Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.mft
File:                     1H75KB4xQx3ljjR8aX45vydCkRk.mft (raw, json)
Hash identifier:          3PUboqyeNAYFyZi9kMYf/Aq4OUB5VhrZgrrq7YCWm04=
Subject key identifier:   29:81:D2:B6:7A:5C:06:C2:FE:EB:B5:86:30:D4:E0:74:EC:2F:12:D8
Authority key identifier: D4:7E:F9:28:1E:31:43:1D:E5:8E:34:7C:69:7E:39:BF:27:42:91:19
Certificate issuer:       /CN=A91612FE/serialNumber=D47EF9281E31431DE58E347C697E39BF27429119
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1H75KB4xQx3ljjR8aX45vydCkRk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.mft
Manifest number:          47
Signing time:             Sat 29 Mar 2025 06:42:00 +0000
Manifest this update:     Sat 29 Mar 2025 06:42:00 +0000
Manifest next update:     Sat 05 Apr 2025 06:42:00 +0000
Files and hashes:         1: 1H75KB4xQx3ljjR8aX45vydCkRk.crl (hash: KcBKpN6k1qj3pLhfILLLcUepqAciUYVnJcFijJrYBvE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91612FE
        Validity
            Not Before: Mar 29 06:42:00 2025 GMT
            Not After : Apr  5 06:42:00 2025 GMT
        Subject: CN=67e79638-0146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fd:73:87:61:db:17:30:42:e6:3a:b4:57:9f:
                    3b:6b:43:62:25:d0:c2:1d:e4:5d:06:06:42:06:2a:
                    5f:86:d5:70:5c:db:e9:d9:0f:07:e6:5f:38:b0:9f:
                    71:b7:63:65:3a:c6:32:1e:f3:f9:79:6c:eb:59:e7:
                    aa:c8:f6:78:6a:c1:7d:fd:32:7d:88:87:ca:20:e3:
                    ab:52:eb:36:69:9e:63:71:e5:53:1b:14:13:7d:28:
                    a0:95:46:b7:5a:eb:8b:9f:06:49:33:27:21:24:73:
                    2c:ae:46:cb:4f:93:f1:73:91:b2:8d:bd:df:a3:86:
                    de:0e:e4:25:c4:67:93:06:68:32:b7:5a:25:8e:1b:
                    62:10:87:54:b3:cc:34:55:8f:42:88:dd:c8:7f:22:
                    7b:96:04:c7:35:7c:10:ef:9a:75:7a:f1:6e:e7:03:
                    75:ad:d8:2d:0e:eb:7c:90:16:50:03:ba:9c:09:c7:
                    f9:fa:19:d6:ea:20:a9:0e:86:e2:5f:5d:a4:68:b6:
                    0e:b8:df:89:50:f3:87:00:c2:97:7b:6b:65:f7:0a:
                    8b:7c:b8:f4:92:0d:48:0f:53:b9:66:d4:22:aa:dd:
                    df:25:b8:f3:cc:4c:b3:d9:f0:39:e4:8e:48:d0:0e:
                    43:17:42:f4:19:62:a7:c8:67:4e:23:41:62:70:66:
                    f2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:81:D2:B6:7A:5C:06:C2:FE:EB:B5:86:30:D4:E0:74:EC:2F:12:D8
            X509v3 Authority Key Identifier:
                keyid:D4:7E:F9:28:1E:31:43:1D:E5:8E:34:7C:69:7E:39:BF:27:42:91:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1H75KB4xQx3ljjR8aX45vydCkRk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e6:36:bf:5e:70:85:93:9b:9d:54:4d:60:c2:c6:c9:7c:47:
         ba:c3:75:6b:08:ea:33:0a:2f:f4:49:c1:0a:ef:d1:2b:7f:a1:
         6a:7f:e6:2b:fe:de:cd:7d:a1:f2:8f:cd:49:fd:ad:eb:86:81:
         5e:53:4c:77:84:c7:c2:90:85:fe:4f:2d:b7:96:a8:88:36:86:
         e9:88:b5:d8:85:9b:33:28:7a:73:88:5e:7a:30:cb:b4:d0:f4:
         41:60:78:b8:aa:df:eb:e9:6b:c8:0f:53:c2:7e:a8:b0:bc:c9:
         db:fe:cc:b2:3b:69:ae:bd:0b:20:61:98:65:26:df:3f:ac:60:
         9d:6e:f5:0d:97:48:69:50:fb:7a:3c:1f:b8:13:80:24:bb:ab:
         b9:27:e4:27:93:3d:d5:d7:25:73:23:65:80:3b:f0:fc:5d:8d:
         b0:45:2a:b0:16:b3:d6:2a:5c:09:9a:fc:0f:0e:6c:b4:4c:97:
         54:73:55:3f:0b:ae:79:2e:b8:64:f6:94:f1:7d:31:cc:21:3a:
         c5:2d:f6:fc:b4:d5:da:f8:fd:83:fd:5d:96:50:ee:78:e8:7f:
         7a:bd:b7:d8:3d:4c:d1:bc:a2:7d:92:4a:5f:10:1f:14:c0:53:
         61:11:c7:0f:0e:84:2f:45:37:b9:0b:eb:eb:f0:2e:db:50:45:
         aa:4f:90:7d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MTJGRTExMC8GA1UEBRMoRDQ3RUY5MjgxRTMxNDMxREU1OEUzNDdDNjk3RTM5QkYy
NzQyOTExOTAeFw0yNTAzMjkwNjQyMDBaFw0yNTA0MDUwNjQyMDBaMBgxFjAUBgNV
BAMTDTY3ZTc5NjM4LTAxNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5/XOHYdsXMELmOrRXnztrQ2Il0MId5F0GBkIGKl+G1XBc2+nZDwfmXziwn3G3
Y2U6xjIe8/l5bOtZ56rI9nhqwX39Mn2Ih8og46tS6zZpnmNx5VMbFBN9KKCVRrda
64ufBkkzJyEkcyyuRstPk/FzkbKNvd+jht4O5CXEZ5MGaDK3WiWOG2IQh1SzzDRV
j0KI3ch/InuWBMc1fBDvmnV68W7nA3Wt2C0O63yQFlADupwJx/n6GdbqIKkOhuJf
XaRotg6434lQ84cAwpd7a2X3Cot8uPSSDUgPU7lm1CKq3d8luPPMTLPZ8DnkjkjQ
DkMXQvQZYqfIZ04jQWJwZvIxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKYHStnpc
BsL+67WGMNTgdOwvEtgwHwYDVR0jBBgwFoAU1H75KB4xQx3ljjR8aX45vydCkRkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxMkZFLzQ5MUQ2OTRDQTI1
NTExRUZCMkNBNzgyQUM0RjlBRTAyLzFINzVLQjR4UXgzbGpqUjhhWDQ1dnlkQ2tS
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMUg3NUtCNHhReDNsampSOGFYNDV2eWRDa1JrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx
MkZFLzQ5MUQ2OTRDQTI1NTExRUZCMkNBNzgyQUM0RjlBRTAyLzFINzVLQjR4UXgz
bGpqUjhhWDQ1dnlkQ2tSay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAE3mNr9ecIWTm51UTWDCxsl8R7rDdWsI6jMKL/RJwQrv0St/oWp/5iv+
3s19ofKPzUn9reuGgV5TTHeEx8KQhf5PLbeWqIg2humItdiFmzMoenOIXnowy7TQ
9EFgeLiq3+vpa8gPU8J+qLC8ydv+zLI7aa69CyBhmGUm3z+sYJ1u9Q2XSGlQ+3o8
H7gTgCS7q7kn5CeTPdXXJXMjZYA78PxdjbBFKrAWs9YqXAma/A8ObLRMl1RzVT8L
rnkuuGT2lPF9McwhOsUt9vy01dr4/YP9XZZQ7njof3q9t9g9TNG8on2SSl8QHxTA
U2ERxw8OhC9FN7kL6+vwLttQRapPkH0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:26:13 2025 by rpki-client