Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
File:                     dEy0Bnedz3q-afF952ykOS2ebsM.mft (raw, json)
Hash identifier:          sY/EtXFJ4tMbHzFDZHGRC7MYiNecsAHQ0uP1RoUn9z0=
Subject key identifier:   1A:54:85:FB:9A:A4:DF:59:5E:3E:2D:FA:96:D7:FB:DD:79:6C:CF:9C
Authority key identifier: 74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3
Certificate issuer:       /CN=A911535B/serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3
Certificate serial:       3466
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
Manifest number:          3466
Signing time:             Fri 28 Mar 2025 15:00:21 +0000
Manifest this update:     Fri 28 Mar 2025 15:00:20 +0000
Manifest next update:     Fri 04 Apr 2025 15:00:20 +0000
Files and hashes:         1: dEy0Bnedz3q-afF952ykOS2ebsM.crl (hash: 0LfDQNEab9zbKHNqm417Lh28gcoBN6zmpGI/3CyuDnQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13414 (0x3466)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911535B
        Validity
            Not Before: Mar 28 15:00:20 2025 GMT
            Not After : Apr  4 15:00:20 2025 GMT
        Subject: CN=67e6b985-8b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d5:bb:b7:6b:5e:be:ed:44:5f:04:d0:73:2f:
                    b8:d5:4a:e4:5b:cf:1c:b1:32:df:9c:cb:16:3f:7d:
                    be:a7:97:aa:ac:d4:9e:d6:85:c2:d0:76:d8:83:23:
                    b4:47:48:d0:c9:43:e1:3c:53:b2:04:47:82:18:de:
                    54:39:46:05:71:b2:e0:c6:11:6e:55:2a:13:f8:ff:
                    4f:bf:b9:4f:3d:3f:0a:11:e0:a8:07:71:18:c6:bf:
                    9b:5a:78:ff:ea:df:77:b8:e6:f4:b0:67:e0:08:fc:
                    67:95:b8:5a:6e:d5:80:51:d8:56:fa:73:f7:d5:a5:
                    c3:e4:3c:81:96:f7:82:13:6e:bd:b5:0b:d6:94:4d:
                    ad:22:20:f9:7d:4d:02:86:02:a2:f8:47:f1:35:43:
                    24:ae:f9:c8:92:59:34:80:4e:33:53:d4:3c:23:bc:
                    db:9b:3a:ea:1c:da:65:c1:52:10:ee:4a:0e:c4:b4:
                    82:e7:1f:38:11:e8:30:5e:5c:5f:8e:f2:8d:46:eb:
                    36:4f:6d:72:47:99:6c:4d:3d:00:42:d5:20:0a:0c:
                    2d:25:e1:2e:8d:f9:c5:7c:9a:e9:fd:54:3a:41:fc:
                    07:4e:96:0c:a0:9d:bc:81:ed:81:26:59:33:8d:6b:
                    78:c6:96:44:61:2f:23:90:83:a8:35:ef:78:f0:07:
                    20:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:54:85:FB:9A:A4:DF:59:5E:3E:2D:FA:96:D7:FB:DD:79:6C:CF:9C
            X509v3 Authority Key Identifier:
                keyid:74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:45:85:47:3c:1e:26:1b:10:84:1b:95:f0:f2:83:5e:b2:97:
         00:76:c6:48:b4:fa:3b:f4:ce:d6:21:47:91:f7:d3:f0:22:1c:
         ba:47:8a:13:a8:3c:93:a0:2e:16:76:09:48:4e:05:a7:bf:f0:
         ad:1a:90:a9:8b:a6:00:ae:7d:1f:37:f5:22:11:0a:e1:00:fb:
         69:62:25:ed:1b:5e:14:06:75:0a:b0:da:4f:af:4b:cf:98:86:
         6c:18:9a:ac:02:18:dd:91:bb:8a:49:f0:3c:35:21:52:56:6a:
         ef:ab:7c:5a:9e:21:a6:66:64:60:97:d8:7d:7e:30:cd:f6:b7:
         4a:3d:27:94:0f:8d:d3:4d:dd:46:9f:58:fe:ed:6e:5a:ab:2b:
         dc:4e:fc:f0:9b:c3:7b:92:f6:c9:15:6e:7c:df:89:1e:33:e7:
         4d:0d:80:d7:ef:ef:35:7a:79:c2:9e:a3:fb:52:bf:d0:9f:f1:
         c3:7b:26:1a:c9:6d:24:53:15:2f:4c:69:40:dc:5c:8c:11:02:
         01:0f:9a:8e:fd:41:7d:21:d0:1e:fb:34:af:af:f2:35:bd:9e:
         08:8e:17:ec:26:13:ca:f5:41:50:38:4e:89:3f:b2:1b:4e:b0:
         19:58:66:83:13:82:3e:6d:39:01:7f:eb:02:22:a8:7e:65:eb:
         bd:22:96:05
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTUzNUIxMTAvBgNVBAUTKDc0NENCNDA2Nzc5RENGN0FCRTY5RjE3REU3NkNBNDM5
MkQ5RTZFQzMwHhcNMjUwMzI4MTUwMDIwWhcNMjUwNDA0MTUwMDIwWjAYMRYwFAYD
VQQDEw02N2U2Yjk4NS04YjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAotW7t2tevu1EXwTQcy+41UrkW88csTLfnMsWP32+p5eqrNSe1oXC0HbYgyO0
R0jQyUPhPFOyBEeCGN5UOUYFcbLgxhFuVSoT+P9Pv7lPPT8KEeCoB3EYxr+bWnj/
6t93uOb0sGfgCPxnlbhabtWAUdhW+nP31aXD5DyBlveCE269tQvWlE2tIiD5fU0C
hgKi+EfxNUMkrvnIklk0gE4zU9Q8I7zbmzrqHNplwVIQ7koOxLSC5x84EegwXlxf
jvKNRus2T21yR5lsTT0AQtUgCgwtJeEujfnFfJrp/VQ6QfwHTpYMoJ28ge2BJlkz
jWt4xpZEYS8jkIOoNe948Acg7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpUhfua
pN9ZXj4t+pbX+915bM+cMB8GA1UdIwQYMBaAFHRMtAZ3nc96vmnxfedspDktnm7D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTM1Qi81NjY3OTI5NjFE
OUExMUUyOEFDMTdEODcwOEIwMkNEMi9kRXkwQm5lZHozcS1hZkY5NTJ5a09TMmVi
c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RFeTBCbmVkejNxLWFmRjk1MnlrT1MyZWJzTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NTM1Qi81NjY3OTI5NjFEOUExMUUyOEFDMTdEODcwOEIwMkNEMi9kRXkwQm5lZHoz
cS1hZkY5NTJ5a09TMmVic00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAPRYVHPB4mGxCEG5Xw8oNespcAdsZItPo79M7WIUeR99PwIhy6R4oT
qDyToC4WdglITgWnv/CtGpCpi6YArn0fN/UiEQrhAPtpYiXtG14UBnUKsNpPr0vP
mIZsGJqsAhjdkbuKSfA8NSFSVmrvq3xaniGmZmRgl9h9fjDN9rdKPSeUD43TTd1G
n1j+7W5aqyvcTvzwm8N7kvbJFW5834keM+dNDYDX7+81ennCnqP7Ur/Qn/HDeyYa
yW0kUxUvTGlA3FyMEQIBD5qO/UF9IdAe+zSvr/I1vZ4IjhfsJhPK9UFQOE6JP7Ib
TrAZWGaDE4I+bTkBf+sCIqh+Zeu9IpYF
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:20:05 2025 by rpki-client