Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
File:                     MfW8lHJxAkr0efYTZGbay_FDhsI.mft (raw, json)
Hash identifier:          vVZVm/BMzz+C3E/hCHHoR/DXjNMGd9pv6VZRfAjpYDU=
Subject key identifier:   D4:E4:EF:00:F6:38:61:F2:A9:9F:3D:B6:7D:DB:D1:57:DB:E7:F8:40
Authority key identifier: 31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2
Certificate issuer:       /CN=A914F4AA/serialNumber=31F5BC947271024AF479F6136466DACBF14386C2
Certificate serial:       3466
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
Manifest number:          3466
Signing time:             Fri 28 Mar 2025 14:34:54 +0000
Manifest this update:     Fri 28 Mar 2025 14:34:54 +0000
Manifest next update:     Fri 04 Apr 2025 14:34:54 +0000
Files and hashes:         1: MfW8lHJxAkr0efYTZGbay_FDhsI.crl (hash: 74dAN62HMAR9oUZNaDC/8WYbWZoMj2aYwF6r7FtFUuI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13414 (0x3466)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F4AA
        Validity
            Not Before: Mar 28 14:34:54 2025 GMT
            Not After : Apr  4 14:34:54 2025 GMT
        Subject: CN=67e6b38e-e054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c4:7a:28:dc:d0:48:10:e1:f8:0d:9c:e2:f8:
                    2b:57:ee:9e:b6:8d:3f:90:7e:7d:f9:f5:2a:a3:f2:
                    b9:01:64:08:eb:60:b8:28:7c:40:a0:0c:53:75:17:
                    31:6d:ed:e0:f6:98:91:99:15:c2:da:f5:11:b2:01:
                    4d:45:11:12:fe:9b:23:c1:36:c0:b2:e6:54:d4:31:
                    06:2a:2a:07:b3:47:6b:25:31:cc:58:d3:24:fd:8a:
                    9c:93:38:2c:d5:c7:ce:54:7d:03:af:bb:62:8b:75:
                    25:54:79:21:7a:d2:b8:5c:b3:cc:29:3a:04:96:15:
                    61:e5:c1:c1:d8:35:d3:5a:61:9b:67:5e:2c:a1:7b:
                    65:00:86:d4:81:f9:4a:04:e3:41:86:41:23:85:57:
                    02:ce:3e:db:7d:5a:ae:aa:ef:a2:79:f7:f5:ed:6f:
                    a7:ba:51:54:93:cd:96:1d:70:25:77:cb:04:cf:5e:
                    d1:a2:e3:4d:05:80:8c:cc:4b:23:6d:28:cb:82:06:
                    7a:34:a6:eb:ad:82:21:23:3d:6f:f6:2e:dc:92:93:
                    db:ae:8c:f8:a0:fb:ab:11:f1:15:3f:11:a5:63:68:
                    d3:38:90:9f:92:3c:ca:84:7d:ec:13:8b:0b:81:49:
                    17:30:5b:c6:15:03:26:95:7c:0f:cc:3a:6e:47:6b:
                    50:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E4:EF:00:F6:38:61:F2:A9:9F:3D:B6:7D:DB:D1:57:DB:E7:F8:40
            X509v3 Authority Key Identifier:
                keyid:31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:56:4f:ba:e3:4c:ed:9d:eb:92:bb:5d:dd:b5:13:90:4f:df:
         58:5c:da:5b:cd:ee:02:e4:98:9b:26:82:5e:72:1b:ae:db:cf:
         a9:8b:b8:78:0d:81:69:83:4d:ff:05:d1:3f:9b:bc:ce:9e:da:
         17:d7:b2:7c:9e:9e:f3:e7:2c:81:dc:b2:db:cb:05:d7:70:1d:
         05:6b:1b:43:d9:6d:44:4b:1a:32:de:11:91:c6:cc:65:d8:00:
         7f:e4:e6:80:4f:6d:f4:27:da:3d:14:72:09:12:ae:70:49:12:
         21:93:38:b5:58:a0:a1:27:be:65:dd:01:bf:52:e3:9a:ca:34:
         11:d9:5a:fe:f7:e1:78:b0:b7:e9:87:29:5d:1f:e3:e1:cd:76:
         80:2b:2a:b6:17:dd:bf:3e:a3:4a:03:70:5b:74:81:ad:fb:9d:
         99:62:eb:7a:ed:35:06:d9:b6:2e:4a:74:e2:d8:98:42:53:9c:
         d8:f1:de:1c:98:7f:92:1e:8a:c8:54:50:40:8d:4c:ca:69:b9:
         f9:c6:de:e0:4e:db:ac:70:fa:e5:b0:59:f0:22:70:bb:f3:13:
         f9:b0:d1:64:a7:ff:af:83:d5:51:f2:dc:04:b4:51:e9:0c:6b:
         88:6a:cd:4a:26:5b:8f:98:ae:1c:37:c7:c8:81:ff:c4:a1:cf:
         bb:64:24:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:34 2025 by rpki-client