Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft
File:                     ZuovNzZ54cNDDifZXhX6MvqNSu8.mft (raw, json)
Hash identifier:          rqf/JQaDwAUoE08mefPyHBVnv1Xks5ypRQKPBSX/5sU=
Subject key identifier:   4D:83:9B:3E:60:FC:2B:27:9F:79:59:2C:3C:D3:A4:66:44:3D:A5:B9
Authority key identifier: 66:EA:2F:37:36:79:E1:C3:43:0E:27:D9:5E:15:FA:32:FA:8D:4A:EF
Certificate issuer:       /CN=A9119D6A/serialNumber=66EA2F373679E1C3430E27D95E15FA32FA8D4AEF
Certificate serial:       0DA1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft
Manifest number:          0DA1
Signing time:             Fri 28 Mar 2025 18:03:49 +0000
Manifest this update:     Fri 28 Mar 2025 18:03:48 +0000
Manifest next update:     Fri 04 Apr 2025 18:03:48 +0000
Files and hashes:         1: ZuovNzZ54cNDDifZXhX6MvqNSu8.crl (hash: k28E5aoEqUr9U4NCJOirFvV45g++2nYqFxAHFhILA1I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3489 (0xda1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119D6A
        Validity
            Not Before: Mar 28 18:03:48 2025 GMT
            Not After : Apr  4 18:03:48 2025 GMT
        Subject: CN=67e6e485-b8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6a:ac:55:fb:80:c8:8c:3e:07:e8:f0:69:48:
                    fb:1e:2c:31:5d:c7:9c:b2:9f:0a:3a:41:61:73:3f:
                    8f:8a:b1:5f:d9:49:48:2b:b2:65:35:09:b8:78:41:
                    77:d2:2c:df:25:91:e5:43:46:49:2e:01:49:2e:1d:
                    cc:e7:bc:5d:a7:14:66:85:44:3d:28:56:dc:d6:eb:
                    79:4c:14:90:57:e2:a8:53:0a:0e:46:44:43:c6:e4:
                    68:d9:87:db:dd:91:ea:bd:85:33:41:21:47:bd:b8:
                    23:db:0f:a6:79:d1:bf:40:ab:09:93:59:21:a3:2f:
                    10:ea:23:89:32:5d:50:51:38:31:5e:d8:4e:4f:3f:
                    8d:29:1c:90:ed:4a:00:54:d3:68:cf:a9:14:7d:bb:
                    85:f3:fe:d3:93:44:7e:05:32:49:f9:d1:87:da:47:
                    32:7a:7b:4c:d6:cd:c6:0e:3f:56:55:47:55:08:42:
                    79:df:b6:79:a0:13:b3:f1:28:48:71:10:1c:7d:0a:
                    a3:9c:10:3d:06:f7:e7:b8:19:26:18:2e:59:13:80:
                    ee:f1:af:6b:e6:77:d4:dc:93:17:25:bf:54:b1:a7:
                    3a:b9:31:23:df:4c:85:ff:e1:24:69:bb:79:4d:58:
                    0e:0b:c0:d9:a3:88:94:e3:d3:d1:c4:c3:c1:72:73:
                    07:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:83:9B:3E:60:FC:2B:27:9F:79:59:2C:3C:D3:A4:66:44:3D:A5:B9
            X509v3 Authority Key Identifier:
                keyid:66:EA:2F:37:36:79:E1:C3:43:0E:27:D9:5E:15:FA:32:FA:8D:4A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:09:93:a3:b4:4b:b2:38:2b:6e:d6:70:d5:ba:3c:7c:47:bf:
         86:c8:c4:08:94:e6:cd:96:6e:2e:a0:ee:be:b2:ae:51:6b:19:
         3b:25:c0:d9:aa:78:8d:88:34:df:cf:61:8b:25:4c:30:3d:a7:
         d2:92:d8:fe:47:9f:f4:45:2e:56:b7:20:44:90:3f:5c:e7:9b:
         07:12:d0:ca:f1:f7:56:be:ef:dc:fe:ac:0f:61:84:03:34:38:
         d6:5d:97:ce:53:96:05:b7:65:1b:c8:46:3d:99:d0:31:3f:97:
         71:9b:cc:22:a3:5e:72:89:d3:57:f2:cc:23:b1:51:42:f3:86:
         04:22:a8:71:79:f6:78:f9:88:87:ad:10:a2:9f:4a:45:df:5b:
         a1:f8:f7:b8:b8:08:1e:31:e4:cc:7e:d9:56:00:18:27:1e:23:
         15:c6:f5:4a:56:be:aa:e8:52:9d:72:e6:aa:97:b8:dd:d6:fd:
         19:b7:8f:6b:79:36:01:e8:22:1e:ec:b8:a0:89:b6:f2:c6:d1:
         b2:4b:5c:2c:99:3c:f7:f3:2d:bd:f2:54:07:4f:73:30:43:07:
         ff:46:81:f2:75:75:9c:37:74:ca:bb:a3:88:ac:ff:78:dd:49:
         3f:bf:a4:37:a0:6b:65:f9:81:17:5d:83:9c:cc:bc:ba:8d:fa:
         0b:e7:0f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:41:06 2025 by rpki-client