:77:dc:
                    10:6e:56:25:28:9b:b2:e5:08:28:21:b0:c4:0f:cf:
                    0d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4B:2D:0D:B3:C0:54:01:41:7E:36:4F:01:FD:78:09:EA:35:A9:1C
            X509v3 Authority Key Identifier:
                keyid:17:E9:41:AF:9E:FB:B5:15:D7:C2:4B:41:8E:69:F9:86:7C:7A:14:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:56:57:80:68:c9:b3:81:e0:7f:73:25:3a:fa:aa:a3:9d:f6:
         0c:86:dd:35:40:ee:1c:e0:f0:41:14:f1:06:cd:b7:13:06:35:
         1f:1f:f4:b8:74:3c:6e:6c:53:b6:2f:2a:d3:02:d6:0f:d3:10:
         83:30:6f:81:d0:e1:33:10:d4:93:83:87:fb:31:bc:46:24:c9:
         80:04:d7:82:dd:df:93:f8:27:4c:cc:56:6d:40:3c:c7:89:24:
         3d:6a:16:56:5c:3d:4b:93:60:df:cb:cb:11:52:32:66:e3:9e:
         38:0c:5a:01:a5:db:c7:44:53:c3:31:5c:a5:05:70:6a:aa:36:
         44:38:40:38:ac:38:e5:7b:7a:ca:39:fa:24:96:22:33:04:24:
         dc:e0:fe:5c:3c:8b:2b:2a:b5:3e:8b:76:91:b7:78:b1:0b:72:
         eb:ca:cc:64:07:ed:51:dc:1e:0e:17:b3:25:18:11:d8:e3:30:
         1b:2e:dc:37:99:ee:ab:64:2e:21:e4:20:44:eb:e7:6f:fc:10:
         88:a9:4c:c9:b8:14:38:2b:4f:fd:52:0f:22:9b:58:4d:46:4f:
         9a:8e:00:87:e3:33:00:7f:07:b9:55:9d:a8:18:58:a6:2b:5e:
         19:81:07:3e:ea:9d:40:cc:74:2a:5c:2e:90:3f:f1:2a:23:23:
         c6:b6:20:6a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
OTAyMzExMC8GA1UEBRMoMTdFOTQxQUY5RUZCQjUxNUQ3QzI0QjQxOEU2OUY5ODY3
QzdBMTRDQTAeFw0yNTAxMzEwNTQ1MjZaFw0yNTAyMDcwNTQ1MjZaMBgxFjAUBgNV
BAMTDTY3OWM2Mzc2LTA3NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+cpXfjaOtm4gX8X/HNeVo0FaZXO3FVsHfuu2+V0gIN4P6/tAzsSXwBe3LT4YB
U4IkJENt23drBCtPV3uO5IMLNfhvxZi1Tw4h6EUYdfy6GYVU6QH7wyVSICZCqk8V
G8IMn/CTTqGERXYIMvS4dRxYT2Bw9v0o9L21SkeGGsxyiXdPQppZs1OZVMBX7tn5
R7EkUGXQYzbzwX8HAsqHz1skDLQJxdC87+FpZ2mqiL397QeFzZCadgkJQ+6jJJJZ
tgj9+G/5NC5HX2UFLFHbSQCD65+UxnG2BloT5wOKSmrwZVOAjsvOhRN9qBgOasl3
3BBuViUom7LlCCghsMQPzw15AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUn0stDbPA
VAFBfjZPAf14Ceo1qRwwHwYDVR0jBBgwFoAUF+lBr577tRXXwktBjmn5hnx6FMow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5MDIzL0ZDRjY0NzQwMjI4
MDExRUZBNzI4M0MxNEM0RjlBRTAyL0YtbEJyNTc3dFJYWHdrdEJqbW41aG54NkZN
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRi1sQnI1Nzd0UlhYd2t0QmptbjVobng2Rk1vLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5
MDIzL0ZDRjY0NzQwMjI4MDExRUZBNzI4M0MxNEM0RjlBRTAyL0YtbEJyNTc3dFJY
WHdrdEJqbW41aG54NkZNby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKdWV4BoybOB4H9zJTr6qqOd9gyG3TVA7hzg8EEU8QbNtxMGNR8f9Lh0
PG5sU7YvKtMC1g/TEIMwb4HQ4TMQ1JODh/sxvEYkyYAE14Ld35P4J0zMVm1APMeJ
JD1qFlZcPUuTYN/LyxFSMmbjnjgMWgGl28dEU8MxXKUFcGqqNkQ4QDisOOV7eso5
+iSWIjMEJNzg/lw8iysqtT6LdpG3eLELcuvKzGQH7VHcHg4XsyUYEdjjMBsu3DeZ
7qtkLiHkIETr52/8EIipTMm4FDgrT/1SDyKbWE1GT5qOAIfjMwB/B7lVnagYWKYr
XhmBBz7qnUDMdCpcLpA/8SojI8a2IGo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:45 2025 by rpki-client