Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft
File:                     rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft (raw, json)
Hash identifier:          h6hhyW0BjG8XNjAOSBmi7DpK3IVMSixftDoHCBNlYc8=
Subject key identifier:   0A:04:49:40:B1:2B:2B:FA:C0:D0:0C:24:D0:AF:DE:F0:DF:25:B0:99
Authority key identifier: AC:FC:B3:1E:2B:E2:AD:3D:12:B1:A7:91:02:FC:B4:FD:58:BB:66:83
Certificate issuer:       /CN=A91F7BA0/serialNumber=ACFCB31E2BE2AD3D12B1A79102FCB4FD58BB6683
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPyzHivirT0SsaeRAvy0_Vi7ZoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft
Manifest number:          74
Signing time:             Fri 31 Jan 2025 05:55:26 +0000
Manifest this update:     Fri 31 Jan 2025 05:55:25 +0000
Manifest next update:     Fri 07 Feb 2025 05:55:25 +0000
Files and hashes:         1: rPyzHivirT0SsaeRAvy0_Vi7ZoM.crl (hash: kL/kNITV7snuHMH9iWk7KL4Ef30ZwWODLXKZh4lXUyc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7BA0/serialNumber=ACFCB31E2BE2AD3D12B1A79102FCB4FD58BB6683
        Validity
            Not Before: Jan 31 05:55:25 2025 GMT
            Not After : Feb  7 05:55:25 2025 GMT
        Subject: CN=679c65cd-6055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:39:35:d2:6b:41:05:5e:d9:1e:23:46:43:c7:
                    4c:97:19:6e:b6:59:21:45:ce:d3:79:fe:de:50:03:
                    31:7c:ae:a9:58:88:ac:a7:a8:63:73:b2:7c:1e:d7:
                    c3:bc:9f:70:ab:e7:b6:ac:c0:cf:6d:01:fc:96:c2:
                    d1:09:f6:e8:6a:1d:0d:de:b5:ac:d4:91:21:f8:fe:
                    10:c2:7a:8f:bc:e1:10:27:02:aa:67:25:3d:a9:88:
                    87:fb:4e:91:65:26:62:be:81:e0:ba:53:07:3e:f8:
                    d4:4f:56:a6:f9:32:dd:1c:a4:62:0a:ef:85:12:a3:
                    5e:9e:02:47:37:b8:91:a7:de:59:16:1e:ec:2f:ce:
                    97:c2:37:d4:d8:bb:91:10:7c:3d:e0:87:72:14:a0:
                    60:5a:8f:08:c2:66:79:f6:a9:19:b3:87:cd:ac:b5:
                    71:5d:3a:35:e1:d5:6b:1d:53:2c:2e:fa:ea:d4:68:
                    87:2f:ae:f0:93:26:6c:0f:0e:17:66:9a:1f:91:1e:
                    ea:8d:ba:eb:ac:61:68:58:ac:79:b4:eb:e0:c3:df:
                    80:36:fa:ae:09:e4:fc:4b:61:ba:03:09:9a:ef:2e:
                    76:6d:a2:b4:ec:04:83:c0:4f:bc:db:56:fa:40:43:
                    28:97:88:bf:85:d2:46:9c:41:50:79:36:91:05:43:
                    ca:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:04:49:40:B1:2B:2B:FA:C0:D0:0C:24:D0:AF:DE:F0:DF:25:B0:99
            X509v3 Authority Key Identifier:
                keyid:AC:FC:B3:1E:2B:E2:AD:3D:12:B1:A7:91:02:FC:B4:FD:58:BB:66:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPyzHivirT0SsaeRAvy0_Vi7ZoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:0e:7a:2c:da:0b:19:25:92:99:c3:23:f1:a1:d0:e6:f1:a6:
         0c:92:61:05:c7:3c:0e:9b:17:cd:81:04:fc:3b:aa:da:7b:4f:
         9d:7f:14:4d:24:5b:70:67:a9:33:d9:e4:be:6b:ac:a0:9d:81:
         df:f5:cb:ff:b0:5a:b7:29:cc:ed:b5:27:c6:04:70:9f:93:9a:
         c0:ac:3c:ad:ae:cb:05:90:71:9d:f1:9c:4f:d4:10:3a:11:79:
         75:54:50:1e:4d:ad:25:f3:3f:b6:3c:f7:1f:43:89:44:ca:87:
         bf:d5:12:65:b8:fa:ac:74:58:61:32:79:56:f0:d2:9f:be:2b:
         6a:a4:04:57:cc:c6:6c:3f:87:b0:fb:03:68:f2:1e:30:66:03:
         13:ef:81:10:43:98:ca:3d:4b:2f:62:af:72:bb:46:28:59:e7:
         d7:73:bd:cf:fb:10:3a:af:00:f6:3e:a8:68:e3:db:0b:00:0d:
         ca:d2:d0:08:96:b0:81:4a:2b:1c:f5:ac:10:59:06:6e:31:89:
         a9:c0:10:a5:f2:b6:59:65:53:cd:89:db:2a:88:43:0a:50:b0:
         6e:34:e2:c9:bb:91:89:f3:ee:c8:07:bd:67:f0:59:06:80:59:
         ab:ce:3c:1d:dd:e3:2f:6a:56:e2:a9:66:97:97:b6:13:33:d8:
         22:3a:64:0c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
N0JBMDExMC8GA1UEBRMoQUNGQ0IzMUUyQkUyQUQzRDEyQjFBNzkxMDJGQ0I0RkQ1
OEJCNjY4MzAeFw0yNTAxMzEwNTU1MjVaFw0yNTAyMDcwNTU1MjVaMBgxFjAUBgNV
BAMTDTY3OWM2NWNkLTYwNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDOTXSa0EFXtkeI0ZDx0yXGW62WSFFztN5/t5QAzF8rqlYiKynqGNzsnwe18O8
n3Cr57aswM9tAfyWwtEJ9uhqHQ3etazUkSH4/hDCeo+84RAnAqpnJT2piIf7TpFl
JmK+geC6Uwc++NRPVqb5Mt0cpGIK74USo16eAkc3uJGn3lkWHuwvzpfCN9TYu5EQ
fD3gh3IUoGBajwjCZnn2qRmzh82stXFdOjXh1WsdUywu+urUaIcvrvCTJmwPDhdm
mh+RHuqNuuusYWhYrHm06+DD34A2+q4J5PxLYboDCZrvLnZtorTsBIPAT7zbVvpA
QyiXiL+F0kacQVB5NpEFQ8qxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCgRJQLEr
K/rA0Awk0K/e8N8lsJkwHwYDVR0jBBgwFoAUrPyzHivirT0SsaeRAvy0/Vi7ZoMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3QkEwL0Y3MzgzRjg0MzhG
MTExRUY5MEI5MDc0MEM0RjlBRTAyL3JQeXpIaXZpclQwU3NhZVJBdnkwX1ZpN1pv
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvclB5ekhpdmlyVDBTc2FlUkF2eTBfVmk3Wm9NLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3
QkEwL0Y3MzgzRjg0MzhGMTExRUY5MEI5MDc0MEM0RjlBRTAyL3JQeXpIaXZpclQw
U3NhZVJBdnkwX1ZpN1pvTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKMOeizaCxklkpnDI/Gh0ObxpgySYQXHPA6bF82BBPw7qtp7T51/FE0k
W3BnqTPZ5L5rrKCdgd/1y/+wWrcpzO21J8YEcJ+TmsCsPK2uywWQcZ3xnE/UEDoR
eXVUUB5NrSXzP7Y89x9DiUTKh7/VEmW4+qx0WGEyeVbw0p++K2qkBFfMxmw/h7D7
A2jyHjBmAxPvgRBDmMo9Sy9ir3K7RihZ59dzvc/7EDqvAPY+qGjj2wsADcrS0AiW
sIFKKxz1rBBZBm4xianAEKXytlllU82J2yqIQwpQsG404sm7kYnz7sgHvWfwWQaA
WavOPB3d4y9qVuKpZpeXthMz2CI6ZAw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:59:23 2025 by rpki-client