Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/0bjmcZc1WQIPhwPRfc2JJpLmQKI.mft
File:                     0bjmcZc1WQIPhwPRfc2JJpLmQKI.mft (raw, json)
Hash identifier:          MAXo5ZN3L+1YVAcHtcNaxRZLJ1V3B/Y0cCYu/9mkH0M=
Subject key identifier:   FF:66:FC:9C:C6:65:A0:13:6B:0D:44:2F:14:B9:77:B5:07:3D:73:76
Authority key identifier: D1:B8:E6:71:97:35:59:02:0F:87:03:D1:7D:CD:89:26:92:E6:40:A2
Certificate issuer:       /CN=A914EC08/serialNumber=D1B8E671973559020F8703D17DCD892692E640A2
Certificate serial:       01FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0bjmcZc1WQIPhwPRfc2JJpLmQKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/0bjmcZc1WQIPhwPRfc2JJpLmQKI.mft
Manifest number:          01E2
Signing time:             Thu 03 Apr 2025 05:58:57 +0000
Manifest this update:     Thu 03 Apr 2025 05:58:56 +0000
Manifest next update:     Thu 10 Apr 2025 05:58:56 +0000
Files and hashes:         1: 0bjmcZc1WQIPhwPRfc2JJpLmQKI.crl (hash: XdZ1jkfmIwczg6Kbaw11J0jrJ8HSITadfzvyt3xQpmE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EC08
        Validity
            Not Before: Apr  3 05:58:56 2025 GMT
            Not After : Apr 10 05:58:56 2025 GMT
        Subject: CN=67ee23a1-952a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fa:11:75:39:c2:7e:1f:da:9e:9a:80:89:a2:
                    57:87:42:5b:ed:28:bb:dc:e7:20:f9:df:09:78:44:
                    e0:b0:a5:60:b7:b9:8b:e7:cb:af:6f:74:63:b2:35:
                    9f:d9:af:2d:cc:0c:f5:e1:a6:7b:ab:ea:e4:e1:21:
                    bc:a2:fd:42:1b:42:54:18:a6:f8:6c:98:04:47:de:
                    50:98:33:cb:8c:bb:9b:9f:da:43:af:e4:c8:2d:61:
                    5a:62:53:87:66:b3:8f:3a:d1:f7:df:c5:97:dc:f0:
                    4c:09:4f:38:b0:db:8c:9c:cf:8a:1f:04:5f:ab:bd:
                    b7:8b:af:11:3e:34:27:1c:f7:c3:80:b2:44:ec:6c:
                    03:9a:6a:a9:e0:0f:13:73:6b:2a:a8:c6:45:f5:94:
                    32:99:08:51:cf:ea:6f:11:80:8e:07:be:da:86:83:
                    59:00:3c:6a:8d:f2:b8:c0:d6:83:c9:c6:55:3e:e4:
                    d1:97:11:43:a2:a6:c1:1c:a1:a8:29:5d:51:ee:64:
                    45:e9:7b:31:2d:6a:65:e4:8d:9c:57:bd:70:c1:24:
                    19:d2:2b:df:d5:87:95:35:4f:db:40:48:50:73:9c:
                    e4:a3:ca:c2:0b:b8:24:ac:e3:88:7e:8c:06:c3:c9:
                    11:dd:e6:f9:26:16:bb:45:26:85:70:47:81:b9:84:
                    7b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:66:FC:9C:C6:65:A0:13:6B:0D:44:2F:14:B9:77:B5:07:3D:73:76
            X509v3 Authority Key Identifier:
                keyid:D1:B8:E6:71:97:35:59:02:0F:87:03:D1:7D:CD:89:26:92:E6:40:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/0bjmcZc1WQIPhwPRfc2JJpLmQKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0bjmcZc1WQIPhwPRfc2JJpLmQKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/0bjmcZc1WQIPhwPRfc2JJpLmQKI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:80:6b:d6:10:7a:39:af:4a:06:ee:60:d5:b7:f7:cc:0b:d8:
         b0:05:46:9d:be:6d:93:6a:a6:6b:ee:d1:78:4f:61:10:6a:7c:
         52:46:7b:be:ab:22:2d:3c:64:f1:14:ab:35:54:3d:83:94:c5:
         c4:a0:78:6a:be:fa:cc:a4:ba:a4:c4:9c:3a:03:01:df:91:fc:
         ca:b6:43:d1:a9:6f:ba:1d:6b:39:65:24:98:3c:62:9b:53:80:
         1f:04:c2:a1:81:18:10:98:8b:11:e3:b7:73:b7:46:cd:d2:8a:
         88:cb:b9:82:05:85:bb:53:45:15:0e:31:06:c5:08:6f:c1:2e:
         73:33:c0:6a:2e:07:67:70:f4:15:33:72:20:25:c5:c4:84:40:
         e7:34:8f:8b:b7:f2:29:de:fd:09:27:15:73:56:76:70:ac:89:
         fc:9a:88:59:d0:30:4a:b1:e1:59:a8:a0:69:3c:4a:0f:23:e2:
         61:09:46:3d:d0:51:f8:f4:3d:b6:c5:00:fa:67:82:26:e6:4e:
         f5:6a:d5:6a:e4:1d:ae:f1:fa:ac:7d:96:1c:d6:d2:8b:05:b8:
         4c:fb:c0:05:33:6d:09:23:2d:d5:09:3a:df:a8:2c:e6:3a:6c:
         d9:82:00:50:82:78:1f:16:14:b8:72:f8:12:3a:f3:77:eb:47:
         ea:be:5a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 18:15:33 2025 by rpki-client