Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File:                     L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier:          oNuI84Yqud/XtDrF7jRP3ITSE8X3ObYmk14l4qTq0yc=
Subject key identifier:   A2:30:10:A0:71:99:AC:C0:A0:71:7A:A6:A5:45:DF:9B:02:28:EA:E9
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       2537
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number:          24D0
Signing time:             Fri 28 Mar 2025 15:48:47 +0000
Manifest this update:     Fri 28 Mar 2025 15:48:46 +0000
Manifest next update:     Fri 04 Apr 2025 15:48:46 +0000
Files and hashes:         1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: kaHC640iNkquNI7p7zxgVCVHY0Pll0ZuaPZyybckZHw=)
                          2: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: 2DQNtDG5SlXbYPNKHWvlCf1LoqXbXRDiCCKULGtJnHM=)
                          3: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: BPqGgTO/FXgmhll9acyqoVIwbgNH2EbF72C/59rTKAs=)
                          4: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: W5BOpPvdDaVJRiPCvQRJeUEXAu9OuHFa28A+g1a29VM=)
                          5: 407F0056629711EEB706DD75C4F9AE02.roa (hash: PPHYcuwo/hi+gWIj/jwhtP8TpkDUisIVIpssgpxO+Uk=)
                          6: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: ssVkoQGU9abtVaOJ8QQiFzJ2u/KxDVyiUSGDeDLOq7k=)
                          7: 260428EC312211EEAF54935BC4F9AE02.roa (hash: rs1BLbvYE3DjY31zt5pMsjMWm6NZ1lEGyNnSPudZWnw=)
                          8: B77A93FE852411EFA67F8144C4F9AE02.roa (hash: card7JNSXN/xmFN4DueLt9CEoLfIixAjl6O1VFSsoLU=)
                          9: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: ZjX79axkNC/VnRSkKPjshmIjcGsGG06UJjQxdQstgRg=)
                          10: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: uTcSN/s3jafNB4/D11q5q+/m0pypV3YLg7hL+NBlIuc=)
                          11: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: bI6DNZ+SMQoiH31SjdXczk0YB7z1qgZ9bG+qqRhYG1Q=)
                          12: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: tGAr+6Zn60awTp8cl05laafAibPgTaCeJzxGTywN05I=)
                          13: 18D20D12852511EFBE3D6E47C4F9AE02.roa (hash: Xf4WUlVOVXX5jFG9PvkmpeYeh0+vfoKZddXectuS1PA=)
                          14: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: DZxtCrPx9nVC06xsT0giYHAu0uYg4D08gJHGXJpz69w=)
                          15: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: wWAuh5kIJNSIRZFUI/17Ka/eUztNPx+QrG0g1L0q+HM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9527 (0x2537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54
        Validity
            Not Before: Mar 28 15:48:46 2025 GMT
            Not After : Apr  4 15:48:46 2025 GMT
        Subject: CN=67e6c4df-c275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a1:bc:a2:ac:d4:8c:e9:62:c2:ad:41:e5:78:
                    32:38:38:cb:6a:a2:81:2a:60:ad:6b:96:85:b4:ac:
                    cf:c7:57:56:3a:71:de:94:8e:ae:53:6c:64:c1:0c:
                    09:09:e1:e2:1c:48:6d:13:ad:7c:1f:14:b7:ff:80:
                    75:0f:21:f7:0e:3b:61:74:44:51:ef:cd:ea:a0:4d:
                    86:ec:42:94:f1:39:67:fc:a1:10:05:0d:dd:7a:a0:
                    21:0c:8e:18:c8:d3:f4:e2:e0:6b:30:d0:dc:90:fc:
                    45:5b:7a:e5:cd:ee:c2:e5:a2:76:5c:e1:75:68:65:
                    ff:14:f0:36:3f:36:b7:80:15:d6:57:36:5e:e0:0d:
                    dd:49:81:be:b4:0b:8d:18:2d:10:1f:f7:87:53:f3:
                    97:0b:33:c0:5f:c3:48:b5:42:e6:5d:dc:ba:64:f6:
                    c6:31:20:dc:26:a6:76:ac:24:88:34:f6:0e:7e:2f:
                    f8:ae:30:cc:87:7c:69:4a:7a:12:e6:9d:e3:d1:04:
                    2e:a7:0a:10:44:54:85:65:02:e8:a9:9f:4c:b9:ef:
                    ab:c8:e9:1a:f7:b2:3c:70:5d:fc:e2:18:41:61:34:
                    7a:a0:49:86:3a:73:77:3a:04:4c:98:68:79:a7:cd:
                    2a:fa:61:55:ab:08:59:cd:09:44:77:89:33:e4:87:
                    b8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:30:10:A0:71:99:AC:C0:A0:71:7A:A6:A5:45:DF:9B:02:28:EA:E9
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:28:65:a6:b4:41:00:60:71:63:be:31:79:3a:47:cf:82:a5:
         ec:17:e4:44:1b:bb:51:c4:cd:b1:0c:57:03:48:30:78:e8:47:
         6d:da:6e:f3:28:1d:d4:96:34:ac:d7:51:c3:c1:56:60:a7:86:
         57:1b:74:90:3c:3b:4f:62:94:41:a4:b5:3d:ae:0c:44:95:ed:
         29:25:ae:29:73:f9:d4:73:a5:3b:a1:a4:6c:d1:27:9a:86:06:
         89:a0:94:36:ea:cc:88:94:e5:fa:1e:c9:18:74:86:3c:bf:56:
         a8:6a:4c:a9:fc:f3:66:83:db:23:59:8f:f7:f6:11:49:7c:35:
         4a:c9:6d:a6:64:f1:67:53:cd:03:f2:b5:c1:b2:4d:8a:27:43:
         93:01:ff:8f:97:79:95:3c:de:f3:4a:7b:21:de:99:60:7d:42:
         99:ac:9f:87:a6:cd:b7:80:8f:df:5e:72:95:8e:a5:4c:03:d4:
         3d:f4:c4:07:4a:db:3a:7f:d0:7e:b9:6e:a3:aa:74:b8:43:2b:
         4a:be:01:b3:c5:76:44:c3:e6:d7:92:33:42:2d:3f:93:aa:ca:
         3d:86:c6:d5:ba:af:97:85:b4:62:13:d9:8f:1b:d8:09:d3:81:
         27:f6:bb:2e:24:38:04:48:3e:0f:f5:b9:b7:c8:e7:98:40:3d:
         21:39:64:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:25:39 2025 by rpki-client