Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft
File:                     lddEZYkqyDm6JHn6BHVqXjBfJjw.mft (raw, json)
Hash identifier:          8McDLmyj/aN+k0JHrhuHp8FX9e0U8hXIHW9L3vJ5Kyg=
Subject key identifier:   BD:3F:C7:54:D2:FF:B1:53:C0:AE:80:BB:3C:BD:64:88:B7:73:C7:4B
Authority key identifier: 95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C
Certificate issuer:       /CN=A91557F2/serialNumber=95D74465892AC839BA2479FA04756A5E305F263C
Certificate serial:       0136
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft
Manifest number:          0136
Signing time:             Fri 28 Mar 2025 22:21:31 +0000
Manifest this update:     Fri 28 Mar 2025 22:21:30 +0000
Manifest next update:     Fri 04 Apr 2025 22:21:30 +0000
Files and hashes:         1: lddEZYkqyDm6JHn6BHVqXjBfJjw.crl (hash: s8LIdFz9uQLCA80M/OiCF6eKPQf71fWAqOylj4zgewg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91557F2
        Validity
            Not Before: Mar 28 22:21:30 2025 GMT
            Not After : Apr  4 22:21:30 2025 GMT
        Subject: CN=67e720ea-3d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:31:5c:0d:44:d7:43:5c:41:28:46:90:d6:26:
                    c5:5b:75:57:40:9f:ed:d4:1c:08:b2:aa:22:f9:a7:
                    e9:64:1c:5e:af:d1:de:c4:eb:ee:3b:4c:58:70:6a:
                    72:41:a4:49:3b:a2:14:5d:b5:05:b2:98:b8:45:32:
                    58:0a:10:55:57:60:e8:99:45:4b:d0:5a:4b:52:84:
                    2d:13:11:62:d3:e7:18:71:7b:6f:7b:6a:f5:9f:f5:
                    86:9d:18:2e:cf:32:37:b4:04:2b:4b:0c:2a:bf:89:
                    6b:c6:80:0f:65:b7:da:c0:30:fd:62:c6:58:de:b5:
                    fd:12:7a:59:88:4a:e1:49:7b:37:48:5b:fa:92:73:
                    83:af:4b:de:2a:ff:dd:06:77:47:3c:2a:02:90:66:
                    d8:af:56:04:ac:b9:7c:d6:1f:29:2f:da:a4:8e:7f:
                    28:1d:8c:1f:47:fb:16:8f:ae:35:76:ba:ff:11:ac:
                    9a:e8:62:ac:17:b0:3c:26:91:9a:a5:df:a3:38:77:
                    a2:24:36:22:f2:f2:07:94:01:8b:a6:69:44:6a:ba:
                    43:6e:35:ff:dd:bb:c4:e7:90:ac:9c:e7:1a:df:b5:
                    25:39:96:05:19:1b:a0:29:a1:24:46:bf:7e:5f:2e:
                    eb:af:d0:b5:9d:e1:0d:5a:39:75:59:04:ad:b3:9d:
                    ac:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3F:C7:54:D2:FF:B1:53:C0:AE:80:BB:3C:BD:64:88:B7:73:C7:4B
            X509v3 Authority Key Identifier:
                keyid:95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:a5:25:ea:81:d9:83:60:15:dd:77:b0:1f:85:09:b1:6f:0a:
         7b:9d:2d:b1:9e:1f:93:d2:3b:d8:de:85:4c:bf:b4:11:61:26:
         01:cc:7b:8a:b2:f6:b4:bb:7b:95:26:0a:3b:7f:32:bb:92:be:
         b6:d4:0c:48:b3:3a:1a:79:00:2e:bc:06:f3:47:ea:cf:0b:f5:
         78:ea:3d:b7:9b:cd:bc:5f:af:c3:7e:2d:e2:45:2b:18:c6:35:
         7f:a2:64:17:5e:65:2f:d2:ce:18:18:b4:5e:59:c0:7c:85:0f:
         51:3c:3c:05:cb:b9:f4:05:b0:9e:44:53:1e:7a:f9:02:91:2e:
         60:c1:21:ec:51:d0:c5:1c:1f:8f:e9:ae:6c:a2:cc:32:b1:45:
         d3:03:39:df:e2:29:fd:22:22:db:45:4c:73:db:39:a9:0f:2c:
         80:fe:0e:05:bb:e4:c7:83:97:88:48:65:d3:9e:8c:c1:2a:c0:
         a4:9b:ad:22:f4:d1:b0:d9:bb:35:96:c9:e7:9d:81:4c:ce:6f:
         53:e2:39:7c:76:29:ee:1e:dc:e8:47:ac:d7:36:a9:23:97:af:
         58:b7:ed:d7:0f:d1:60:de:60:66:44:5b:b4:fd:53:d6:22:74:
         99:8d:4b:0c:0d:1b:dc:cf:3e:f9:dc:cb:1d:b3:30:26:a1:2f:
         ea:6a:17:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:54 2025 by rpki-client