Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
File:                     AduB721jlOZtOzIxW0eevteZyTc.mft (raw, json)
Hash identifier:          ou4Dbe5q9jAPgZLEED0J0UXDk9UN9VxIfVHt6td5xnc=
Subject key identifier:   BA:02:6A:51:14:F5:D5:42:E5:F7:F7:AE:E0:66:32:D4:C2:3F:E6:06
Authority key identifier: 01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37
Certificate issuer:       /CN=A91FECDA/serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937
Certificate serial:       0F08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
Manifest number:          0F01
Signing time:             Fri 31 Jan 2025 17:36:13 +0000
Manifest this update:     Fri 31 Jan 2025 17:36:13 +0000
Manifest next update:     Fri 07 Feb 2025 17:36:13 +0000
Files and hashes:         1: AduB721jlOZtOzIxW0eevteZyTc.crl (hash: CWO6zEiAVH/RFv6pAvbz0PdtPk8bNkSs4QjzqmqNJ8I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3848 (0xf08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FECDA/serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937
        Validity
            Not Before: Jan 31 17:36:13 2025 GMT
            Not After : Feb  7 17:36:13 2025 GMT
        Subject: CN=679d0a0d-654e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fe:33:97:8c:50:5c:e9:e1:35:ad:ce:93:ac:
                    5c:64:53:b1:c0:93:04:22:81:58:35:f2:d3:77:88:
                    a2:4e:a6:01:c9:ab:cb:2b:0d:6b:ed:53:ff:b2:de:
                    bd:f6:3e:40:a5:2d:0f:2e:61:c3:29:7a:20:01:dc:
                    c5:84:e8:a0:c4:27:a7:0a:e2:81:71:fa:04:f4:24:
                    a4:41:b9:61:8d:ec:b9:e4:41:29:0e:7e:ba:5e:86:
                    3d:4a:00:0d:b5:dd:11:83:59:8e:02:0a:48:65:c5:
                    a1:11:f2:c9:c2:69:79:ce:e0:e4:65:b9:d6:b3:c3:
                    1a:51:90:75:b5:31:d9:8e:36:02:3c:48:a8:b6:7a:
                    e7:33:4d:18:60:8c:29:e7:76:e5:a9:61:6e:62:d0:
                    a3:4f:1b:36:97:54:5c:03:43:c9:99:bb:66:a9:1f:
                    ef:a3:7e:db:c5:e0:89:b3:cb:9e:74:2c:43:fe:a3:
                    56:36:2f:60:ea:2b:48:70:18:e7:99:40:15:e3:8b:
                    11:d8:f9:36:d5:50:ea:1e:7a:77:06:e9:91:c8:2a:
                    8d:72:4f:0d:f2:99:2d:b2:86:87:fe:03:93:4d:51:
                    66:be:fe:ab:57:36:f7:23:39:ae:dd:9e:a1:2a:15:
                    41:90:8e:88:2c:67:c9:d0:80:89:d0:21:fa:31:f1:
                    0b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:02:6A:51:14:F5:D5:42:E5:F7:F7:AE:E0:66:32:D4:C2:3F:E6:06
            X509v3 Authority Key Identifier:
                keyid:01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:36:40:59:d6:54:03:48:09:96:3f:f8:3a:1f:df:2f:bd:7c:
         4c:c4:74:43:9f:20:3c:77:63:e6:fb:d2:f6:93:99:57:5e:21:
         0f:18:60:88:c5:74:a7:30:fe:d7:e2:33:ce:da:39:2e:0e:f6:
         9f:70:b7:7c:34:42:9f:29:43:ed:e7:f8:1f:86:5d:39:79:1d:
         3f:0d:f8:e9:f7:8c:15:87:de:77:00:fc:07:ac:e1:63:7d:79:
         19:68:42:b6:0a:77:b0:d4:83:10:be:a7:80:b5:24:90:a6:8a:
         37:9f:52:a5:19:c1:25:28:8a:99:f6:ee:30:f6:e6:ab:81:e6:
         8d:62:5a:43:0a:0f:c1:84:5b:65:99:a5:0a:b3:8f:58:8c:1c:
         52:d2:39:0a:33:b1:35:64:f2:1d:ab:7e:bb:49:68:8e:32:ac:
         aa:97:e2:f0:10:61:f6:14:80:d1:21:8c:b3:9e:fc:19:52:63:
         ab:c8:3e:06:f7:88:9f:a1:55:5a:4f:ae:4c:cc:8c:39:31:74:
         72:8f:f7:c6:22:ad:3e:7a:90:72:1f:b1:9e:34:f4:6b:72:86:
         1c:4e:18:5f:d7:9d:d9:ce:d1:8e:c2:89:1b:6c:cc:0e:8d:21:
         d5:c4:0d:b6:16:34:72:2a:db:08:6c:4a:79:96:bc:70:5d:8e:
         00:98:b7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:01 2025 by rpki-client