Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft
File:                     28byJW3eXCxGqA6yQy8lcu3FN9Y.mft (raw, json)
Hash identifier:          elzHJx0QwWYV/u6G1XQmfjrAYMJ8GUPl1Uf7DYGKQFQ=
Subject key identifier:   DD:B3:93:D8:99:56:0D:7F:A0:63:E8:62:2A:7B:77:D2:0F:4C:9D:77
Authority key identifier: DB:C6:F2:25:6D:DE:5C:2C:46:A8:0E:B2:43:2F:25:72:ED:C5:37:D6
Certificate issuer:       /CN=A914D0E3/serialNumber=DBC6F2256DDE5C2C46A80EB2432F2572EDC537D6
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft
Manifest number:          38
Signing time:             Fri 31 Jan 2025 06:37:31 +0000
Manifest this update:     Fri 31 Jan 2025 06:37:31 +0000
Manifest next update:     Fri 07 Feb 2025 06:37:31 +0000
Files and hashes:         1: 28byJW3eXCxGqA6yQy8lcu3FN9Y.crl (hash: 4iXcKOdTxIzTO+j58TcU2RbOviP9o8T73KSXxZRhQIQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D0E3/serialNumber=DBC6F2256DDE5C2C46A80EB2432F2572EDC537D6
        Validity
            Not Before: Jan 31 06:37:31 2025 GMT
            Not After : Feb  7 06:37:31 2025 GMT
        Subject: CN=679c6fab-191b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2e:b9:2d:c1:ea:b8:71:84:7e:3c:91:21:03:
                    a6:7f:b0:66:ae:ed:b7:cf:d8:01:e7:c8:ac:20:a6:
                    c3:4e:ee:f9:50:b1:6b:ec:b5:84:8e:f9:e4:b9:49:
                    0a:4e:c0:c8:9d:2d:52:8d:be:ab:eb:b0:70:17:8a:
                    b2:4e:00:78:92:e8:99:d9:e6:7c:05:de:7f:3a:92:
                    a3:d7:3b:d1:a2:00:11:0e:66:e3:1d:60:f0:bf:94:
                    27:33:13:d2:64:38:7d:a5:cf:85:ab:c7:6c:21:ec:
                    85:1b:6a:f6:fc:65:c7:70:ef:9a:5d:5c:38:1a:3a:
                    c7:6c:e6:e5:c2:ad:94:4c:65:48:6f:46:9d:3e:2d:
                    de:0c:94:aa:61:e1:9e:48:12:08:23:4f:ee:1f:03:
                    be:34:b2:a7:5f:6a:d2:9e:2b:f1:94:23:6f:eb:63:
                    81:32:61:3a:b1:bd:ee:fb:dd:ff:c0:71:21:bf:54:
                    bc:72:0d:ed:60:3a:e5:cc:98:51:e5:13:d2:26:46:
                    5b:1d:48:57:c2:3a:e8:be:7b:bb:e3:14:ec:3a:17:
                    c9:71:31:d1:ab:09:46:52:ad:3d:88:33:ba:33:18:
                    e8:ef:83:a6:e3:d3:f8:d1:95:3e:bd:73:14:2c:d7:
                    b7:0e:58:6c:bf:f0:2a:75:b6:39:3a:df:90:64:bf:
                    cc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B3:93:D8:99:56:0D:7F:A0:63:E8:62:2A:7B:77:D2:0F:4C:9D:77
            X509v3 Authority Key Identifier:
                keyid:DB:C6:F2:25:6D:DE:5C:2C:46:A8:0E:B2:43:2F:25:72:ED:C5:37:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e2:78:5c:a0:15:57:ef:81:84:9c:09:0b:9c:ef:db:c2:f8:
         b3:31:be:02:41:d6:dc:cc:28:ea:c5:92:8e:26:80:ef:d0:8b:
         31:61:fe:8c:67:27:58:45:e6:ba:db:f4:c5:20:b3:a8:8e:7d:
         5f:56:fb:9b:38:49:88:bf:50:ef:ec:78:6d:10:5a:86:d1:b0:
         fb:93:56:f7:34:08:fc:b6:e9:a3:7b:92:c8:77:4b:14:a8:78:
         68:0e:3a:c2:87:c3:27:57:78:f2:79:e8:e2:a6:17:d7:b7:ba:
         1d:e0:cc:7b:06:7e:10:07:80:84:0f:38:6f:15:68:b5:b8:93:
         16:10:7c:8d:02:b9:c6:95:80:91:71:74:0c:c5:b7:f4:45:02:
         83:10:ea:d5:74:b4:fd:68:4c:62:ff:d2:5c:16:89:19:00:37:
         ee:92:8e:da:78:aa:7f:4c:e4:97:dd:61:02:48:ac:d4:ae:75:
         dd:e0:73:be:eb:02:5b:d6:fd:67:a1:bd:d9:56:7d:7b:a9:e6:
         36:8f:b4:f7:15:4e:d5:0b:80:72:6c:7b:3b:ee:58:45:0f:62:
         7d:f6:73:c1:a8:b9:bb:3e:a0:f0:be:e1:3f:50:7b:dd:13:00:
         bb:33:f0:4f:4b:b9:fc:d2:61:c0:89:80:c7:0b:9e:5f:53:04:
         c8:8e:e9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:39 2025 by rpki-client