Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft
File:                     45B7SOaYfi_fztAe0B1As_Y9sRg.mft (raw, json)
Hash identifier:          nunt8pJrgSOfKCdoe3clxkmtNVyJhnKo6zAdrqc2EzM=
Subject key identifier:   EB:16:B8:14:75:65:DA:11:00:FC:F3:A8:B6:DE:F7:FE:DA:E6:EB:26
Authority key identifier: E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18
Certificate issuer:       /CN=A91297A2/serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft
Manifest number:          0115
Signing time:             Sat 29 Mar 2025 04:18:56 +0000
Manifest this update:     Sat 29 Mar 2025 04:18:56 +0000
Manifest next update:     Sat 05 Apr 2025 04:18:56 +0000
Files and hashes:         1: 45B7SOaYfi_fztAe0B1As_Y9sRg.crl (hash: CqQ4/nYmqwlCT0DwbHsvEq+cZVHmoyJ+F+HUrjCZwGw=)
                          2: 3802AF56829811EEB7C3F322C4F9AE02.roa (hash: /dryDqRy0DH6c/gZr4MBN4BosfeqNmHeRwKmrIx/CX8=)
                          3: B08503D8F8AA11EE91684140C4F9AE02.roa (hash: ZuM6BVmH6niQKuKQ1eCiPR55KnpBaOjGce45jTQXxyE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91297A2
        Validity
            Not Before: Mar 29 04:18:56 2025 GMT
            Not After : Apr  5 04:18:56 2025 GMT
        Subject: CN=67e774b0-820e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:46:78:10:fc:6c:d3:cb:b1:ea:35:a7:5d:8a:
                    90:ea:5b:5f:30:74:c2:7e:ce:b0:0c:8b:fa:d3:67:
                    ec:6e:fc:9b:a6:65:02:1c:db:9b:68:82:25:2a:7c:
                    44:b2:d4:61:6e:3a:f0:05:50:64:c1:d3:a7:1d:da:
                    d4:c8:87:a7:62:7d:c5:64:6b:4f:19:2d:c3:03:3a:
                    53:9d:4b:34:c3:52:49:16:88:b5:aa:f5:58:ae:24:
                    74:54:63:5c:21:09:68:8b:43:f7:d1:26:88:93:28:
                    ca:ca:e4:43:3f:82:01:e1:a2:6e:b1:ba:d6:cf:dd:
                    b8:eb:67:bf:f8:ba:22:cc:5c:62:7b:6e:f6:d3:53:
                    74:8d:df:b1:73:76:b2:14:61:96:ab:be:47:b6:94:
                    7f:c6:74:3a:f7:81:c9:a7:89:b7:97:89:81:2e:f4:
                    d1:9f:89:cb:9b:06:49:5b:3d:a8:f0:3a:0a:94:aa:
                    0d:92:38:ae:6c:dc:af:be:4c:75:55:39:f5:c0:8b:
                    45:71:83:bb:ef:1f:13:82:3f:6d:91:ad:0c:7e:a6:
                    b9:eb:9f:c0:9f:2b:bd:e3:4f:2d:87:6d:c4:e8:1f:
                    db:a8:2e:05:bd:c3:f7:f2:19:fb:3d:99:3f:75:33:
                    07:eb:89:90:9c:5c:3f:36:50:11:55:1b:7e:94:e7:
                    e4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:16:B8:14:75:65:DA:11:00:FC:F3:A8:B6:DE:F7:FE:DA:E6:EB:26
            X509v3 Authority Key Identifier:
                keyid:E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:bd:e0:2a:cb:5b:d8:ef:1f:e5:ff:d2:45:9b:fa:a2:36:d8:
         30:f6:d2:97:c1:33:19:4f:9e:fc:f4:11:74:3f:0a:98:71:f7:
         47:a7:4c:a3:ec:a7:ad:39:5c:c7:51:71:0d:23:12:c7:91:c2:
         17:4e:08:9b:d8:c2:39:82:ac:94:4a:da:63:93:58:d3:61:2a:
         0c:a6:aa:15:97:37:ff:71:f5:6e:a1:66:42:0c:09:62:87:14:
         74:f2:07:ef:b5:cf:c5:14:92:b8:bc:04:c2:0e:08:d7:a5:c0:
         72:d6:b1:d7:19:81:63:eb:8a:11:12:f5:47:5a:3e:1e:a8:b0:
         55:55:7c:2d:e8:73:3a:aa:0b:34:c7:4a:fe:4f:50:10:4e:2f:
         45:af:32:05:36:25:e6:48:bc:46:dd:45:b0:f5:7d:b4:70:e1:
         de:29:0d:6c:98:57:0c:0b:5b:ec:7e:d5:3d:6c:a8:d3:3e:1a:
         5e:83:82:1d:5b:29:16:6d:c3:ff:5a:91:20:5f:22:42:dc:f6:
         9b:b9:eb:9d:1b:fc:96:6e:90:26:b4:b1:71:11:a1:88:17:e8:
         75:48:7f:7d:ed:c2:26:77:1b:34:9a:22:2b:96:78:af:b5:75:
         58:6b:84:68:74:06:4f:39:d5:6d:a0:8d:a4:b0:25:f1:0c:f3:
         23:10:e5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:57:58 2025 by rpki-client