Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91E54810000/2/FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.mft
File:                     FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.mft (raw, json)
Hash identifier:          TM95bkbZIVWxpd0COlAwWU8eSIwS22hfWzpI4ODiegE=
Subject key identifier:   01:D5:8B:2E:C4:E8:74:5B:CA:3A:DB:51:2B:EC:D0:C8:03:39:38:31
Authority key identifier: FC:AB:6F:87:83:B3:18:3D:2A:A0:B0:94:97:0C:BC:76:7B:75:AE:DD
Certificate issuer:       /CN=A91897390000/serialNumber=FCAB6F8783B3183D2AA0B094970CBC767B75AEDD
Certificate serial:       4B322388B55A71FD2FC126B49B9F9F9B9A76B237
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ktvh4OzGD0qoLCUlwy8dnt1rt0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91E54810000/2/FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.mft
Manifest number:          02AA
Signing time:             Fri 31 Jan 2025 13:16:36 +0000
Manifest this update:     Fri 31 Jan 2025 13:11:36 +0000
Manifest next update:     Sat 01 Feb 2025 13:49:36 +0000
Files and hashes:         1: FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.crl (hash: qFztpAK/A4npJ1JWSz55fvp7pQqIwJtsadFaV2m+PrI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:32:23:88:b5:5a:71:fd:2f:c1:26:b4:9b:9f:9f:9b:9a:76:b2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91897390000/serialNumber=FCAB6F8783B3183D2AA0B094970CBC767B75AEDD
        Validity
            Not Before: Jan 31 13:11:36 2025 GMT
            Not After : Feb  1 13:49:36 2025 GMT
        Subject: CN=01D58B2EC4E8745BCA3ADB512BECD0C803393831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:77:56:60:0a:1d:5c:93:c1:72:53:6b:f6:a4:
                    3b:f1:99:19:d4:21:65:79:ac:fd:9a:52:ac:fb:68:
                    e4:73:48:b6:e7:85:f0:b2:3c:c9:9e:d2:6a:a8:29:
                    b0:4b:49:2b:5d:0c:24:cb:18:93:5b:41:29:2b:ca:
                    9b:ff:06:a2:ac:79:f9:80:a6:6f:95:07:05:31:4f:
                    bc:02:28:dd:5e:6d:d2:57:72:69:25:7c:b0:97:d7:
                    88:48:1f:86:f6:25:17:e9:44:12:6a:64:3e:e9:e5:
                    24:77:f7:68:b1:47:6e:c5:00:59:fe:20:1a:2c:e9:
                    e0:05:f2:21:a1:9c:7b:f5:37:61:09:1e:be:cf:03:
                    b8:f3:b1:c1:13:04:26:6a:e0:ff:48:91:4c:49:49:
                    8f:ab:3e:13:12:2d:b5:bc:61:20:dd:15:63:81:ec:
                    af:16:45:09:1b:0e:c5:e9:c1:ac:87:ad:a1:ac:66:
                    e7:f2:34:96:9a:86:60:54:81:d5:0c:ce:bf:91:2b:
                    14:8f:da:4b:d0:71:f9:9b:71:0d:f5:f5:88:23:ed:
                    a0:46:0d:7b:db:d8:a8:53:8f:28:f4:ae:aa:b9:74:
                    7d:33:50:04:8c:12:f7:50:4c:09:da:54:4a:71:2b:
                    29:18:45:9c:25:55:f4:7a:48:05:af:c2:a9:1c:4f:
                    7b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D5:8B:2E:C4:E8:74:5B:CA:3A:DB:51:2B:EC:D0:C8:03:39:38:31
            X509v3 Authority Key Identifier:
                keyid:FC:AB:6F:87:83:B3:18:3D:2A:A0:B0:94:97:0C:BC:76:7B:75:AE:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/2/FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ktvh4OzGD0qoLCUlwy8dnt1rt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/2/FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:e6:d3:a7:00:ca:8a:a5:fa:3d:a0:59:43:bb:20:54:95:db:
         8a:40:12:d2:e3:43:d1:75:a4:41:98:1c:4a:21:70:83:30:05:
         f3:00:9a:1c:91:19:4d:b4:8f:85:9e:1a:09:3f:ab:37:08:c1:
         79:8e:f7:73:ac:3a:f5:0e:36:87:9f:41:4d:b5:cb:33:da:e6:
         d9:2e:a8:f9:9d:9e:b1:bc:dd:49:59:e7:af:09:15:d2:2b:ee:
         98:a5:82:d8:05:8e:c4:18:35:2d:2b:d3:74:d2:b6:67:38:2f:
         20:f7:72:7a:68:79:9d:c0:aa:53:01:40:e6:08:d2:e8:39:8a:
         95:fb:58:5e:49:74:d5:de:0f:40:8f:aa:77:0b:6b:16:48:72:
         44:40:2e:01:2c:47:8b:ce:d8:24:e2:67:d9:51:03:c6:4d:43:
         35:aa:c3:81:6c:21:44:fa:b7:d2:73:66:db:37:f6:40:db:3f:
         fc:4e:7c:79:8b:93:f3:b6:be:03:78:16:52:58:35:35:02:2b:
         45:61:4d:5f:f6:f3:ac:e9:1b:7a:61:05:e4:64:94:2d:c3:91:
         e9:74:48:cd:c0:9a:4b:b5:48:d7:47:f1:f2:65:54:02:2d:f9:
         05:f6:14:a7:8b:a4:67:46:63:8b:70:ee:09:f6:aa:07:6c:8f:
         86:e0:f0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:16:11 2025 by rpki-client