Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
File:                     E7lE6lgzzbdBH9TsaqHJYs87CIA.mft (raw, json)
Hash identifier:          60DFEujC/yQuF3er4FYfVP079FoNUDbIyFKxQnvmfKk=
Subject key identifier:   BE:C3:F0:0C:25:97:46:3B:C8:D3:33:50:99:22:96:4B:8A:52:A9:8D
Authority key identifier: 13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80
Certificate issuer:       /CN=A91FCF44/serialNumber=13B944EA5833CDB7411FD4EC6AA1C962CF3B0880
Certificate serial:       21
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
Manifest number:          21
Signing time:             Fri 31 Jan 2025 06:14:58 +0000
Manifest this update:     Fri 31 Jan 2025 06:14:58 +0000
Manifest next update:     Fri 07 Feb 2025 06:14:58 +0000
Files and hashes:         1: E7lE6lgzzbdBH9TsaqHJYs87CIA.crl (hash: 2jT3qJukjGJC+UcLCnDc0Dlm+SzcxXwIkBft/HHNcAo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCF44/serialNumber=13B944EA5833CDB7411FD4EC6AA1C962CF3B0880
        Validity
            Not Before: Jan 31 06:14:58 2025 GMT
            Not After : Feb  7 06:14:58 2025 GMT
        Subject: CN=679c6a62-cf40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:52:10:ea:8f:a3:73:66:32:2b:06:5b:cf:ee:
                    5c:b5:09:a1:00:4c:ee:67:b8:8f:21:5f:38:3d:11:
                    16:2f:52:6a:63:e6:88:55:93:fa:e2:bb:b5:1c:46:
                    af:c4:6e:aa:59:97:0a:3a:e9:b8:76:d0:14:a9:e8:
                    4f:c8:9a:3e:cb:68:5b:55:04:c0:42:0a:81:3a:c2:
                    99:cf:ca:74:2f:04:9a:01:fa:4d:52:a5:0d:2d:90:
                    53:71:e4:48:be:78:4b:2a:b3:0d:7c:24:d8:c6:f3:
                    81:76:08:c4:da:a1:fe:a4:8c:69:e5:c9:f3:2a:ef:
                    eb:2f:8a:aa:b9:00:f9:f4:3b:89:05:9c:78:9e:3e:
                    88:31:d0:c5:49:2a:27:a4:ea:93:33:ae:89:67:9e:
                    68:d9:8e:f9:b6:81:0f:e8:62:34:8d:ba:1c:db:f2:
                    fa:f3:cd:ef:75:e8:4a:23:9e:bb:53:81:a2:5c:01:
                    51:6a:f1:0c:4b:ff:b8:a5:26:2e:cc:db:0e:ff:05:
                    35:83:0e:3b:b0:0c:b7:54:f7:29:2a:9a:0b:a2:d9:
                    24:d2:c2:ef:84:4e:47:8a:1e:13:e9:91:cc:7d:f8:
                    24:5d:78:93:c2:7e:a8:94:b9:74:bf:0a:78:73:f7:
                    c5:50:76:f9:d6:07:d6:0d:6b:a1:c6:c1:9f:a1:72:
                    97:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C3:F0:0C:25:97:46:3B:C8:D3:33:50:99:22:96:4B:8A:52:A9:8D
            X509v3 Authority Key Identifier:
                keyid:13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:fb:01:17:c7:e0:06:94:22:af:ef:88:96:90:8c:07:cf:64:
         c5:3d:07:80:21:12:57:bb:d3:3d:1e:88:0f:bd:cf:ab:3d:b6:
         52:c2:54:a8:61:9e:89:2e:dd:b9:98:42:35:f6:1f:60:4a:85:
         18:5c:97:57:ef:6d:d4:40:fe:73:63:59:60:3e:27:10:e3:60:
         66:89:3d:71:30:5c:c0:5d:b9:a5:43:a7:a0:73:c8:4d:10:22:
         0c:21:cd:34:98:75:f1:ff:16:a8:8c:de:14:68:0e:9d:a1:50:
         3a:23:7f:a1:fc:71:88:e2:5c:97:b6:4f:90:d3:8d:59:d5:25:
         6b:ad:2f:3d:dc:65:73:18:50:d8:6b:6d:f8:84:63:23:1d:5f:
         f5:41:e6:49:01:a1:4a:a3:d6:bb:26:dc:8d:e9:7d:17:e9:f1:
         e1:16:03:8d:87:42:00:0a:3e:17:89:9a:5d:29:85:2b:27:8c:
         6f:61:34:e6:a0:2e:c5:cf:1e:36:6e:3e:51:9c:3f:1e:94:fb:
         52:fb:40:5a:37:c6:73:7d:bb:b3:1c:85:22:39:b8:3c:cd:40:
         c0:e4:9f:3d:f0:d5:a6:c3:1b:30:ec:92:f2:37:a0:3b:a2:f5:
         fb:06:8f:75:fc:be:67:97:75:93:af:fb:05:f6:a5:eb:6b:97:
         39:cb:27:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:57:12 2025 by rpki-client