Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft
File:                     dzKJlNE-mJVBnIEGa6YRgdGCtog.mft (raw, json)
Hash identifier:          ScBoZ02EFUWqvphyljftHEJRSdX0i07dliOr3KFhC68=
Subject key identifier:   67:31:F0:12:4A:87:B3:4A:9C:D4:CA:63:2A:83:8E:FC:22:1A:07:FB
Authority key identifier: 77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88
Certificate issuer:       /CN=A91F71E8/serialNumber=77328994D13E9895419C81066BA61181D182B688
Certificate serial:       11AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft
Manifest number:          1993
Signing time:             Fri 31 Jan 2025 17:12:25 +0000
Manifest this update:     Fri 31 Jan 2025 17:12:25 +0000
Manifest next update:     Fri 07 Feb 2025 17:12:25 +0000
Files and hashes:         1: dzKJlNE-mJVBnIEGa6YRgdGCtog.crl (hash: H4j88JEjaUlUPH2roVazZhpBZM4uB948Q3oFk8Trmbg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4524 (0x11ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F71E8/serialNumber=77328994D13E9895419C81066BA61181D182B688
        Validity
            Not Before: Jan 31 17:12:25 2025 GMT
            Not After : Feb  7 17:12:25 2025 GMT
        Subject: CN=679d0479-c89a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dd:c6:5e:37:fa:7b:af:8c:83:4d:fc:cb:74:
                    6e:ed:d0:c2:c2:07:d1:3e:50:9f:06:42:a1:8f:5d:
                    1b:ec:6c:15:2f:50:b6:06:84:7f:0a:76:17:6f:90:
                    14:cc:e1:3a:e7:79:6e:2a:4d:c2:15:8f:e6:16:77:
                    01:27:e2:41:fd:9f:d8:c9:01:5b:38:df:29:c8:a1:
                    52:68:21:b8:7d:15:14:a2:47:6c:4a:72:87:04:ca:
                    0b:45:f7:f7:14:dc:98:20:63:e6:60:25:7c:c5:ae:
                    5c:fe:2f:bd:d0:5b:22:93:59:7b:d3:19:25:b2:55:
                    c5:0f:3c:ca:92:39:50:09:55:f5:2d:61:96:7a:bf:
                    d1:c7:61:61:cd:d4:8e:94:5b:35:70:2a:d1:48:03:
                    69:3f:f6:e8:8f:38:36:1f:01:e1:ff:71:fb:20:76:
                    1b:35:e1:54:3e:71:40:10:b6:9d:37:04:0e:58:78:
                    de:03:b9:5f:6d:8b:6d:35:e9:ab:c1:7c:fd:35:19:
                    9a:5f:3a:15:e3:72:e3:c3:ab:68:25:87:8d:04:74:
                    38:54:23:91:b8:dc:2b:5a:a2:57:67:b8:52:95:88:
                    7f:e8:d8:32:e2:01:67:d2:b4:bf:90:e5:e4:02:fb:
                    d3:fb:b0:0c:cd:ba:1e:b4:d8:2a:fc:80:3a:8a:b6:
                    b2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:31:F0:12:4A:87:B3:4A:9C:D4:CA:63:2A:83:8E:FC:22:1A:07:FB
            X509v3 Authority Key Identifier:
                keyid:77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:fa:00:89:14:fe:2d:f9:cd:18:7a:c8:a9:25:7d:2c:76:4e:
         a5:e2:e8:e2:29:11:13:db:87:73:6d:14:36:4a:2d:7f:03:6e:
         1b:1b:2e:70:36:46:b8:16:df:79:b3:8c:9d:68:26:32:9c:05:
         d6:ea:ab:c9:cc:70:11:4f:68:d4:14:94:56:2a:9b:14:cf:a0:
         55:aa:6b:6f:79:42:ff:c5:7a:3c:3e:79:9c:01:7a:c7:3e:06:
         fa:2b:71:04:af:30:a0:0a:84:08:07:43:ba:ac:09:32:88:fb:
         db:fa:9d:70:4d:9f:1c:80:02:49:ef:64:a7:0a:6c:53:28:64:
         1b:c7:25:88:97:0f:27:65:22:4a:86:a3:b7:5c:47:df:ee:7d:
         1f:7e:52:30:eb:ea:1b:c6:0f:3f:52:1b:cf:0a:64:bb:0f:d0:
         5d:67:da:21:e7:46:74:a6:40:08:8e:5d:34:8e:7c:fd:26:36:
         ae:4b:95:e4:4c:ff:f5:b0:1c:d9:5e:2e:f1:37:36:b7:91:8e:
         b9:92:ef:63:38:4a:40:59:95:90:10:6c:3b:36:94:8c:7f:4f:
         4a:30:17:9f:20:1a:44:8d:09:05:20:92:56:0e:78:28:e1:01:
         59:c5:02:1d:4b:5b:e6:7d:57:26:d3:d3:a4:06:08:81:16:22:
         7b:25:93:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:23:26 2025 by rpki-client