Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft
File:                     AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft (raw, json)
Hash identifier:          IkX/AdQtor8Ho9Qm6dCUVf70oammdNhJUvVaiBy+5m4=
Subject key identifier:   4F:D2:73:FB:40:8B:65:93:E5:70:57:57:55:09:1F:CA:C9:49:70:F4
Authority key identifier: 03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97
Certificate issuer:       /CN=A914B46A/serialNumber=0335A4800F99417009D08565BEAE6029234BD297
Certificate serial:       0550
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft
Manifest number:          0550
Signing time:             Fri 28 Mar 2025 23:42:02 +0000
Manifest this update:     Fri 28 Mar 2025 23:42:02 +0000
Manifest next update:     Fri 04 Apr 2025 23:42:02 +0000
Files and hashes:         1: AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl (hash: dEl6tZiFLvtj3ekbbJzQVX7aQqqlqgycDbPlf/jPv+4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1360 (0x550)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B46A
        Validity
            Not Before: Mar 28 23:42:02 2025 GMT
            Not After : Apr  4 23:42:02 2025 GMT
        Subject: CN=67e733ca-a96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f6:42:db:5e:01:77:2b:32:bb:64:5b:57:a6:
                    2f:3e:ec:b4:62:8c:be:42:02:12:47:e7:e2:57:27:
                    03:91:b6:2d:ea:1b:59:d3:16:46:e2:00:f6:ef:21:
                    d9:19:2a:3b:8e:68:96:0b:2b:94:2b:1b:29:07:e6:
                    1e:f5:8f:15:23:70:16:47:b7:b2:a3:6f:9d:7c:e8:
                    68:2c:e6:18:6d:80:b4:c4:32:76:e8:bf:59:06:f7:
                    11:a5:1a:a6:c0:4d:3f:17:74:37:8a:f3:36:da:ea:
                    55:4d:25:8b:7a:92:32:f0:7d:2e:54:7f:93:75:5a:
                    b4:d8:56:95:f9:d1:cd:67:0e:17:b5:75:10:e3:a9:
                    99:c6:85:ae:d3:03:30:98:f5:e4:55:a5:80:6a:07:
                    ff:fe:b5:de:5d:06:e7:d8:f0:65:37:0a:9d:d5:1a:
                    f1:de:00:81:42:fa:e9:fb:f0:85:2d:d9:44:4d:40:
                    20:4f:08:cd:bd:6c:1d:8a:5a:df:ac:69:8e:ba:52:
                    55:89:a1:64:61:b0:27:68:1b:26:63:01:83:82:89:
                    17:4c:a1:f3:e7:8a:80:e7:6b:fb:61:df:00:5d:be:
                    70:b6:86:10:02:52:03:3a:48:ad:0d:32:ce:78:d4:
                    5c:aa:45:98:02:26:1d:16:e1:b0:5b:42:81:b9:c6:
                    b0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D2:73:FB:40:8B:65:93:E5:70:57:57:55:09:1F:CA:C9:49:70:F4
            X509v3 Authority Key Identifier:
                keyid:03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:6d:27:44:49:fd:be:e9:87:7f:97:f3:89:5c:a1:aa:04:b4:
         ee:a2:c7:81:51:a1:2f:38:92:0a:2a:c7:0d:d0:35:d3:4c:76:
         8d:e2:d8:93:9a:3b:2e:a7:d2:63:0e:aa:ba:fb:4a:83:61:9d:
         c9:3d:c8:d8:33:e7:65:bc:8b:5f:78:f1:65:bc:85:50:37:60:
         92:fc:5e:8e:aa:16:0c:0c:a6:d9:06:dc:d0:a9:db:a9:29:6c:
         2c:e7:60:91:00:e8:70:ff:b3:e0:91:8e:df:d5:89:66:ea:5a:
         18:57:c8:0f:45:27:7a:39:91:24:da:6f:f0:35:0b:26:68:ef:
         93:23:3d:c6:45:92:08:0d:fc:21:31:cb:a8:56:b7:3a:73:89:
         33:0a:59:eb:0a:3b:4c:4d:ab:4b:3c:c4:26:c1:d0:4c:5d:d4:
         7d:c1:72:32:c0:a3:b3:b2:63:ab:ad:ff:5c:bb:85:d2:ac:46:
         09:6d:16:05:66:c5:f3:df:93:22:f2:a9:66:15:42:15:d6:dd:
         ea:39:71:5b:2f:c7:6d:c7:13:4c:8b:e1:40:34:10:78:13:5c:
         db:4f:e3:fe:17:cc:95:b5:d4:4c:f8:c5:04:0f:bb:7f:9b:dd:
         ca:0d:16:b6:de:62:8e:ec:d7:61:46:08:ec:e4:02:e2:bf:85:
         37:0f:3c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:51:45 2025 by rpki-client