Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft
File:                     oNGf1mnyVeFici98GdiGS7Brc5k.mft (raw, json)
Hash identifier:          UiKMe7jCRTqnFhVblaPlONgqpJzum0a353+STj1v3yY=
Subject key identifier:   0F:5F:BE:E8:8D:FF:CD:82:5C:27:61:CC:10:64:2D:82:F5:98:CA:D8
Authority key identifier: A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99
Certificate issuer:       /CN=A91DEC72/serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft
Manifest number:          0114
Signing time:             Fri 31 Jan 2025 03:59:50 +0000
Manifest this update:     Fri 31 Jan 2025 03:59:49 +0000
Manifest next update:     Fri 07 Feb 2025 03:59:49 +0000
Files and hashes:         1: oNGf1mnyVeFici98GdiGS7Brc5k.crl (hash: EFzKXa0ozlC4jGDZhzd55kJ0+8vqF1DUR9fvd6WYriU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEC72/serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399
        Validity
            Not Before: Jan 31 03:59:49 2025 GMT
            Not After : Feb  7 03:59:49 2025 GMT
        Subject: CN=679c4ab6-8b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4d:f1:4d:7b:c6:d1:85:70:79:f7:50:ae:f9:
                    6a:55:0c:53:8c:70:11:c5:f0:51:3f:ca:c1:05:04:
                    20:91:65:88:30:6d:33:b5:16:ee:6e:8e:a3:7d:41:
                    c8:d7:93:53:c8:63:11:9f:72:be:0e:e4:cd:46:40:
                    37:4c:0a:fb:74:54:0f:3a:7a:1e:b5:3a:ff:5d:1e:
                    77:6d:ba:d2:83:40:20:4b:c4:56:c9:dd:c2:d0:e6:
                    ed:dc:08:31:04:48:88:c5:66:43:87:65:5a:0b:f0:
                    2f:1e:b9:37:a3:58:8c:79:a8:f1:af:37:37:27:32:
                    bc:1c:c8:00:96:7e:2b:95:d0:70:ff:bc:7a:19:eb:
                    2a:8f:ab:55:96:c6:16:24:c9:5f:0c:45:ca:ac:8b:
                    08:f6:21:e7:a1:91:13:9d:fd:b0:e8:8f:7f:89:c6:
                    32:b6:9d:34:27:63:45:1b:8b:0d:05:44:a3:d5:f2:
                    5c:21:8c:4a:07:8d:c0:46:23:40:cf:49:12:19:6e:
                    17:5a:28:9f:a7:7d:71:55:32:91:14:59:ba:df:b0:
                    89:26:60:c4:9f:1f:71:a0:60:e7:fa:de:3a:0d:9c:
                    e7:5c:a2:87:e7:c3:22:78:2b:ab:98:4a:38:09:6f:
                    9d:ed:20:07:5d:4b:81:fb:e0:3a:8e:12:21:01:ab:
                    2f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5F:BE:E8:8D:FF:CD:82:5C:27:61:CC:10:64:2D:82:F5:98:CA:D8
            X509v3 Authority Key Identifier:
                keyid:A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ff:aa:e8:f5:91:69:9d:4d:dc:68:ee:70:0e:71:a9:73:ef:
         d2:5f:45:4a:e2:9d:1a:c9:be:f3:08:54:e1:fd:ad:de:30:66:
         29:c5:62:0b:33:79:25:43:fa:40:45:7c:58:fe:e7:08:17:a1:
         79:42:37:30:8e:90:ad:f4:85:7c:dc:63:09:46:65:61:e7:8e:
         b6:fd:c2:76:e2:eb:98:fa:83:5b:4d:0f:f5:2a:76:a8:45:6a:
         dc:2a:43:ad:2b:76:e1:32:55:da:3b:77:5a:c7:24:77:99:ba:
         f4:28:f4:9e:d8:18:d8:54:1d:7e:b2:8a:a4:93:b7:ed:ea:1d:
         90:74:e1:cb:bf:78:66:15:c9:01:fa:9e:93:5d:dd:0f:7b:98:
         5f:e3:08:39:16:35:41:31:b2:71:4f:d7:38:ab:bc:37:dd:23:
         37:98:9d:58:d6:3f:0e:4e:e0:7c:11:4d:87:df:3c:70:b2:4d:
         0e:57:3c:b2:1f:f2:ef:da:df:c5:d2:03:76:57:9b:e2:b1:9c:
         ea:c2:1c:8c:f6:2c:ef:79:f8:2c:a7:54:5f:03:3e:fd:96:0c:
         6a:18:4a:33:43:47:6e:4a:4f:e0:85:20:ae:0f:9c:a6:03:8b:
         b8:a3:ba:42:1b:aa:87:88:38:56:b5:08:73:1f:eb:fd:62:05:
         cc:8e:12:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:02 2025 by rpki-client