Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
File:                     FzXLqe4W_oXz0oP6W7lHnZryzIY.mft (raw, json)
Hash identifier:          80Vn7RlRQpXiyARxxVwfwm1oOLbougOFwZzyYLWvVjQ=
Subject key identifier:   07:DB:97:2B:DE:46:75:AC:0C:F3:5C:4A:8E:78:C8:F8:52:6B:92:D7
Authority key identifier: 17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86
Certificate issuer:       /CN=A91757CB/serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
Manifest number:          99
Signing time:             Fri 31 Jan 2025 05:26:06 +0000
Manifest this update:     Fri 31 Jan 2025 05:26:05 +0000
Manifest next update:     Fri 07 Feb 2025 05:26:05 +0000
Files and hashes:         1: FzXLqe4W_oXz0oP6W7lHnZryzIY.crl (hash: K5KYqpmMIncFinZXlazKOG3UwlySrvKIf3WG1qLBI/k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91757CB/serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86
        Validity
            Not Before: Jan 31 05:26:05 2025 GMT
            Not After : Feb  7 05:26:05 2025 GMT
        Subject: CN=679c5eee-83e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f6:fc:ca:65:80:16:13:bd:d4:ae:05:df:90:
                    12:9f:f6:06:a3:58:1b:4b:a7:42:50:1b:27:ec:73:
                    9a:a1:08:5d:10:89:60:bd:54:d2:81:b0:fb:2d:82:
                    29:4a:01:67:8a:91:a7:1a:04:08:1d:e9:7e:2b:f6:
                    85:7b:8c:a9:65:aa:2d:c5:1c:19:64:9e:c4:30:88:
                    fd:b6:ab:b5:a0:92:32:53:f2:f7:41:98:0d:61:ad:
                    e8:f6:26:3d:9c:18:38:62:99:57:2f:1c:e7:ed:3c:
                    ef:ca:ef:c8:f7:18:ee:ca:64:f9:2b:32:7d:0c:00:
                    bf:a4:a4:91:0c:57:2e:7c:a5:67:8a:35:b4:3d:52:
                    ea:be:ad:23:d7:ae:82:b0:99:30:8c:ba:07:7e:a6:
                    19:9b:6a:17:9f:77:58:e4:14:06:46:df:ed:22:01:
                    f0:b1:68:13:b2:6b:b2:e6:fb:42:db:5e:6d:2b:40:
                    8a:15:78:67:6b:f5:50:6c:ae:90:93:0f:71:ff:3e:
                    ed:d1:24:d3:7d:c5:c4:aa:e4:fb:cb:d8:0e:54:e5:
                    8f:7f:dc:5d:11:e2:a3:d9:f6:1e:d8:d0:7a:1b:d9:
                    74:e3:71:9d:65:9c:ce:da:56:09:88:55:cd:15:b1:
                    a5:f3:8f:b7:64:3b:40:3e:45:51:bd:72:fc:2c:64:
                    39:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DB:97:2B:DE:46:75:AC:0C:F3:5C:4A:8E:78:C8:F8:52:6B:92:D7
            X509v3 Authority Key Identifier:
                keyid:17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:93:f5:cd:31:f9:08:8d:9a:d1:65:04:50:b7:14:e3:12:d0:
         39:32:34:ee:c5:5d:71:c1:11:f7:9a:47:d6:ce:a9:1d:a9:51:
         71:1f:41:ec:14:c4:56:b6:c0:10:24:ce:89:0d:3d:70:cc:42:
         70:70:a1:5b:6f:2d:b8:8d:e5:e5:95:77:62:e1:14:22:04:94:
         26:36:27:00:4a:31:7c:63:fc:9c:60:d2:33:d1:24:d1:25:99:
         cb:8c:b8:6d:7e:27:78:ea:97:59:f5:b4:14:a4:10:98:92:bd:
         68:10:27:7a:06:fe:01:b2:85:de:b1:b5:e4:bb:c2:1d:a2:56:
         63:22:60:20:87:1f:9c:25:9f:cb:d9:91:a6:14:ba:51:f7:62:
         65:31:da:19:6c:3f:c2:28:53:b5:71:10:42:03:19:c1:d4:f1:
         d8:73:23:1b:1d:f5:04:b3:71:63:ab:39:fc:65:e6:b2:41:3c:
         78:ac:ef:26:8c:4f:15:ec:cc:38:6f:c0:28:25:74:2f:8a:12:
         14:22:e9:49:c8:84:b6:05:f0:8d:73:60:19:23:7d:9d:20:65:
         5b:8e:69:b3:1a:49:b3:3c:25:08:99:37:6f:ec:6a:20:0c:02:
         de:88:2c:bd:85:86:86:3f:1d:c0:aa:0a:7d:da:57:64:fa:30:
         ff:52:df:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:31 2025 by rpki-client