Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
File:                     ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json)
Hash identifier:          w9p0QjkCvwEMO6QxJcmMYYTKyoerxAoUyVepwfRzmwI=
Subject key identifier:   47:C8:D2:E3:FD:80:27:D5:23:4B:36:DF:65:5E:F0:EF:6B:88:D2:F1
Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
Certificate issuer:       /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Certificate serial:       02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
Manifest number:          02
Signing time:             Thu 30 Jan 2025 18:16:20 +0000
Manifest this update:     Thu 30 Jan 2025 18:16:20 +0000
Manifest next update:     Thu 06 Feb 2025 18:16:20 +0000
Files and hashes:         1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: fobo5A1smPiRr/QKLOI+QAv7TjZiks/7QSuzRCAI/UA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
        Validity
            Not Before: Jan 30 18:16:20 2025 GMT
            Not After : Feb  6 18:16:20 2025 GMT
        Subject: CN=679bc1f4-5af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:4b:70:27:37:ef:58:99:7e:00:89:7d:be:
                    8e:42:36:17:c9:ed:b9:43:dc:b8:64:2e:a7:73:53:
                    da:8e:ba:c9:c9:62:1d:dd:25:73:0b:24:42:b3:13:
                    e2:49:a4:73:c8:ef:b9:79:c9:f3:75:61:fc:1e:83:
                    66:a2:e3:de:26:f7:b0:18:6d:ac:86:31:a1:f2:12:
                    6c:db:79:bd:d3:69:60:17:ed:ef:01:36:a3:06:4d:
                    71:e8:68:bd:ca:5e:25:18:d7:7c:93:f3:c0:56:db:
                    70:1c:93:dc:0d:4a:2e:10:a2:91:6d:93:32:82:5f:
                    44:ee:11:15:10:04:d5:9a:02:54:37:bd:8b:4e:2d:
                    1e:9d:ff:7b:dd:3f:0e:54:d7:eb:83:28:51:f9:1e:
                    38:37:56:48:58:54:da:fb:66:4e:1e:32:0d:b3:4f:
                    80:7a:45:be:b5:8f:dd:6e:6b:80:a1:5f:52:e6:33:
                    5a:f3:e6:79:bb:e9:84:e5:85:8a:a2:16:46:a5:b5:
                    33:3f:04:f1:0f:0b:56:c0:76:2d:b8:15:38:1a:ea:
                    59:86:f0:42:3f:16:c3:37:3e:b9:66:fc:c9:05:b4:
                    9d:29:a1:44:db:e5:f9:86:b2:ff:d0:96:63:5a:12:
                    10:db:23:91:db:59:a4:a0:2e:3b:1f:3f:a6:68:e3:
                    18:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C8:D2:E3:FD:80:27:D5:23:4B:36:DF:65:5E:F0:EF:6B:88:D2:F1
            X509v3 Authority Key Identifier:
                keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:de:13:08:e9:ca:4d:e3:4f:38:4d:bd:05:3e:f3:5b:2b:98:
         e2:e3:bb:53:c7:97:6d:5f:a2:42:7a:fc:43:3d:dd:a6:a5:94:
         51:88:06:5c:5f:a8:db:01:15:9e:cd:65:49:5f:97:60:35:a7:
         8d:24:67:32:83:bb:b0:0f:6e:5c:82:ab:75:b9:a9:d7:ad:7a:
         39:ca:b0:55:86:d3:6e:60:7c:54:5b:28:17:3f:4e:f5:89:bb:
         20:9e:7a:e3:c0:5c:64:59:d9:02:4e:c7:77:26:2e:de:5f:ae:
         d6:d5:0f:bb:95:17:10:8d:b8:ee:59:4b:67:a0:fc:19:8e:bd:
         9c:9a:b9:08:8f:88:d8:e3:c4:63:fa:5f:6d:26:46:91:45:e7:
         2e:8e:fa:c6:06:b1:05:66:22:69:f1:75:cb:31:2d:11:c1:c7:
         3a:fb:39:f8:67:1b:8d:07:35:b9:81:a7:a9:d5:1f:c0:d9:1b:
         49:53:f7:d5:0a:94:e6:15:4e:6a:84:7d:4e:0a:2b:85:c3:76:
         21:8c:1c:ea:03:aa:9f:1a:06:bf:f4:8a:56:e0:ac:f8:d8:29:
         2d:f7:b9:a7:a4:f5:10:cb:93:35:30:1f:a5:ff:bb:96:7c:93:
         67:43:c6:46:bc:33:b7:ce:0a:88:46:51:96:e8:6f:54:d1:e5:
         04:54:2a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:04:17 2025 by rpki-client