Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
File:                     daduw5hFLfosNmmexaR2zMWB3lc.mft (raw, json)
Hash identifier:          J+OP4pL1phKCyEpfpPNcTrNjs+ptmTOur4eEoUyMfp0=
Subject key identifier:   7B:89:07:58:10:00:AF:A9:F0:D5:19:14:5F:B8:B5:B1:5E:6C:08:F4
Authority key identifier: 75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57
Certificate issuer:       /CN=A91D62C9/serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57
Certificate serial:       1A1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
Manifest number:          1A1D
Signing time:             Fri 31 Jan 2025 16:21:50 +0000
Manifest this update:     Fri 31 Jan 2025 16:21:50 +0000
Manifest next update:     Fri 07 Feb 2025 16:21:50 +0000
Files and hashes:         1: daduw5hFLfosNmmexaR2zMWB3lc.crl (hash: 7gUa7UkcXC5urZcOmB4Ih4sfe6ezbks9PX9Z3qeG6rg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6685 (0x1a1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D62C9/serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57
        Validity
            Not Before: Jan 31 16:21:50 2025 GMT
            Not After : Feb  7 16:21:50 2025 GMT
        Subject: CN=679cf89e-5a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:61:dd:0f:97:8a:b6:1a:df:f5:0f:61:5f:7d:
                    ba:38:cd:cc:05:36:3f:06:f3:57:87:4c:e2:44:78:
                    87:91:da:d1:f2:69:e1:25:29:31:59:b5:3b:bd:7e:
                    85:85:1d:bd:0b:3f:c5:d6:46:51:19:61:09:37:5f:
                    fa:82:6e:bc:87:8b:49:ac:b7:57:39:43:86:57:b5:
                    76:de:5c:08:eb:a2:ee:f5:8f:dc:3f:23:96:7e:d8:
                    57:97:56:49:63:b3:85:2f:71:56:39:f4:c5:3a:8d:
                    2e:08:75:9b:26:c3:f9:2a:e8:e6:52:54:e5:61:95:
                    0d:be:1d:3a:bf:97:f1:05:f7:77:d1:cc:2e:dc:76:
                    a8:63:2c:b1:3e:f3:5a:d4:a4:64:6a:ad:da:c0:5a:
                    24:bb:30:8d:3b:1b:a5:dc:44:ba:c0:3b:5b:17:35:
                    e0:ab:7a:71:08:fe:e9:51:7a:a6:7a:dc:d0:e8:a2:
                    b7:c1:4a:c1:76:85:74:f6:2e:3b:03:49:94:4e:3f:
                    51:70:9d:37:93:d5:80:3a:1f:87:a0:4f:89:c6:9a:
                    a5:a6:3b:96:2d:8d:e2:f7:f4:31:cf:74:2f:6a:7b:
                    4b:14:19:8d:c4:3a:ea:80:44:02:47:f6:9a:7d:40:
                    77:0d:d2:33:3e:f7:6e:ed:bb:c2:f2:59:18:ee:4e:
                    0f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:89:07:58:10:00:AF:A9:F0:D5:19:14:5F:B8:B5:B1:5E:6C:08:F4
            X509v3 Authority Key Identifier:
                keyid:75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:4a:71:66:83:f6:19:f7:29:93:7c:d3:5d:2b:d9:ab:18:a8:
         80:b8:94:c6:90:87:da:80:90:e0:78:e6:5a:b5:1e:7b:ea:c6:
         26:4c:46:2e:d1:e7:d6:f3:a4:6b:8c:a5:39:5c:b8:4a:f1:04:
         ee:d7:c1:d3:92:54:7f:3c:58:f2:a1:30:70:7e:9d:b9:e6:09:
         52:a7:48:d8:87:04:26:75:df:9c:e9:11:d0:b7:9a:db:24:cc:
         c9:94:6b:ee:8e:65:7f:69:b4:b6:61:7f:56:77:de:9f:82:f7:
         c3:c6:bf:5f:91:a0:19:9f:b1:d2:dd:41:cd:93:0d:c0:30:37:
         bd:e0:44:21:aa:cf:fc:33:be:b2:d8:84:c7:d2:2a:22:ae:68:
         5e:2b:23:8c:79:7b:6e:a8:16:be:0c:92:80:44:1e:c7:15:b2:
         a7:a7:53:9c:07:92:5f:bc:fe:ad:52:5d:2d:78:fa:68:1a:af:
         ca:75:6b:d4:c1:a4:e5:8c:3b:9f:d3:31:3b:b3:42:9b:e6:d6:
         8c:3d:3d:43:9f:a4:26:4c:77:cc:1d:75:37:07:52:8f:78:4a:
         69:93:52:5f:d1:ae:ae:e8:9c:11:f8:78:7c:03:60:32:2c:12:
         b1:76:89:bc:09:80:09:f2:b9:de:a8:52:16:f7:59:95:05:e6:
         a1:69:d1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:46 2025 by rpki-client