Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
File:                     TTnePlBgaMODagBUgVVBPmgllbM.mft (raw, json)
Hash identifier:          g1lhWw7DE/TfAvSDii9I6eTupPMTKZIUQKROaO2Htho=
Subject key identifier:   75:F1:0D:C3:76:43:7E:2A:FC:CD:69:59:F7:E5:43:B1:A6:E2:20:C4
Authority key identifier: 4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3
Certificate issuer:       /CN=A916C4FA/serialNumber=4D39DE3E506068C3836A00548155413E682595B3
Certificate serial:       0333
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
Manifest number:          04BE
Signing time:             Sat 29 Mar 2025 01:21:29 +0000
Manifest this update:     Sat 29 Mar 2025 01:21:28 +0000
Manifest next update:     Sat 05 Apr 2025 01:21:28 +0000
Files and hashes:         1: TTnePlBgaMODagBUgVVBPmgllbM.crl (hash: um/O75L0lDQK5PvuHAExIINQElVrCEdiGcgBZyHLtZM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 819 (0x333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4FA
        Validity
            Not Before: Mar 29 01:21:28 2025 GMT
            Not After : Apr  5 01:21:28 2025 GMT
        Subject: CN=67e74b18-9867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:00:f7:4f:b1:11:19:30:93:53:47:35:a7:e0:
                    c0:d1:f7:94:2f:e7:09:40:c2:bf:53:eb:c4:a0:c6:
                    88:bf:1f:d2:aa:e1:76:c9:b8:7a:cb:dd:81:43:ea:
                    55:ab:24:b8:fe:cb:74:67:fc:1c:db:da:94:84:46:
                    b8:68:42:0c:91:88:89:3b:9d:a7:b6:0b:92:98:f1:
                    4b:69:a0:30:2b:1c:24:c4:1a:86:f0:cd:ae:a6:f5:
                    71:9a:b3:c3:0a:ec:82:ac:4f:bc:22:74:83:a6:7f:
                    31:30:2f:49:4f:31:f7:c7:2a:c0:c7:f8:f4:b6:d7:
                    9d:5f:fd:78:3c:3e:ba:b0:f1:6c:32:44:0f:a8:bf:
                    cd:35:ee:c9:ec:f3:65:d4:c1:90:99:54:0d:04:60:
                    cd:02:2b:13:8b:34:94:27:d1:5e:3c:6d:3c:11:df:
                    7b:e8:aa:58:23:d1:80:dd:3b:ac:c4:4f:9d:0d:5a:
                    79:73:f1:5c:22:65:e0:a5:9e:8a:67:0d:a7:5b:0e:
                    ac:aa:ec:69:ab:3f:65:76:74:73:62:5a:5b:17:6b:
                    a8:19:3a:9b:e0:87:11:fc:f1:29:93:1c:87:9c:28:
                    16:fb:b3:0c:95:0b:33:8e:82:a2:13:1f:8e:6f:f0:
                    0d:29:60:e6:2e:f2:d8:a7:50:39:65:cc:d4:94:a3:
                    4b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F1:0D:C3:76:43:7E:2A:FC:CD:69:59:F7:E5:43:B1:A6:E2:20:C4
            X509v3 Authority Key Identifier:
                keyid:4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:50:4a:da:f9:a4:64:49:46:71:80:77:33:99:fd:48:8d:f5:
         b7:6c:9c:68:5e:65:68:18:60:9f:8c:6e:c4:f0:75:e3:f6:16:
         37:bd:0d:f6:35:7d:2b:6b:e6:12:fa:a4:84:7f:4a:f6:cb:89:
         1b:f8:3d:85:f2:24:95:dd:25:fa:02:10:27:c9:00:42:c8:97:
         0d:f1:60:e6:af:51:4b:e4:b5:b4:d5:cf:48:c6:b6:d3:3f:6d:
         8a:a7:70:d0:49:ad:2a:86:91:62:a2:79:90:e7:c7:12:9b:3d:
         16:45:8c:0d:12:76:0d:72:99:68:a6:bb:d3:75:c7:30:95:5b:
         45:19:b2:58:c3:5b:8b:ba:da:d6:18:c3:d3:d2:16:1b:42:56:
         f1:da:30:9a:d6:e5:b0:a0:fc:85:54:1c:5a:e0:85:9b:b3:e5:
         8a:b6:f5:32:09:eb:de:40:17:49:39:d4:35:2a:8c:37:2e:ec:
         d8:52:9f:4e:22:3b:1e:7c:4d:d5:88:64:e0:a5:82:76:65:2c:
         48:b3:8b:09:a9:de:4c:f9:7d:e2:3a:51:6b:5c:0b:25:de:24:
         64:cc:20:34:f5:80:d6:72:4a:d4:fb:62:bc:0c:32:d7:bb:1b:
         3e:15:b0:4f:0e:36:b1:8a:87:0b:98:77:bd:60:a3:e2:bd:85:
         7a:3c:91:a0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM0RkExMTAvBgNVBAUTKDREMzlERTNFNTA2MDY4QzM4MzZBMDA1NDgxNTU0MTNF
NjgyNTk1QjMwHhcNMjUwMzI5MDEyMTI4WhcNMjUwNDA1MDEyMTI4WjAYMRYwFAYD
VQQDEw02N2U3NGIxOC05ODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAswD3T7ERGTCTU0c1p+DA0feUL+cJQMK/U+vEoMaIvx/SquF2ybh6y92BQ+pV
qyS4/st0Z/wc29qUhEa4aEIMkYiJO52ntguSmPFLaaAwKxwkxBqG8M2upvVxmrPD
CuyCrE+8InSDpn8xMC9JTzH3xyrAx/j0ttedX/14PD66sPFsMkQPqL/NNe7J7PNl
1MGQmVQNBGDNAisTizSUJ9FePG08Ed976KpYI9GA3TusxE+dDVp5c/FcImXgpZ6K
Zw2nWw6squxpqz9ldnRzYlpbF2uoGTqb4IcR/PEpkxyHnCgW+7MMlQszjoKiEx+O
b/ANKWDmLvLYp1A5ZczUlKNL4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXxDcN2
Q34q/M1pWfflQ7Gm4iDEMB8GA1UdIwQYMBaAFE053j5QYGjDg2oAVIFVQT5oJZWz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRGQS9CODlCQ0JGNEJB
NkExMUVDODJBQzA3ODdDNEY5QUUwMi9UVG5lUGxCZ2FNT0RhZ0JVZ1ZWQlBtZ2xs
Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RUbmVQbEJnYU1PRGFnQlVnVlZCUG1nbGxiTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QzRGQS9CODlCQ0JGNEJBNkExMUVDODJBQzA3ODdDNEY5QUUwMi9UVG5lUGxCZ2FN
T0RhZ0JVZ1ZWQlBtZ2xsYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAgUEra+aRkSUZxgHczmf1IjfW3bJxoXmVoGGCfjG7E8HXj9hY3vQ32
NX0ra+YS+qSEf0r2y4kb+D2F8iSV3SX6AhAnyQBCyJcN8WDmr1FL5LW01c9IxrbT
P22Kp3DQSa0qhpFionmQ58cSmz0WRYwNEnYNcploprvTdccwlVtFGbJYw1uLutrW
GMPT0hYbQlbx2jCa1uWwoPyFVBxa4IWbs+WKtvUyCeveQBdJOdQ1Kow3LuzYUp9O
IjsefE3ViGTgpYJ2ZSxIs4sJqd5M+X3iOlFrXAsl3iRkzCA09YDWckrU+2K8DDLX
uxs+FbBPDjaxiocLmHe9YKPivYV6PJGg
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:03:51 2025 by rpki-client