Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft
File:                     7LW7UwpypAlWiey7FY8q5e_pElU.mft (raw, json)
Hash identifier:          xYNPIFY788QkDQ5M6Ip+5f5AuaF+0Nf98qiSbWMs30Q=
Subject key identifier:   34:54:24:78:07:73:5C:B7:E5:24:71:AF:02:6D:11:10:9A:DC:D4:05
Authority key identifier: EC:B5:BB:53:0A:72:A4:09:56:89:EC:BB:15:8F:2A:E5:EF:E9:12:55
Certificate issuer:       /CN=A91B9FB9/serialNumber=ECB5BB530A72A4095689ECBB158F2AE5EFE91255
Certificate serial:       3444
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft
Manifest number:          3441
Signing time:             Fri 31 Jan 2025 15:12:27 +0000
Manifest this update:     Fri 31 Jan 2025 15:12:27 +0000
Manifest next update:     Fri 07 Feb 2025 15:12:27 +0000
Files and hashes:         1: 7LW7UwpypAlWiey7FY8q5e_pElU.crl (hash: zGgNGuHlsYHB+jDFLkCft7/ohslqJFUa42rWS4vMhao=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13380 (0x3444)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9FB9/serialNumber=ECB5BB530A72A4095689ECBB158F2AE5EFE91255
        Validity
            Not Before: Jan 31 15:12:27 2025 GMT
            Not After : Feb  7 15:12:27 2025 GMT
        Subject: CN=679ce85b-d10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:4c:fa:6a:91:e4:a3:cc:f5:2f:f2:bc:b4:
                    75:4f:fd:d7:31:1c:cc:04:71:25:5e:45:2d:13:f0:
                    4d:23:2c:e6:0f:c6:90:c6:d0:43:7c:e9:ec:ba:f3:
                    13:31:3d:cb:e7:aa:b1:ec:79:fc:cc:e1:20:14:1e:
                    d7:30:6d:f4:f7:3c:e1:d1:f1:19:b4:59:7f:84:14:
                    c8:39:ac:d3:63:78:1f:ed:c2:33:40:b6:0f:0c:14:
                    2b:a2:31:04:0a:62:9e:7f:73:1d:97:cc:71:12:b5:
                    bf:bd:1b:f0:f3:eb:ce:e3:38:4e:e0:45:da:70:c1:
                    94:e0:77:a3:76:40:5c:13:ab:95:ba:05:16:5d:ec:
                    1b:ba:25:b4:2a:28:93:56:65:29:83:e5:53:8c:70:
                    77:97:9b:ed:b1:63:6c:7a:b5:dd:d2:51:e9:bf:e4:
                    45:d2:31:12:9a:1e:1f:ff:d6:dc:06:ed:74:ee:3f:
                    c5:80:b6:77:9b:50:05:b4:f5:74:f2:2d:43:7d:47:
                    20:52:b0:d1:20:12:34:f9:3e:62:8a:b8:93:48:0b:
                    4f:fd:31:60:9f:1f:3c:a7:bf:89:42:c3:cd:83:b3:
                    8d:de:5b:80:9c:0d:fd:74:52:ef:b9:db:59:35:18:
                    74:3c:4e:f4:59:75:5c:a8:de:37:4d:18:d4:1c:77:
                    36:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:54:24:78:07:73:5C:B7:E5:24:71:AF:02:6D:11:10:9A:DC:D4:05
            X509v3 Authority Key Identifier:
                keyid:EC:B5:BB:53:0A:72:A4:09:56:89:EC:BB:15:8F:2A:E5:EF:E9:12:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:45:3b:9a:b5:03:08:24:0c:09:96:9b:8a:43:d9:f7:88:03:
         45:fb:7b:2e:22:32:a2:85:84:f2:bf:f1:f1:55:d3:f6:3f:5a:
         33:c3:63:be:45:d3:06:80:88:72:2a:88:96:1e:5f:81:9d:7c:
         68:d2:4d:c5:b6:39:46:8a:40:44:01:ce:5c:70:b9:f5:b7:d2:
         90:e2:c4:e4:04:b2:17:19:0a:67:4c:d6:0a:28:d4:19:22:b0:
         00:4e:6e:c1:27:c3:1a:0a:b9:6a:bd:e6:d5:01:0b:f9:45:1a:
         2a:82:d7:23:7c:11:f3:04:14:08:22:80:34:45:17:83:01:d3:
         59:df:14:4a:d6:7e:67:00:17:3a:91:af:f6:fd:0a:5c:e6:d5:
         a2:04:4b:68:0a:bf:00:c2:b3:e5:8f:07:1f:4c:70:c2:a7:85:
         02:53:f1:df:02:9e:2f:24:ac:a2:75:35:b6:03:6a:b4:5e:23:
         25:3a:83:5d:cb:71:0f:3e:81:70:43:c5:9d:d4:d8:dd:81:9a:
         e6:a3:ba:ea:a8:68:41:cf:88:8c:f7:45:18:02:5c:cf:35:04:
         8a:7d:fd:36:b6:00:a1:27:dc:3c:1b:66:dd:a5:32:e4:11:d4:
         78:ae:b9:87:35:80:a1:73:86:3e:c6:fd:b0:83:3b:ea:c7:e6:
         62:e3:36:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlGQjkxMTAvBgNVBAUTKEVDQjVCQjUzMEE3MkE0MDk1Njg5RUNCQjE1OEYyQUU1
RUZFOTEyNTUwHhcNMjUwMTMxMTUxMjI3WhcNMjUwMjA3MTUxMjI3WjAYMRYwFAYD
VQQDEw02NzljZTg1Yi1kMTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuSBM+mqR5KPM9S/yvLR1T/3XMRzMBHElXkUtE/BNIyzmD8aQxtBDfOnsuvMT
MT3L56qx7Hn8zOEgFB7XMG309zzh0fEZtFl/hBTIOazTY3gf7cIzQLYPDBQrojEE
CmKef3Mdl8xxErW/vRvw8+vO4zhO4EXacMGU4HejdkBcE6uVugUWXewbuiW0KiiT
VmUpg+VTjHB3l5vtsWNserXd0lHpv+RF0jESmh4f/9bcBu107j/FgLZ3m1AFtPV0
8i1DfUcgUrDRIBI0+T5iiriTSAtP/TFgnx88p7+JQsPNg7ON3luAnA39dFLvudtZ
NRh0PE70WXVcqN43TRjUHHc2twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRUJHgH
c1y35SRxrwJtERCa3NQFMB8GA1UdIwQYMBaAFOy1u1MKcqQJVonsuxWPKuXv6RJV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUZCOS8yMTE0RDU2ODFE
QTQxMUUyODQxQUYyOTkwOEIwMkNEMi83TFc3VXdweXBBbFdpZXk3Rlk4cTVlX3BF
bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdMVzdVd3B5cEFsV2lleTdGWThxNWVfcEVsVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUZCOS8yMTE0RDU2ODFEQTQxMUUyODQxQUYyOTkwOEIwMkNEMi83TFc3VXdweXBB
bFdpZXk3Rlk4cTVlX3BFbFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAHRTuatQMIJAwJlpuKQ9n3iANF+3suIjKihYTyv/HxVdP2P1ozw2O+
RdMGgIhyKoiWHl+BnXxo0k3FtjlGikBEAc5ccLn1t9KQ4sTkBLIXGQpnTNYKKNQZ
IrAATm7BJ8MaCrlqvebVAQv5RRoqgtcjfBHzBBQIIoA0RReDAdNZ3xRK1n5nABc6
ka/2/Qpc5tWiBEtoCr8AwrPljwcfTHDCp4UCU/HfAp4vJKyidTW2A2q0XiMlOoNd
y3EPPoFwQ8Wd1NjdgZrmo7rqqGhBz4iM90UYAlzPNQSKff02tgChJ9w8G2bdpTLk
EdR4rrmHNYChc4Y+xv2wgzvqx+Zi4zZn
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:25 2025 by rpki-client