Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91602BE/38218332A21D11E99C9DC77DC4F9AE02/F_lRhEBRRIyJBhQEz7QequBHOno.mft
File:                     F_lRhEBRRIyJBhQEz7QequBHOno.mft (raw, json)
Hash identifier:          FuyznBc6nSbYc2NP1nyeI0nMUOcyMqRYF2QBXRVjfSc=
Subject key identifier:   CE:82:B3:7F:46:E9:F1:2A:6C:11:67:BE:E9:9E:B9:D2:9E:0F:6E:91
Authority key identifier: 17:F9:51:84:40:51:44:8C:89:06:14:04:CF:B4:1E:AA:E0:47:3A:7A
Certificate issuer:       /CN=A91602BE/serialNumber=17F951844051448C89061404CFB41EAAE0473A7A
Certificate serial:       0E3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_lRhEBRRIyJBhQEz7QequBHOno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91602BE/38218332A21D11E99C9DC77DC4F9AE02/F_lRhEBRRIyJBhQEz7QequBHOno.mft
Manifest number:          0E2A
Signing time:             Mon 17 Mar 2025 01:36:51 +0000
Manifest this update:     Mon 17 Mar 2025 01:36:51 +0000
Manifest next update:     Mon 24 Mar 2025 01:36:51 +0000
Files and hashes:         1: F_lRhEBRRIyJBhQEz7QequBHOno.crl (hash: WMt5zK/ahm4WzwUpuaU1xoaU3M870lVpHxRoR/2YO3I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3647 (0xe3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91602BE
        Validity
            Not Before: Mar 17 01:36:51 2025 GMT
            Not After : Mar 24 01:36:51 2025 GMT
        Subject: CN=67d77cb3-4b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cb:94:c8:18:0e:54:4f:e6:63:d4:91:92:73:
                    12:61:20:90:2b:1f:c9:4d:15:22:db:41:c4:14:57:
                    18:95:e7:96:e4:ef:6e:a4:3a:2c:3d:cd:59:91:a0:
                    14:eb:c7:ee:4f:22:6a:c0:3b:b4:2f:a6:fc:a0:63:
                    13:6b:4a:73:96:7a:9a:fa:89:11:e5:e2:4b:d9:0e:
                    65:09:b3:a9:af:c6:66:1b:2f:0c:15:cf:65:2c:5d:
                    6c:cc:bc:90:15:02:39:02:fe:1e:1b:0e:7a:5c:b8:
                    16:7b:08:2e:e1:10:b0:3d:07:31:c8:2d:ae:b1:da:
                    d8:6e:8e:6f:10:91:f5:85:a2:f6:84:51:d5:f8:4d:
                    ca:3c:e3:fd:c3:27:a3:e0:79:90:df:19:17:1f:c5:
                    ee:2e:c7:bb:27:e1:17:da:ec:27:db:95:28:03:80:
                    fa:9d:33:d1:48:06:0f:48:35:8d:88:aa:a9:a3:3b:
                    bc:d7:dc:da:c6:89:18:67:1e:68:8b:38:d5:a9:16:
                    5a:08:f6:07:10:d7:15:ae:fb:fb:de:a9:44:28:75:
                    e5:48:2f:ad:ed:45:6b:31:fe:85:3b:b1:81:21:cd:
                    8e:f7:0d:da:e8:19:cb:11:e9:e0:fb:57:7c:5f:01:
                    7b:52:7e:a5:68:b5:19:a6:1e:e5:08:ca:e7:91:72:
                    86:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:82:B3:7F:46:E9:F1:2A:6C:11:67:BE:E9:9E:B9:D2:9E:0F:6E:91
            X509v3 Authority Key Identifier:
                keyid:17:F9:51:84:40:51:44:8C:89:06:14:04:CF:B4:1E:AA:E0:47:3A:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91602BE/38218332A21D11E99C9DC77DC4F9AE02/F_lRhEBRRIyJBhQEz7QequBHOno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_lRhEBRRIyJBhQEz7QequBHOno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91602BE/38218332A21D11E99C9DC77DC4F9AE02/F_lRhEBRRIyJBhQEz7QequBHOno.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:a9:16:71:17:99:f9:de:31:9f:fb:9d:17:86:10:04:94:11:
         a5:32:2d:ac:ee:28:01:7b:b2:17:47:35:45:a3:a2:e7:34:38:
         2b:78:ef:71:ec:f0:5c:8f:39:81:68:38:50:0c:01:de:6e:1f:
         1b:fb:72:5d:3d:28:22:98:e2:15:9b:7f:00:97:d7:b1:b6:c5:
         04:a1:5e:d7:9f:f5:83:d6:18:d1:d8:16:13:b7:58:d8:95:e6:
         1d:4c:91:f1:55:33:d7:19:6c:6f:b5:bf:b5:64:d1:69:33:f4:
         53:7f:8e:28:cc:5f:44:b6:3b:2f:f4:92:c5:3f:51:c6:63:4f:
         92:8c:18:fd:27:d1:c7:66:92:3c:f0:85:d1:62:3d:d7:e0:71:
         9f:f5:26:ea:0a:81:1e:59:18:1f:b6:bb:e6:97:96:08:86:8f:
         e3:c1:6b:14:d7:6b:45:37:5e:c1:cf:5f:c0:67:ec:a4:7b:cb:
         fc:45:63:cc:84:66:6f:35:e7:2d:d8:cc:9f:d9:b8:71:3e:66:
         b5:07:49:6c:b3:e8:ef:6b:bc:a0:38:3c:74:e0:05:44:f5:57:
         3e:66:79:e4:d9:17:34:df:2b:2d:97:25:38:1c:0d:8c:55:e1:
         da:03:1d:fa:cd:62:53:62:13:0b:22:03:24:75:b1:17:32:a9:
         f4:b5:be:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:01:54 2025 by rpki-client