Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
File:                     l0tKVlSG4EjQwXaY1yJ2cM88mac.mft (raw, json)
Hash identifier:          lZtmIbF+al91NBmuncfLWMlXoQNhKF+HrlTbusVKb8A=
Subject key identifier:   5A:79:BB:04:EC:E3:8F:91:26:21:96:90:81:E7:DC:E5:41:D6:9F:C0
Authority key identifier: 97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7
Certificate issuer:       /CN=A916069A/serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
Manifest number:          2E
Signing time:             Fri 31 Jan 2025 06:44:05 +0000
Manifest this update:     Fri 31 Jan 2025 06:44:05 +0000
Manifest next update:     Fri 07 Feb 2025 06:44:05 +0000
Files and hashes:         1: l0tKVlSG4EjQwXaY1yJ2cM88mac.crl (hash: vhcXDEbuSHbPM3Ngqyk8HyxtVMPJvtAif6DNVYAkh1E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916069A/serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7
        Validity
            Not Before: Jan 31 06:44:05 2025 GMT
            Not After : Feb  7 06:44:05 2025 GMT
        Subject: CN=679c7135-f64e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:93:8a:d1:5e:ed:19:29:26:e8:d4:33:45:ee:
                    8e:ac:44:97:24:4f:fc:f6:b2:3e:2c:96:22:69:72:
                    fb:c8:b6:41:e9:f1:9b:89:41:df:8f:b6:f6:18:12:
                    a3:f3:31:51:c2:ea:9b:82:25:bd:e8:bb:b8:79:20:
                    81:3f:c2:36:23:21:06:18:74:f5:85:80:28:e9:39:
                    69:cf:9d:1d:d1:a8:ef:4d:9a:bf:f0:7a:e8:df:a5:
                    34:c8:e5:57:0f:41:46:8f:40:a2:f0:9a:a5:a4:4c:
                    7b:81:e9:5f:43:97:11:ed:a7:35:2e:0f:29:69:00:
                    73:5b:08:58:2e:1f:fa:41:f0:92:05:2a:96:d2:83:
                    94:79:b1:e1:b7:d8:2d:a8:11:0b:aa:a5:39:5d:c3:
                    b4:14:93:0d:c6:85:bd:0f:de:a4:81:18:2b:93:cc:
                    c7:c9:ce:7d:18:fe:d8:ed:65:5a:ef:c3:5f:c2:0a:
                    30:3f:52:16:3a:05:81:c6:76:fb:db:e3:f3:99:19:
                    f0:37:50:37:96:92:89:86:2a:f4:1c:c0:6f:ec:b7:
                    cb:4a:9c:63:61:1f:2c:09:30:6d:96:ca:0b:ca:79:
                    02:1d:3a:64:ab:aa:d0:bf:67:1d:57:e1:3c:45:6e:
                    eb:f4:0f:29:52:d6:70:2b:45:dc:98:62:b8:97:fa:
                    52:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:79:BB:04:EC:E3:8F:91:26:21:96:90:81:E7:DC:E5:41:D6:9F:C0
            X509v3 Authority Key Identifier:
                keyid:97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f5:e6:49:3a:68:75:03:77:62:e9:10:8e:38:a4:70:d9:d5:
         12:e0:4c:b3:65:5a:74:9f:fe:61:21:92:4c:80:e7:cf:ff:11:
         dd:47:aa:c7:5e:29:e2:d1:da:d4:80:00:b7:3f:f9:50:96:29:
         5a:19:21:00:db:d1:6c:b4:99:69:5c:65:15:4a:4e:87:6d:0e:
         3a:f8:bb:ff:b6:17:ba:db:d5:6f:94:18:7c:66:9f:ce:9c:6a:
         24:3b:d7:74:83:17:ca:cb:4a:8f:0f:20:9c:dd:cb:36:79:31:
         ba:09:66:db:29:b3:da:84:2b:73:24:7a:07:f6:44:d5:d6:00:
         07:26:d2:2b:d5:36:46:39:7b:91:5d:e7:65:f8:78:35:54:39:
         ac:37:4e:13:80:39:d9:5c:96:b2:54:ac:3f:22:e4:0d:09:4d:
         1f:9b:1b:99:b1:a9:11:82:08:b3:7f:4a:38:17:25:26:c5:c7:
         0a:28:a6:22:0c:0f:51:3a:e0:5a:d9:32:ce:ce:db:cb:0d:02:
         a8:eb:15:e6:43:f9:60:37:f4:2a:73:37:cd:29:0b:a0:a6:49:
         13:cb:ca:09:56:9a:2f:cc:8a:7a:de:b1:f4:39:07:7a:f1:25:
         9f:c4:2a:c4:01:39:74:40:6d:67:2d:53:ac:3c:5a:27:d9:1f:
         8f:db:ca:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:50 2025 by rpki-client