Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
File:                     d324l0Vw6bbATiZX5tClA3xxiGs.mft (raw, json)
Hash identifier:          v/FStwNLyfoicmGAy7gJwANcnj33phT9tnDoLaJQdJA=
Subject key identifier:   BA:74:06:66:29:CE:0F:86:C7:41:FD:A3:EF:44:F2:47:71:70:42:9C
Authority key identifier: 77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B
Certificate issuer:       /CN=A91AF207/serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
Manifest number:          15
Signing time:             Fri 31 Jan 2025 07:03:38 +0000
Manifest this update:     Fri 31 Jan 2025 07:03:37 +0000
Manifest next update:     Fri 07 Feb 2025 07:03:37 +0000
Files and hashes:         1: d324l0Vw6bbATiZX5tClA3xxiGs.crl (hash: Y6WRb+El6ZZrguRoD4Bp+smHmtfc9/+9OarA+583+Cs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF207/serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B
        Validity
            Not Before: Jan 31 07:03:37 2025 GMT
            Not After : Feb  7 07:03:37 2025 GMT
        Subject: CN=679c75ca-0112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:32:15:24:2a:44:b6:cb:dc:d7:bd:d0:0f:b7:
                    9e:4a:f0:da:96:63:67:02:0b:23:af:d3:d7:f3:ce:
                    5f:e9:4e:0b:7e:3b:a7:49:03:0d:05:28:54:89:13:
                    02:30:f5:99:69:06:30:16:3f:21:78:13:c0:04:9c:
                    66:a0:0c:c5:0f:b5:f3:c2:7e:99:bc:37:be:15:12:
                    c9:9f:0c:d1:c7:03:ae:ba:52:14:2c:d5:35:8c:40:
                    2d:4f:82:c0:3b:ac:e6:c8:d7:1e:e1:9c:4f:ee:c0:
                    8c:5b:20:53:31:40:7a:26:30:c1:b9:7c:14:67:63:
                    8d:6f:3f:0b:0b:3c:7a:24:ab:ca:70:4c:ce:1a:f0:
                    36:4a:e8:14:66:3a:6e:f5:c4:f9:25:40:fd:5e:39:
                    db:bb:50:25:c1:71:9c:b5:e1:b1:ac:b4:0d:2c:1a:
                    58:3a:44:b9:c9:cf:98:bb:18:6c:7c:17:e1:6d:7c:
                    aa:6c:2b:0d:33:7c:21:37:b6:23:5d:d4:df:df:5b:
                    d5:cf:60:c0:46:d0:de:7d:92:82:45:ca:00:fa:36:
                    66:d4:b2:c5:93:5f:17:73:53:38:00:18:ce:8e:a5:
                    f6:33:d0:37:0e:34:40:67:21:36:80:e3:c3:52:d5:
                    ed:55:2b:12:7d:2b:62:55:3f:8e:2e:12:29:55:5c:
                    e3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:74:06:66:29:CE:0F:86:C7:41:FD:A3:EF:44:F2:47:71:70:42:9C
            X509v3 Authority Key Identifier:
                keyid:77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:65:e2:bb:4c:03:ba:8d:f2:49:74:51:51:67:25:a4:dc:c0:
         f2:4c:54:a2:80:82:eb:f8:a1:aa:01:91:68:1e:dd:80:00:30:
         60:4d:05:02:4c:d5:69:3a:7f:8f:b4:81:c1:3d:d9:99:ca:99:
         61:69:db:7c:5a:54:cb:7c:67:40:e9:1c:d2:4e:11:28:f4:aa:
         3a:54:27:33:f2:9f:fe:1d:b5:3e:c4:4b:3b:4e:22:f8:47:94:
         e9:df:c3:59:4c:21:f6:ba:4a:65:13:e1:2a:15:29:90:75:bf:
         31:31:39:71:a1:5e:47:ab:5c:b4:d1:a2:4e:fb:3f:9b:38:95:
         4d:87:02:22:5a:ab:6f:5d:87:0f:6c:b5:13:75:78:80:e6:fe:
         99:13:b9:29:9b:9b:8d:11:1d:83:0e:ff:e3:21:70:5f:6a:5c:
         2c:4e:27:04:f3:8f:2d:0c:2c:9a:47:10:f4:0b:b2:50:24:d8:
         15:62:55:cc:54:35:eb:9f:d7:6f:64:c0:07:6d:1d:50:73:e8:
         42:87:fc:3b:26:53:07:27:d7:74:b3:3c:59:bc:36:df:96:d8:
         36:42:ca:af:0c:c1:48:89:5d:8b:57:3a:1f:22:55:1b:b4:b1:
         71:e0:3f:35:d9:4d:33:78:04:3c:db:57:1d:7a:14:90:cb:2a:
         a6:0c:d1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:31 2025 by rpki-client