Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft
File:                     Iin2usLWDFC9Hk9Y9CwMobD4m28.mft (raw, json)
Hash identifier:          NoAXfajMk9sgE+GvJMIS9DcI7Tw7UKlNQcW8xyUPLvg=
Subject key identifier:   5E:13:9C:F1:79:76:28:3E:F9:33:60:67:E7:E2:5D:02:11:E7:6E:DA
Authority key identifier: 22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F
Certificate issuer:       /CN=A91B8C13/serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F
Certificate serial:       3455
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft
Manifest number:          3455
Signing time:             Fri 31 Jan 2025 15:21:20 +0000
Manifest this update:     Fri 31 Jan 2025 15:21:19 +0000
Manifest next update:     Fri 07 Feb 2025 15:21:19 +0000
Files and hashes:         1: Iin2usLWDFC9Hk9Y9CwMobD4m28.crl (hash: KXyXtFxvSPc+YqrSVmWBwOTZ/0RvmLNUWYMFt9Ni2tw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13397 (0x3455)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8C13/serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F
        Validity
            Not Before: Jan 31 15:21:19 2025 GMT
            Not After : Feb  7 15:21:19 2025 GMT
        Subject: CN=679cea70-bcfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:96:74:61:17:a7:e7:7b:38:a8:6d:76:1d:db:
                    8e:ac:ab:b4:7c:08:1c:b4:5c:f6:0a:15:65:a1:eb:
                    e6:f2:7c:47:59:bf:0f:22:2e:e7:7a:6d:9a:41:74:
                    77:f5:19:9f:55:1a:5a:7f:16:4e:61:65:f5:f0:75:
                    24:97:f8:61:c0:3b:07:3b:d8:e8:79:6d:9a:c9:89:
                    e5:d3:a7:8b:d2:c3:17:5c:3f:93:db:26:5b:65:03:
                    59:2b:2c:2c:88:62:98:50:5f:02:fa:29:63:0c:5d:
                    14:20:d3:36:d2:b3:e9:e7:1e:cc:c7:6d:1b:fe:c3:
                    49:7b:ca:f6:81:d7:6d:ea:83:f3:ee:c0:f1:03:38:
                    04:54:02:fe:a7:fa:0c:85:3c:cf:38:ef:cd:bf:04:
                    1c:27:99:93:29:b1:c3:61:4a:43:e2:85:6a:91:ef:
                    ef:7f:c6:7e:bd:52:92:b5:22:3f:61:11:a4:2c:38:
                    1a:34:04:19:ac:34:36:68:4e:8d:6a:e3:44:e9:43:
                    94:3f:d0:29:e7:3d:86:01:d9:a8:b1:ad:c8:e2:24:
                    e3:d9:f9:ec:48:7a:b0:3a:99:d5:69:21:68:bc:b3:
                    0e:cd:58:99:f1:18:03:3f:e2:0c:e3:b3:39:00:03:
                    67:5d:9f:03:e1:86:7f:65:be:f3:f0:ca:b2:8b:b1:
                    ac:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:13:9C:F1:79:76:28:3E:F9:33:60:67:E7:E2:5D:02:11:E7:6E:DA
            X509v3 Authority Key Identifier:
                keyid:22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:45:68:87:b4:73:75:e2:0d:15:ef:d4:fe:31:fe:f4:b3:cc:
         4a:2f:14:0e:08:0d:f6:72:ce:92:12:de:45:26:7f:90:f6:f6:
         80:02:be:4a:d1:e5:d4:f3:ed:70:f5:4a:8d:60:77:3b:db:05:
         0d:3b:90:aa:95:ed:f4:81:27:9c:59:66:b9:c0:86:ce:7a:e7:
         2c:76:65:11:ea:ec:a3:46:7b:70:57:b6:81:c5:c0:e4:b7:17:
         a0:3e:22:38:ef:0f:d7:c6:1d:d2:90:40:da:17:66:8a:74:1c:
         e8:22:e2:c5:f4:40:54:ec:2e:b0:93:38:06:84:de:8a:9f:92:
         7e:8c:8d:cc:1c:02:43:eb:7a:5f:a8:cd:19:ea:bf:27:35:62:
         9e:1a:bc:30:9d:67:47:d3:ce:88:82:74:57:cb:b2:77:ee:cf:
         0c:14:ad:e4:f0:dd:0e:68:a9:21:0f:80:27:47:0b:69:63:5e:
         62:03:93:03:f5:b7:f0:62:ad:00:ae:03:75:ce:b3:99:1e:fe:
         d4:9a:9c:8e:a3:5d:52:b4:d4:40:f9:b2:3d:56:ec:04:46:0a:
         6f:2c:77:04:0a:60:38:c0:f5:f5:0a:0b:5b:7b:14:87:95:f9:
         35:d0:3c:1e:2c:25:d3:92:3c:03:8e:b3:82:e1:28:4c:8d:51:
         0b:85:30:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:00:25 2025 by rpki-client