Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
File:                     FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft (raw, json)
Hash identifier:          A8CiEh3qpA4ut4+vtfidysYcSPlVdC0ZO8a9HYyQOfY=
Subject key identifier:   DA:31:31:D6:A4:2A:59:E1:5B:25:13:B6:E7:36:8E:06:AD:EE:9D:BB
Authority key identifier: 16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09
Certificate issuer:       /CN=A9158F08/serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09
Certificate serial:       0C1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
Manifest number:          1518
Signing time:             Fri 28 Mar 2025 18:45:15 +0000
Manifest this update:     Fri 28 Mar 2025 18:45:15 +0000
Manifest next update:     Fri 04 Apr 2025 18:45:15 +0000
Files and hashes:         1: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl (hash: 72IfeI/d9e/L/pSe/gxUxUnTfDZu+Mdb7+kIE+MQStw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3098 (0xc1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158F08
        Validity
            Not Before: Mar 28 18:45:15 2025 GMT
            Not After : Apr  4 18:45:15 2025 GMT
        Subject: CN=67e6ee3b-fb79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d9:db:31:57:e5:2f:d3:d8:78:d9:5d:74:13:
                    e5:07:7c:1a:4e:5c:16:64:c3:cd:84:61:56:ef:51:
                    70:28:3f:d0:f4:e0:58:ba:da:25:fd:30:95:a3:b7:
                    b2:15:04:af:fa:03:78:86:a4:7b:01:c3:11:a5:4a:
                    bc:34:53:9b:78:f5:69:cc:91:1a:56:02:0d:2a:68:
                    a0:ff:89:c6:31:cf:b9:f9:e9:b0:bb:70:4a:f7:36:
                    71:df:46:1b:bb:af:89:f3:61:57:4c:ea:08:2d:11:
                    7c:95:fc:07:fe:c3:b4:31:ca:b6:11:ed:eb:bf:7d:
                    ae:57:e0:f7:fe:35:31:ea:7f:9e:c0:0d:18:55:b1:
                    9e:77:8c:c3:38:bb:65:69:9c:8e:b2:b3:c3:49:f2:
                    81:06:c1:2a:bf:b3:77:08:c8:0f:53:c9:d8:8a:7f:
                    9e:c1:ca:9b:a4:de:bd:ca:91:ed:d3:84:6c:26:6c:
                    60:0d:cb:e9:1c:25:fd:0a:19:b0:e7:a8:00:af:fa:
                    9c:69:6d:12:1c:34:07:84:bb:0e:9a:80:1e:9f:48:
                    38:ce:f7:fe:d9:88:d1:01:4d:65:f2:3b:c7:d8:0e:
                    83:5f:4b:3e:3a:5e:58:6a:d3:db:4f:7e:dc:ed:24:
                    ab:b9:76:9e:ae:7f:bc:fd:a1:a0:36:d7:7c:a8:4d:
                    96:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:31:31:D6:A4:2A:59:E1:5B:25:13:B6:E7:36:8E:06:AD:EE:9D:BB
            X509v3 Authority Key Identifier:
                keyid:16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:90:7c:c1:7d:80:3a:d5:41:2f:e5:cf:a4:f8:8d:ac:6e:b1:
         d3:91:d7:77:27:9a:17:f5:5f:e0:72:36:9d:99:f6:bf:98:f3:
         4f:fe:c5:0a:ff:e7:7c:6b:04:82:2d:9d:7a:d4:0e:2d:8d:58:
         38:3c:16:b7:41:96:b3:fb:d3:f0:0a:59:7b:db:47:d4:e8:bb:
         6b:d0:b1:70:96:72:ef:e8:b6:5d:f9:28:ff:2a:66:07:46:22:
         86:9e:6a:b3:f7:8a:91:14:5e:f1:46:e9:4a:45:0d:31:cc:78:
         00:0f:e1:76:df:14:a7:f2:bd:af:b8:3e:7d:b4:bd:30:46:b3:
         88:8e:1f:4d:1e:4c:44:3c:11:f3:62:24:b7:dd:47:95:ba:11:
         dc:ca:82:14:bd:83:ec:4b:2a:9c:af:c0:6c:57:6b:c5:77:29:
         36:92:14:0b:c6:c4:38:74:9f:a3:41:79:49:ba:76:85:8e:e1:
         62:f7:47:de:4a:b6:99:e1:51:ec:03:3b:28:86:34:b4:9c:50:
         32:d3:85:c1:17:aa:ff:8f:ff:cd:ca:a7:13:e1:dc:5a:25:fd:
         dd:33:4f:4a:54:52:dc:d1:09:76:83:55:30:19:f1:36:43:a9:
         74:c9:d2:8a:3d:21:ea:b7:f5:9f:f1:2c:39:2a:12:d1:8d:7c:
         af:d1:a4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:04 2025 by rpki-client