Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft
File:                     z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft (raw, json)
Hash identifier:          OgexbYEkuQMmxR9EnFeb+mp/fUNNxfzJq9uasfpSqGc=
Subject key identifier:   1E:7E:F6:F7:C9:27:A5:71:53:5E:8D:C8:81:3A:86:D3:1F:82:90:D3
Authority key identifier: CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9
Certificate issuer:       /CN=A913459F/serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9
Certificate serial:       1581
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft
Manifest number:          1581
Signing time:             Fri 28 Mar 2025 16:54:20 +0000
Manifest this update:     Fri 28 Mar 2025 16:54:20 +0000
Manifest next update:     Fri 04 Apr 2025 16:54:20 +0000
Files and hashes:         1: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl (hash: GH/3cj5fH0/RMSYePEC4CZAsEtzRsip3HzKAtukVSr4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5505 (0x1581)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913459F
        Validity
            Not Before: Mar 28 16:54:20 2025 GMT
            Not After : Apr  4 16:54:20 2025 GMT
        Subject: CN=67e6d43c-2eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:81:d8:60:3b:b6:79:9d:c4:dc:80:0e:97:
                    04:12:3f:b4:46:c0:d4:5b:ec:d7:e9:96:72:a5:8d:
                    34:09:89:96:31:68:a2:eb:99:40:60:9f:fb:88:02:
                    57:44:1e:0a:46:11:4e:de:a2:86:c6:1b:ba:0a:24:
                    4a:5e:86:d6:c0:e5:b5:57:1d:55:d3:1f:01:8a:ad:
                    0d:a4:01:58:19:7a:a8:3f:71:bf:18:f0:59:e9:1e:
                    ba:f4:62:ea:87:12:95:e5:6c:83:27:37:bc:06:61:
                    b3:f6:79:84:ce:09:dc:bf:fe:9f:d9:a0:f5:9e:85:
                    e5:84:92:aa:4b:8d:62:28:24:e0:05:1f:23:06:71:
                    ee:e6:f6:2c:c1:39:ba:43:66:94:9c:11:21:ce:79:
                    76:0e:6f:61:17:da:47:10:0a:f4:2f:4b:19:0c:cf:
                    27:af:04:18:2e:1d:e1:22:e6:c5:be:27:ce:c7:7c:
                    de:61:e8:62:cd:43:97:43:19:06:40:53:2f:68:d1:
                    6c:f3:dd:f5:08:9b:69:3f:3b:c4:78:0a:20:b4:51:
                    4d:80:6b:db:c3:76:32:1e:68:bb:10:a5:95:62:f3:
                    7c:3f:65:72:5f:f6:d1:f1:8c:8b:0d:41:34:78:3e:
                    58:48:8f:6e:5a:c4:1a:3e:38:ef:a4:bb:54:b1:2c:
                    02:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7E:F6:F7:C9:27:A5:71:53:5E:8D:C8:81:3A:86:D3:1F:82:90:D3
            X509v3 Authority Key Identifier:
                keyid:CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e1:56:4d:37:1c:5b:b0:f8:c1:bf:c4:22:64:c6:f0:6e:69:
         e6:d2:6d:46:5a:83:a5:25:00:46:07:70:bc:be:35:1a:5d:37:
         fb:cb:6d:e3:c2:b6:e9:3c:40:5d:31:87:c6:43:2b:8a:27:a9:
         32:d8:22:dd:65:cf:47:3e:70:f9:92:44:97:f3:4f:e4:69:7c:
         18:45:f0:f2:6e:4f:8a:e4:b0:35:05:9a:d0:40:e7:0f:8c:60:
         ec:37:8c:c3:a0:f4:26:dc:1b:cb:c2:66:1d:7e:d2:af:4b:a2:
         5b:00:e9:f9:54:97:90:ee:d1:48:c8:9f:a5:3f:e2:1a:7a:fe:
         d1:05:7d:af:54:49:00:b4:8c:6b:35:d8:fc:a4:3c:59:de:84:
         e6:25:19:12:86:f8:c8:39:e6:89:30:8b:8b:13:df:ee:25:50:
         fd:57:7e:92:2c:08:af:0a:06:0e:03:63:2d:bb:6b:58:54:19:
         95:06:85:55:dc:4c:b4:20:de:7c:6a:34:59:62:14:c0:5d:96:
         87:b3:73:b4:99:61:b2:15:39:2d:0f:1b:20:9f:67:2e:60:81:
         e2:f9:15:ec:0f:56:9c:81:16:22:53:0e:26:3b:e2:a3:d1:4d:
         01:cf:64:05:b9:cd:47:8b:9e:c1:c8:a3:43:8d:c8:74:48:0a:
         79:0e:af:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:11:58 2025 by rpki-client