Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
File:                     SC1I47aWHxIIwGcVJOCOkDOV9lk.mft (raw, json)
Hash identifier:          SHi9LBoHT27lpAnonxVeT0j/6m1uRgNevzNopkzTyqA=
Subject key identifier:   CD:6E:C6:06:BC:DE:5C:E5:02:28:BA:11:48:82:76:7F:48:CC:71:28
Authority key identifier: 48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59
Certificate issuer:       /CN=A915BCE2/serialNumber=482D48E3B6961F1208C0671524E08E903395F659
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
Manifest number:          F2
Signing time:             Sat 29 Mar 2025 04:39:22 +0000
Manifest this update:     Sat 29 Mar 2025 04:39:21 +0000
Manifest next update:     Sat 05 Apr 2025 04:39:21 +0000
Files and hashes:         1: SC1I47aWHxIIwGcVJOCOkDOV9lk.crl (hash: Zi/wKdqQUt84vMP0eBXGqyjwCv4mRQdbAkn4vlPr9fA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCE2
        Validity
            Not Before: Mar 29 04:39:21 2025 GMT
            Not After : Apr  5 04:39:21 2025 GMT
        Subject: CN=67e77979-5f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:83:69:37:47:59:2d:cf:fb:92:7f:4d:e1:24:
                    4c:c6:c2:a3:75:ee:ec:2c:61:4c:2a:e2:b1:24:48:
                    53:0f:42:7a:1c:c6:ee:65:5f:0d:52:81:f9:d2:d5:
                    52:af:bd:d4:97:9c:96:32:66:70:f0:26:39:08:5c:
                    8f:48:95:38:10:da:5f:cf:9c:9c:eb:fd:ba:99:da:
                    ae:3b:00:90:eb:c5:ec:93:6f:23:b9:1a:e2:97:b9:
                    e0:7e:b3:8a:9e:a1:11:ec:04:7f:fd:98:4b:8b:95:
                    77:0f:8f:ab:5a:b6:96:da:e4:b1:e0:02:11:ab:41:
                    a2:9c:a2:38:14:f4:d7:45:6b:8a:9c:ed:7a:26:c6:
                    8a:5a:84:b0:2e:95:6d:92:c8:06:ab:b2:96:fa:df:
                    2f:6b:85:9e:d7:a3:8e:20:42:e3:02:f8:f1:d1:76:
                    4b:42:43:c9:d5:3f:87:e3:94:1b:43:84:6f:43:b7:
                    d4:fe:76:80:b7:41:98:59:7f:a6:52:4d:a8:4c:f9:
                    5f:bf:be:82:d2:79:d9:aa:c0:77:53:dd:39:5b:ca:
                    ec:0c:bb:27:d4:56:16:b9:0c:8a:bf:0f:fe:b6:b9:
                    f9:d6:69:fb:f7:e1:95:10:94:9f:d5:d4:62:df:e6:
                    65:1f:0e:ef:19:ec:d8:cb:92:58:33:d2:38:85:cb:
                    e7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6E:C6:06:BC:DE:5C:E5:02:28:BA:11:48:82:76:7F:48:CC:71:28
            X509v3 Authority Key Identifier:
                keyid:48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:82:97:5f:cc:fa:9b:87:c7:af:c9:9e:ae:3e:0a:e4:49:41:
         e8:ed:52:38:ff:be:06:e8:c3:d7:59:ae:16:d3:75:75:72:a0:
         2e:30:91:04:c1:89:88:c9:45:ce:2b:17:4d:ee:06:ce:32:f0:
         a4:81:5c:0b:72:91:78:2d:c3:d6:dc:0b:d8:27:95:11:61:11:
         c8:c0:a2:eb:cd:71:10:47:a1:98:94:d2:b0:8d:78:c9:09:b4:
         38:38:ae:0a:6c:f4:cf:6c:0d:e3:f0:80:ce:bd:04:a4:f3:01:
         29:58:30:d1:29:f9:db:b3:b7:a0:80:73:af:ad:4c:5f:38:36:
         55:bd:b2:25:e9:89:5d:82:fb:47:a6:3b:49:a4:a7:86:3f:3a:
         77:53:dc:d5:4a:7e:a5:28:6f:cd:0d:fc:d0:e5:c4:b7:2f:07:
         30:76:74:c2:6c:11:1b:d1:39:11:91:e4:95:d8:b2:bd:fe:f4:
         6f:e9:15:a2:43:98:58:29:01:04:76:15:31:df:4b:d8:fa:72:
         67:8e:09:55:9b:f9:71:c8:16:17:75:41:93:3d:30:44:26:7f:
         a0:1c:49:16:98:99:4a:81:b3:cd:e3:1e:82:76:d7:86:30:7d:
         cb:ea:32:0d:54:f2:2a:ad:76:a4:a5:60:6d:5d:20:01:de:9b:
         84:2b:8d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:27 2025 by rpki-client