Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
File:                     hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft (raw, json)
Hash identifier:          8BIXwb0whCl1/uQwizsyIJHUo7z+WzQdH6WrI6FLdl4=
Subject key identifier:   F6:EE:CA:7A:7C:9E:53:44:B7:38:04:2B:56:50:5D:40:7B:A1:B9:14
Authority key identifier: 85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE
Certificate issuer:       /CN=A91E5EEA/serialNumber=8577904C43C2A9BE118FDDD5BA7BB8B6044380FE
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
Manifest number:          09
Signing time:             Fri 31 Jan 2025 07:13:35 +0000
Manifest this update:     Fri 31 Jan 2025 07:13:34 +0000
Manifest next update:     Fri 07 Feb 2025 07:13:34 +0000
Files and hashes:         1: hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl (hash: UOOpkSGcntIaQATj2uci0DFbducjUx1QiZEq7Z6OVkI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5EEA/serialNumber=8577904C43C2A9BE118FDDD5BA7BB8B6044380FE
        Validity
            Not Before: Jan 31 07:13:34 2025 GMT
            Not After : Feb  7 07:13:34 2025 GMT
        Subject: CN=679c781e-0df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ad:95:43:33:14:23:1c:bc:f1:38:e3:98:63:
                    09:71:c6:2a:ff:9f:03:17:5e:56:a8:48:a3:b7:0b:
                    28:95:63:f3:14:ff:e5:3f:1d:f8:51:1b:96:b7:ab:
                    6d:4a:f5:b8:0e:96:0b:0b:70:22:29:1f:7a:6c:b2:
                    ff:0f:80:42:9d:f6:b7:f9:97:b5:11:86:56:2f:e8:
                    2f:02:9c:1e:f8:d0:a6:6a:e5:0f:14:d0:2e:aa:38:
                    15:9d:17:2e:6f:ec:17:b5:89:86:2b:71:02:cf:69:
                    01:ab:f1:7d:58:d7:00:57:74:5f:b2:a8:ff:e6:fe:
                    8f:0c:b9:e4:03:87:d3:15:a3:5b:60:44:14:e9:46:
                    10:9b:98:2e:ef:69:7c:e8:9d:60:76:46:81:99:4e:
                    ab:cd:89:2a:bd:a1:03:90:01:0c:9a:e2:e2:4f:c3:
                    f1:8c:58:93:dc:b1:f8:7a:e9:73:e6:e2:64:be:1f:
                    12:75:60:ad:f9:f5:f1:55:e6:02:a4:d9:b8:1d:ae:
                    0a:7f:c0:2b:15:f1:3e:fe:55:00:ad:b6:5f:d3:3e:
                    b6:16:73:d6:e7:2c:66:dd:1c:5b:a1:37:b7:3e:d4:
                    4c:1a:30:09:06:6c:88:b2:08:64:68:ac:88:32:b8:
                    89:d1:96:e0:7d:a6:1d:b5:66:cd:f4:ea:3f:8e:db:
                    df:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EE:CA:7A:7C:9E:53:44:B7:38:04:2B:56:50:5D:40:7B:A1:B9:14
            X509v3 Authority Key Identifier:
                keyid:85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a8:6d:fa:50:52:00:a9:c8:cb:be:83:c3:f0:48:46:15:64:
         12:1e:7f:67:a8:dd:e9:21:fe:e8:bd:03:9b:dd:04:84:68:00:
         49:07:dd:ed:1d:4e:92:01:84:5a:24:df:8f:10:66:56:0b:8c:
         cc:05:07:5c:29:75:f2:49:9f:c4:87:c7:9e:c9:9d:f6:39:f8:
         fb:40:c4:c5:87:0a:57:ec:be:70:9e:14:9d:06:dc:d8:17:12:
         fd:e7:1d:f9:a0:4f:2c:75:a4:c4:48:c9:a1:1a:17:02:6f:1e:
         f6:24:c0:c6:28:f0:6e:31:d2:3d:40:00:69:25:56:20:55:4b:
         1b:51:89:d8:57:8c:81:09:f7:2c:f4:cf:ed:e9:54:e0:cd:d1:
         8a:ce:d1:6f:0f:57:da:0c:71:de:34:10:1a:0f:e8:f3:3b:84:
         d4:26:94:b7:3d:9e:c4:8e:9c:5a:d1:f6:09:9b:41:cf:4d:09:
         88:b8:b9:0f:35:4f:36:f2:fd:a1:6b:4a:fd:dc:90:72:90:01:
         ac:a3:70:43:b7:7b:c5:9f:80:f1:57:4d:04:42:63:6b:ed:85:
         22:a5:9c:21:ef:af:cf:c4:60:10:9f:62:1f:fc:96:f1:4c:8a:
         8b:dd:5f:7b:d4:e3:ea:b1:a8:32:e5:5d:18:70:0a:2c:42:d6:
         ed:26:5a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:53 2025 by rpki-client