Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft
File:                     TQJNfuk78G548gwtl4XADK7tbkQ.mft (raw, json)
Hash identifier:          1FZOqZMTHW2/F+/5CRdgcikrXsU4O15Ebyqz26syVbI=
Subject key identifier:   96:D5:CE:66:98:03:5E:A7:05:96:64:54:E2:9A:18:28:2D:35:BE:14
Authority key identifier: 4D:02:4D:7E:E9:3B:F0:6E:78:F2:0C:2D:97:85:C0:0C:AE:ED:6E:44
Certificate issuer:       /CN=A9134B88/serialNumber=4D024D7EE93BF06E78F20C2D9785C00CAEED6E44
Certificate serial:       0719
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft
Manifest number:          0719
Signing time:             Thu 30 Jan 2025 21:44:37 +0000
Manifest this update:     Thu 30 Jan 2025 21:44:36 +0000
Manifest next update:     Thu 06 Feb 2025 21:44:36 +0000
Files and hashes:         1: TQJNfuk78G548gwtl4XADK7tbkQ.crl (hash: IREbvJMEwxPBTKP0EOczLmHih65+BK/gANvAIEOGmOw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1817 (0x719)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134B88/serialNumber=4D024D7EE93BF06E78F20C2D9785C00CAEED6E44
        Validity
            Not Before: Jan 30 21:44:36 2025 GMT
            Not After : Feb  6 21:44:36 2025 GMT
        Subject: CN=679bf2c4-91fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:34:d8:3d:98:38:03:35:01:00:65:82:a6:c6:
                    bc:24:78:8d:67:ab:88:a6:c0:77:ab:0a:5d:28:37:
                    57:da:b0:4c:84:03:68:26:e5:6e:57:4e:da:fd:4c:
                    31:92:cb:db:b1:fa:36:95:a8:85:a6:3d:d2:3f:94:
                    dc:fc:8d:bc:ee:e3:70:62:78:09:ca:ac:cf:b9:24:
                    d5:b0:71:9a:05:6e:dc:36:e6:51:d7:77:df:34:cd:
                    8a:dd:5c:72:20:f5:b5:aa:76:a6:06:0c:71:26:3d:
                    ad:26:ec:5e:f1:13:0a:59:ff:26:76:ce:3f:88:ca:
                    a7:bb:85:8a:28:3d:c6:b5:e7:f6:a9:cb:14:11:d3:
                    5f:4a:4c:c3:e5:10:f7:5d:76:b7:25:7d:dc:bd:9b:
                    e6:2a:b2:fb:38:59:b9:60:4a:47:55:d1:b0:7b:9a:
                    a2:f7:3b:53:68:82:4b:31:dc:84:5f:15:e2:97:c9:
                    f0:70:cc:3a:9c:ee:65:91:9f:45:34:bd:05:8e:73:
                    a0:72:bc:7e:f6:9d:d8:98:29:02:61:be:e7:85:42:
                    01:2c:b1:a7:23:f8:b1:0c:f2:5c:fa:c9:7a:9c:30:
                    1f:6f:62:ae:c4:72:5e:bd:8b:61:bf:d4:3d:14:27:
                    89:82:07:a2:87:3d:aa:ce:3e:f4:45:78:fd:86:6b:
                    95:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D5:CE:66:98:03:5E:A7:05:96:64:54:E2:9A:18:28:2D:35:BE:14
            X509v3 Authority Key Identifier:
                keyid:4D:02:4D:7E:E9:3B:F0:6E:78:F2:0C:2D:97:85:C0:0C:AE:ED:6E:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:f3:c9:be:d1:2f:95:39:df:a3:a4:b0:aa:62:b4:7a:b0:75:
         b3:43:fc:3d:21:71:73:0e:51:60:d1:70:fd:65:16:cb:9d:e2:
         7f:2c:bc:76:89:32:c6:09:b0:1b:7a:b1:b8:1e:69:09:78:3d:
         f0:78:aa:89:a9:da:9a:ce:a0:5a:31:b1:14:56:72:14:00:e6:
         10:e8:42:1b:da:9b:f1:72:4e:03:9f:a1:4b:c0:3c:90:a6:da:
         42:31:dc:e3:7f:e3:1c:aa:b0:4c:07:c2:bf:fc:f0:3a:3c:07:
         63:24:9d:5b:1f:ec:18:50:be:43:cf:10:e1:33:50:4f:d3:76:
         f6:48:25:64:16:65:49:55:94:7f:5c:58:11:6f:64:9e:d1:6c:
         36:00:3a:03:2a:06:86:a0:ad:9e:19:c4:b8:db:12:90:91:c9:
         78:cc:3e:61:b3:66:14:1e:13:54:a8:b4:74:6c:b1:d5:79:d2:
         7e:8f:18:21:31:7a:a9:36:1a:ee:06:7e:8a:8c:d4:ee:3f:40:
         32:46:00:b3:22:5e:d2:70:40:af:e9:bd:d5:67:30:38:c2:8c:
         81:9d:86:5e:c5:0f:0c:92:d5:cf:df:7e:e0:6e:df:f4:9e:f9:
         03:b6:4f:91:57:3f:06:6b:94:6f:5f:23:e5:7f:51:ae:73:9a:
         ea:c1:77:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:21:46 2025 by rpki-client