Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft
File:                     YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft (raw, json)
Hash identifier:          rs7WmzPRKQxXbxJ0bTZ7bjKWeJPHC3NzC8DR9wk5jTU=
Subject key identifier:   43:20:A2:B6:76:70:D6:7F:34:B3:A4:F1:B0:3C:59:A4:38:89:35:C2
Authority key identifier: 62:A6:D5:ED:C5:8D:53:EF:98:08:08:BE:CE:D5:19:E8:05:B1:E4:0C
Certificate issuer:       /CN=A915179D/serialNumber=62A6D5EDC58D53EF980808BECED519E805B1E40C
Certificate serial:       3464
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft
Manifest number:          3464
Signing time:             Fri 28 Mar 2025 14:42:53 +0000
Manifest this update:     Fri 28 Mar 2025 14:42:52 +0000
Manifest next update:     Fri 04 Apr 2025 14:42:52 +0000
Files and hashes:         1: YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl (hash: 98nNh//HgSGgQaGl/YzfwCSKj2/TpPGyVKWfYW9R15w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13412 (0x3464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915179D
        Validity
            Not Before: Mar 28 14:42:52 2025 GMT
            Not After : Apr  4 14:42:52 2025 GMT
        Subject: CN=67e6b56d-9010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:56:50:14:4d:7e:6d:98:96:a2:b4:82:a4:89:
                    ec:dd:a5:56:1f:21:38:75:bc:f9:fa:38:08:38:f8:
                    83:d2:ce:dc:9c:60:79:f6:c1:ea:6d:76:db:b8:27:
                    77:4e:d8:f9:82:58:36:de:2e:2e:11:34:94:91:a9:
                    f0:e0:3e:e1:54:9f:37:f5:fc:f6:eb:20:dc:ef:2e:
                    f4:b7:46:74:53:f3:ca:9b:1b:38:25:be:6d:ee:e0:
                    37:2a:f1:c7:a4:55:d4:7c:f5:65:88:a2:5a:30:1e:
                    3d:8e:50:7b:1b:de:57:3f:27:16:a1:47:c7:53:03:
                    0a:1c:c0:94:0c:11:6a:1c:83:02:cd:1e:67:9e:40:
                    7a:b1:9c:7a:4e:9d:cd:fa:ca:ad:a3:56:c6:a0:43:
                    14:62:8d:51:96:32:b8:8c:b5:c5:a9:6e:04:dc:eb:
                    6b:50:fe:70:39:8e:79:b8:ea:24:13:f6:da:e9:7d:
                    0c:39:d8:68:52:2e:17:e1:b9:19:97:54:05:a7:c5:
                    56:d5:36:f7:22:6d:87:6f:05:ed:8a:6b:c0:f8:2a:
                    ed:01:f0:7f:70:96:ab:a0:e4:89:1d:78:18:c4:7f:
                    f5:be:4a:ad:69:46:77:cd:c2:1f:70:0e:79:6c:e1:
                    58:ee:eb:96:b3:65:20:bf:41:b2:b4:a8:32:ff:02:
                    d5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:20:A2:B6:76:70:D6:7F:34:B3:A4:F1:B0:3C:59:A4:38:89:35:C2
            X509v3 Authority Key Identifier:
                keyid:62:A6:D5:ED:C5:8D:53:EF:98:08:08:BE:CE:D5:19:E8:05:B1:E4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:b0:dc:a4:c9:9c:1c:c9:88:41:08:00:e5:28:39:f6:1c:b9:
         9b:1f:57:3c:4c:a4:97:fe:29:30:74:5c:4f:65:e6:26:09:d0:
         3d:c2:3d:b1:ea:73:4e:48:1a:38:67:9d:a6:59:c5:af:e3:68:
         3e:ac:52:a1:ae:e5:48:47:f2:ea:44:a2:69:92:58:33:c3:3e:
         ca:8a:2e:de:23:c3:2b:15:24:a0:53:77:bf:48:61:1f:7b:0f:
         b2:48:d8:3c:62:62:96:75:48:25:d2:26:2d:e1:76:15:29:33:
         8a:ca:b7:34:fd:4c:c1:4e:a2:fd:94:38:f5:f8:ce:27:e0:ea:
         ca:8c:8b:af:f6:e6:4b:cb:e4:d1:85:83:22:14:b8:25:b6:25:
         0a:1c:c6:42:6f:a4:f4:95:3e:1a:89:ff:a6:87:3c:c6:f0:df:
         25:3c:12:a4:88:eb:53:75:c9:b5:15:dd:64:bb:b1:c8:44:d2:
         67:d0:9c:9b:93:41:5e:13:39:9e:c3:d4:8a:99:c9:54:65:2d:
         12:d4:f2:c8:3a:4d:5f:fe:7f:0e:eb:d4:bf:ff:27:35:3e:6a:
         46:04:ce:6d:01:c2:5d:a7:d5:53:6f:3a:a0:f5:48:d7:f3:48:
         c9:3c:fb:2d:50:62:0e:3a:b8:fe:5f:cf:b7:9d:bd:6b:da:1f:
         31:d8:c7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:27:50 2025 by rpki-client