Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
File:                     foUuJJ2cR8tllecBfQfeJ8OUrwk.mft (raw, json)
Hash identifier:          xnj4DofZ68JAIoBJKHXY17s6aHr4Dyj20MXmK30xMc8=
Subject key identifier:   14:06:6C:F4:46:61:7A:F3:59:A7:92:F0:EE:62:B5:02:75:2E:A2:3D
Authority key identifier: 7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09
Certificate issuer:       /CN=A91E5D61/serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09
Certificate serial:       3490
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
Manifest number:          4709
Signing time:             Fri 31 Jan 2025 14:20:45 +0000
Manifest this update:     Fri 31 Jan 2025 14:20:44 +0000
Manifest next update:     Fri 07 Feb 2025 14:20:44 +0000
Files and hashes:         1: foUuJJ2cR8tllecBfQfeJ8OUrwk.crl (hash: zxx9N4hWDrAiBiHUgpcgATT8tnKFKvvFjQu1dCu7nak=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13456 (0x3490)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D61/serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09
        Validity
            Not Before: Jan 31 14:20:44 2025 GMT
            Not After : Feb  7 14:20:44 2025 GMT
        Subject: CN=679cdc3d-720c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:c1:79:40:93:9c:76:a1:cf:a8:88:85:2c:
                    4f:9c:13:f8:8e:63:30:89:38:2f:e5:51:13:72:9e:
                    c8:f0:fb:83:e5:f9:42:15:fb:f0:c9:f6:20:9f:98:
                    ee:72:2d:33:5f:09:38:4c:17:d2:d8:b4:08:5a:d2:
                    a2:74:68:6e:58:5c:64:4f:45:0a:8c:a9:23:2a:05:
                    9e:b7:cc:54:1e:02:df:e8:80:05:4b:3e:80:47:bb:
                    9a:95:9b:e6:07:f5:df:a3:9b:e0:db:9f:f8:0c:d8:
                    87:c4:d1:71:fd:45:c4:cc:e7:82:61:4b:a0:77:3d:
                    ea:15:45:e8:84:88:df:af:57:3b:2a:52:c8:89:89:
                    44:0a:06:38:81:23:0e:11:d2:05:81:83:ab:c2:e3:
                    78:ab:d6:d3:e6:4c:ee:be:68:dd:13:35:3f:5a:53:
                    c9:25:a5:ed:0c:80:f6:ba:71:c7:45:94:a5:c5:82:
                    ee:c4:63:0a:7f:00:f3:80:aa:d6:2f:cc:88:66:fa:
                    69:17:9a:78:66:47:07:71:ae:e2:b5:fc:69:ce:a8:
                    4e:f8:b8:03:f9:bb:9b:22:11:6e:0f:3b:77:bd:44:
                    15:64:f1:0c:f2:84:44:ae:2c:b3:c7:69:c3:3b:87:
                    98:67:00:f0:e9:45:0c:7b:b7:87:9e:20:a8:a4:99:
                    64:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:06:6C:F4:46:61:7A:F3:59:A7:92:F0:EE:62:B5:02:75:2E:A2:3D
            X509v3 Authority Key Identifier:
                keyid:7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:5e:eb:5e:06:2b:e7:fb:69:c8:b5:16:a9:d7:26:6c:99:95:
         54:62:76:e8:c2:9c:cc:4e:59:c1:e5:46:7a:cd:54:3b:92:9e:
         7d:ea:97:af:0b:1e:4a:aa:68:00:99:f6:c6:1a:1b:24:6f:30:
         85:f2:e3:eb:c6:7f:3c:41:e6:a2:95:01:95:5a:59:7d:9a:47:
         40:a1:b0:c6:7c:ce:aa:2d:f3:60:82:1b:f1:7d:1a:57:7f:3b:
         83:d2:f0:2f:b3:1f:7d:48:b9:3a:b9:a4:41:c2:35:99:ca:da:
         67:af:67:62:ac:ed:44:e6:08:1a:a5:39:58:87:6d:d6:cc:08:
         1d:5d:ca:28:7a:d6:be:20:d0:5a:1d:11:94:ea:50:9b:b2:62:
         4f:e1:fb:6a:e3:3b:55:ea:9f:f1:9d:a4:4f:00:63:87:04:56:
         89:ec:11:ea:55:35:3c:31:d3:fd:c4:1c:a6:e1:64:7c:69:cb:
         10:ad:e7:37:c7:39:3f:8f:1f:b7:6c:c0:42:4d:62:03:2b:d4:
         d0:7b:3a:28:12:7f:82:78:1a:c9:f3:a9:55:46:da:41:57:5f:
         81:9e:0a:3c:b9:04:08:a5:ad:d8:d1:02:f2:4a:59:b9:47:a0:
         7e:24:66:16:76:d3:6c:9d:c4:1f:36:91:54:8f:4a:8c:14:a2:
         d6:64:d1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:19:16 2025 by rpki-client