Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
File:                     mdb3fuCkNuVIfpjO5VK2S17GWxM.mft (raw, json)
Hash identifier:          /zQE7D/c9CnbZXN/FxJcelgt14wS/kmtBPWPnwTX4/M=
Subject key identifier:   46:6E:24:FC:FF:9C:5E:59:75:38:3D:DB:DA:93:FE:EF:02:DB:07:1D
Authority key identifier: 99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13
Certificate issuer:       /CN=A912A799/serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13
Certificate serial:       3446
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
Manifest number:          3445
Signing time:             Fri 31 Jan 2025 15:14:57 +0000
Manifest this update:     Fri 31 Jan 2025 15:14:56 +0000
Manifest next update:     Fri 07 Feb 2025 15:14:56 +0000
Files and hashes:         1: mdb3fuCkNuVIfpjO5VK2S17GWxM.crl (hash: CoguNc5I4fbYQYL90bixYjtHx334NdjdgYtVqdKulPw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13382 (0x3446)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A799/serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13
        Validity
            Not Before: Jan 31 15:14:56 2025 GMT
            Not After : Feb  7 15:14:56 2025 GMT
        Subject: CN=679ce8f0-10f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8c:13:88:ad:b1:0d:da:6c:b9:59:80:ef:2b:
                    12:a2:28:4c:5b:7a:d8:68:0b:94:29:07:ce:33:38:
                    a1:67:bb:b9:d8:5e:74:c3:a1:5b:0e:ca:13:e6:f6:
                    7d:d4:96:fd:fb:8a:65:93:f8:8c:c0:fe:cb:48:2a:
                    1e:89:df:17:bf:84:ad:11:1d:e8:d1:17:3b:f8:22:
                    1f:59:a5:1d:24:59:57:9f:f7:f0:47:d0:21:29:42:
                    1d:b7:89:d2:ee:28:54:8a:4a:33:aa:3d:98:a3:e8:
                    b0:6d:4a:2b:b9:cd:cf:91:70:e7:9b:fa:d4:a5:3f:
                    f0:a1:ba:15:3d:e9:ad:38:f3:36:a8:4c:eb:e4:d2:
                    a1:b5:66:82:a1:76:d9:99:c2:e5:c6:71:fa:96:0c:
                    2a:62:61:9b:17:99:43:38:ea:da:ae:f3:04:f9:45:
                    92:69:7f:1f:45:2c:57:90:07:6c:72:c7:4b:14:78:
                    1c:ca:a6:63:09:be:5e:8e:89:fa:da:d9:c2:44:69:
                    3c:fa:e5:a5:02:56:d1:0a:1a:5c:9a:6e:db:38:89:
                    fb:0b:97:eb:41:48:f4:c9:46:a7:9a:ab:91:6e:3e:
                    cf:27:f2:8c:a6:f5:1b:fc:09:82:80:6c:b7:d2:dc:
                    75:7c:48:67:ff:0d:17:af:56:7a:fd:30:bf:06:e4:
                    81:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6E:24:FC:FF:9C:5E:59:75:38:3D:DB:DA:93:FE:EF:02:DB:07:1D
            X509v3 Authority Key Identifier:
                keyid:99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:5c:01:eb:eb:5b:20:73:ee:c1:c3:5d:44:09:56:16:53:b8:
         56:0f:a2:99:90:cd:03:70:d9:d8:64:18:d3:41:4c:85:5c:71:
         1c:7a:70:79:bf:f5:e8:69:7b:96:25:e6:c0:2c:05:99:b4:10:
         72:ac:5d:4a:38:5b:56:f5:c8:08:c4:3a:e6:aa:e9:bf:63:47:
         52:ef:78:d2:de:8b:3f:67:a9:ce:4c:70:86:ce:bf:8b:7f:8c:
         61:93:1e:09:74:87:97:47:c0:97:6d:fe:4b:fe:22:d1:30:bc:
         1f:2a:a3:58:d3:d3:90:6a:f2:04:54:9a:e6:52:a8:89:84:4c:
         80:4e:ce:40:3e:4e:b0:7d:14:db:85:3c:02:cb:50:4a:41:75:
         41:84:c6:50:6c:87:21:db:dd:00:30:7d:9e:4e:a3:c9:d3:c4:
         1b:dc:64:a0:fb:4a:52:71:81:5d:b0:b1:f7:4d:3c:c1:dd:9d:
         ab:4a:64:69:52:29:98:a7:19:6a:2a:eb:bc:3b:99:be:03:26:
         5e:01:9b:45:3d:aa:ee:82:7f:3b:61:37:d6:e4:02:47:4b:8a:
         c9:f6:c7:ba:7f:78:9c:60:bf:5c:01:12:c7:5f:91:24:51:89:
         3d:0a:55:6a:60:23:7d:84:6e:2e:a5:5a:da:dc:fc:a1:25:37:
         30:9e:06:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:45:50 2025 by rpki-client