Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/HWHbJNIXlkdJdhTBT2a7_6ypy_0.mft
File:                     HWHbJNIXlkdJdhTBT2a7_6ypy_0.mft (raw, json)
Hash identifier:          QH28pMjcjjYgYTYyxIIYpjAJaQwE9VF27s9N9qIULhw=
Subject key identifier:   5F:9F:0C:61:7B:C8:2D:18:06:12:04:4A:5E:EE:78:0C:77:3A:B3:24
Authority key identifier: 1D:61:DB:24:D2:17:96:47:49:76:14:C1:4F:66:BB:FF:AC:A9:CB:FD
Certificate issuer:       /CN=A915C241/serialNumber=1D61DB24D2179647497614C14F66BBFFACA9CBFD
Certificate serial:       025B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWHbJNIXlkdJdhTBT2a7_6ypy_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/HWHbJNIXlkdJdhTBT2a7_6ypy_0.mft
Manifest number:          0255
Signing time:             Thu 16 Jan 2025 01:27:54 +0000
Manifest this update:     Thu 16 Jan 2025 01:27:53 +0000
Manifest next update:     Thu 23 Jan 2025 01:27:53 +0000
Files and hashes:         1: HWHbJNIXlkdJdhTBT2a7_6ypy_0.crl (hash: 4DP7YfhXdbdkeMwEF0AK7TdOmz6ts+2oHn50t6PjpMg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C241, serialNumber=1D61DB24D2179647497614C14F66BBFFACA9CBFD
        Validity
            Not Before: Jan 16 01:27:53 2025 GMT
            Not After : Jan 23 01:27:53 2025 GMT
        Subject: CN=67886099-d80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b2:d3:f9:24:3e:d9:fa:ee:ce:56:26:91:82:
                    da:c7:64:61:69:58:49:31:e1:cb:7b:63:97:e4:6d:
                    72:a2:a4:68:bd:79:9f:59:6f:f8:20:5b:26:6a:59:
                    a3:3b:36:d6:a9:c8:6f:b7:90:c7:25:0b:61:aa:53:
                    18:2c:e8:5f:b1:cb:1b:55:31:4f:30:73:92:dd:2f:
                    78:3c:37:7b:4d:89:37:31:42:e2:76:c2:fb:0a:12:
                    eb:d0:f5:9b:de:59:9d:74:df:6e:bc:ac:07:10:a6:
                    9b:d5:b8:40:b4:bd:39:ce:75:82:9c:d2:60:1e:f1:
                    47:c3:ac:ca:f0:7e:95:71:1f:d7:cd:b8:2f:b6:e1:
                    6f:89:b8:08:9a:79:f6:69:9f:35:32:c6:b7:7c:77:
                    b8:5d:79:f3:0e:7f:76:a6:cf:e0:86:6f:01:3c:0b:
                    7f:bc:bd:d7:f0:eb:c3:de:ea:64:93:22:1a:e5:d0:
                    52:5c:83:89:a8:4c:19:dc:34:db:e0:c4:34:95:79:
                    df:07:ea:07:0a:18:46:fd:af:36:e8:59:3b:73:b9:
                    90:bd:98:6e:cf:45:8d:78:72:bc:7c:0c:f5:d1:80:
                    b9:3a:dd:ec:99:ff:e1:7e:fa:fb:51:bc:64:84:f7:
                    99:dd:2f:3f:62:0d:7f:1d:de:64:7c:75:d5:8d:94:
                    85:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9F:0C:61:7B:C8:2D:18:06:12:04:4A:5E:EE:78:0C:77:3A:B3:24
            X509v3 Authority Key Identifier:
                keyid:1D:61:DB:24:D2:17:96:47:49:76:14:C1:4F:66:BB:FF:AC:A9:CB:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/HWHbJNIXlkdJdhTBT2a7_6ypy_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWHbJNIXlkdJdhTBT2a7_6ypy_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/HWHbJNIXlkdJdhTBT2a7_6ypy_0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f1:8e:72:d4:e4:81:b4:7f:c1:77:ba:e0:ed:54:b2:09:ca:
         49:f3:d1:8f:96:f4:4e:f5:a4:af:05:fb:ef:bd:b3:b7:09:22:
         3c:0a:46:23:91:b9:cf:b6:38:2c:c0:3c:15:d6:0c:65:82:50:
         43:4e:d7:80:95:ae:9a:bb:75:32:2a:be:50:b8:15:26:96:7c:
         e1:a2:f9:c8:6f:e4:f0:eb:b9:33:b2:0e:d4:86:74:ab:00:4a:
         bf:68:9b:85:12:77:fd:41:89:6d:32:14:e5:e8:c6:25:e9:ca:
         11:37:0a:4e:51:16:ad:41:6b:31:63:c6:76:0b:fd:18:6c:af:
         ce:6e:8b:60:a5:86:cb:06:03:1d:a4:d9:18:55:5a:d6:7e:87:
         9a:87:89:9d:22:5b:dc:0a:21:ff:ba:50:22:3e:3a:56:50:5e:
         40:96:80:f7:9f:e6:47:7e:73:29:23:ad:48:0b:3b:86:51:ec:
         01:26:96:db:8a:b6:e7:cc:96:00:b5:95:35:49:97:19:b8:4f:
         f7:4b:0b:77:09:08:6f:a7:de:4c:6b:b8:14:08:f0:70:f2:9f:
         c5:c3:7c:4a:c5:df:09:ee:ee:a2:d5:d5:dd:99:d7:cb:14:98:
         f0:39:82:c4:bc:16:47:c4:9c:38:ce:6b:84:b1:cd:fc:d9:bf:
         40:b6:40:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:26:35 2025 by rpki-client