Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft
File:                     jos0Y56lTfgQuSvLp0JwTkyIQsI.mft (raw, json)
Hash identifier:          /+V1F9TgFXlcbvJK87L06hkKOfTy5MdFvt9Uk76aPOA=
Subject key identifier:   A0:E9:2D:4F:E8:01:D4:71:44:B3:4D:B0:6F:E2:F1:11:1C:19:DB:36
Authority key identifier: 8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2
Certificate issuer:       /CN=A91B4C1B/serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft
Manifest number:          52
Signing time:             Fri 31 Jan 2025 06:16:47 +0000
Manifest this update:     Fri 31 Jan 2025 06:16:46 +0000
Manifest next update:     Fri 07 Feb 2025 06:16:46 +0000
Files and hashes:         1: jos0Y56lTfgQuSvLp0JwTkyIQsI.crl (hash: E4qj5TXJE/EK/rL70y/aA15AllE/ULGmZX0eZgEKRnA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4C1B/serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2
        Validity
            Not Before: Jan 31 06:16:46 2025 GMT
            Not After : Feb  7 06:16:46 2025 GMT
        Subject: CN=679c6acf-121a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ae:79:c8:14:4f:b2:b4:e3:6e:f4:4d:02:13:
                    be:d1:c5:fa:42:80:bc:47:1d:5c:de:04:1b:d7:15:
                    4d:fb:aa:ca:35:80:e3:bf:0e:96:46:f6:74:83:b4:
                    e6:a4:b4:51:db:b9:2b:9f:84:60:ec:76:14:1e:f5:
                    ba:4e:d3:f5:9e:65:66:00:a6:6e:58:ff:d3:59:aa:
                    f1:af:d7:25:64:52:ab:63:55:7a:a7:73:13:8f:03:
                    0f:4d:57:83:fe:5d:3b:4d:c1:9a:77:f2:1e:35:1f:
                    f9:c8:db:fc:01:8b:36:18:67:45:a0:06:ed:79:56:
                    71:4d:ee:22:04:d1:b1:37:e2:b9:0b:53:89:2c:ac:
                    e0:eb:5d:f7:63:5f:8d:93:a1:33:13:c5:b5:bd:86:
                    55:fb:53:18:9a:a9:d2:98:73:29:5b:a6:30:dc:c9:
                    a9:3d:93:e6:22:bc:d9:0c:e5:e8:3b:1f:1a:de:73:
                    d9:f3:94:43:87:32:31:57:1c:46:ef:83:47:d9:13:
                    11:e4:46:1e:ec:28:92:e1:ba:88:28:f1:36:2d:91:
                    16:ff:48:46:08:da:88:df:35:41:54:66:2e:99:8f:
                    94:f8:17:90:c7:09:a8:8f:9d:bc:7a:18:4b:c8:e3:
                    a2:13:2c:98:7b:f4:89:b7:60:c7:91:26:68:c3:16:
                    d3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E9:2D:4F:E8:01:D4:71:44:B3:4D:B0:6F:E2:F1:11:1C:19:DB:36
            X509v3 Authority Key Identifier:
                keyid:8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:c0:a8:23:54:09:7c:17:1a:3a:43:d9:3e:6b:34:f3:98:b6:
         8d:0f:9c:32:7c:61:42:21:ef:69:7e:ff:40:d1:cf:1a:59:b2:
         e8:bb:71:4f:2c:22:4b:79:fa:c5:19:ef:6f:45:e5:9a:36:56:
         32:72:16:e3:69:85:07:37:52:bb:c1:e9:7c:7a:a7:72:4a:0b:
         5a:00:c4:81:5c:01:2c:22:58:3d:bb:ae:c6:71:c1:be:09:53:
         a3:75:38:0e:a6:11:05:4d:09:62:53:11:f2:88:79:e0:70:62:
         a9:6a:18:a6:ef:97:b2:27:b9:0a:64:76:46:6f:b2:93:30:91:
         65:74:0e:6b:e8:b2:c3:f6:3e:9f:40:3f:3e:54:be:c4:da:9b:
         f3:a5:76:5a:c8:6e:46:fd:40:f3:19:82:5c:4c:1d:bf:b5:56:
         9c:28:3d:3a:12:6d:7b:88:f8:82:6c:0f:76:89:cb:c9:5a:20:
         d5:cb:f3:cd:3b:9f:71:c7:52:5f:8d:e2:62:d3:d6:07:c2:ec:
         0a:d9:9e:bf:57:02:35:49:00:d5:c5:38:5f:99:c5:91:79:fb:
         eb:11:37:8f:f9:7d:a5:a8:d2:36:64:b1:c9:1a:8b:4c:3c:40:
         21:1c:26:c0:4e:f7:cd:e0:d4:88:96:e9:99:e4:5c:13:16:b6:
         97:ae:8b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:00 2025 by rpki-client