Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
File:                     IdPtIffN68fQDxu3oJURuVze_iM.mft (raw, json)
Hash identifier:          KJGyXWpi7Z3zkayBSgWL22GPmFAZNZlCDC6pJVg9OrM=
Subject key identifier:   73:A8:AB:27:16:A8:05:0D:DF:F0:FA:92:74:09:DE:E3:82:8F:4A:41
Authority key identifier: 21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23
Certificate issuer:       /CN=A917336A/serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
Manifest number:          78
Signing time:             Sat 29 Mar 2025 06:04:19 +0000
Manifest this update:     Sat 29 Mar 2025 06:04:18 +0000
Manifest next update:     Sat 05 Apr 2025 06:04:18 +0000
Files and hashes:         1: IdPtIffN68fQDxu3oJURuVze_iM.crl (hash: TFIPQD8Sdr1ZJtBQWSWyZUcn4Vbjod9tUnW7ZWPPc5g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917336A
        Validity
            Not Before: Mar 29 06:04:18 2025 GMT
            Not After : Apr  5 06:04:18 2025 GMT
        Subject: CN=67e78d63-0333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:05:02:30:79:be:cd:a4:51:b1:e2:77:a3:17:
                    24:c8:48:49:ef:e6:bf:9e:12:54:ab:0d:99:db:d6:
                    2b:34:df:06:5b:fd:82:30:bf:2e:67:13:68:46:9d:
                    ed:f1:a3:b1:be:61:ed:e4:b0:81:c0:d5:95:ea:12:
                    55:53:ab:ea:56:df:a4:77:46:78:12:60:73:38:32:
                    84:d1:0b:68:fb:0c:e3:ec:8b:69:60:eb:13:20:d2:
                    84:d4:4b:82:97:bc:63:1f:26:ad:35:10:d1:9e:b5:
                    c5:57:d4:be:25:e8:0f:7d:9a:0e:3e:6e:0b:ff:91:
                    f1:17:d1:9e:18:02:7e:a4:a0:93:30:de:b9:94:d7:
                    5d:2d:a0:b9:16:6c:87:ea:a5:6b:66:28:cf:01:69:
                    f4:af:54:bc:b4:7c:02:ee:01:9e:88:b3:1b:4e:d8:
                    56:ed:b7:02:df:5f:39:8f:0e:cc:f2:98:4e:a8:90:
                    f8:e7:86:ec:32:74:c0:72:82:f3:3c:6b:c6:5c:2c:
                    49:ed:5e:71:21:91:8e:d9:0b:2f:f1:a2:2c:8c:96:
                    a7:16:ca:b0:2f:e7:57:b8:4b:6e:3d:01:42:6a:60:
                    b1:ec:ff:11:92:c6:94:6e:e2:b9:ab:3d:98:aa:85:
                    3f:8c:16:ce:6b:ab:32:21:5d:48:9e:5b:c7:31:ed:
                    18:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A8:AB:27:16:A8:05:0D:DF:F0:FA:92:74:09:DE:E3:82:8F:4A:41
            X509v3 Authority Key Identifier:
                keyid:21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:37:78:65:50:7c:e7:90:b8:d5:10:29:d4:38:a2:3b:21:26:
         07:6b:6d:56:08:8e:b9:6e:5c:1f:eb:74:76:5c:e7:0a:df:f2:
         0e:0f:69:a7:4d:bb:63:ae:7c:5a:62:71:9c:60:3e:7b:ac:f1:
         4c:ac:f9:8c:2e:20:58:fc:e9:47:9b:28:82:44:c9:c9:be:07:
         6f:7d:70:53:1c:4d:f3:67:e2:80:41:0b:bc:e4:d2:8a:3b:e8:
         03:7c:75:b7:f4:89:4c:c7:c4:c4:87:5c:1f:47:17:36:5b:07:
         85:61:7d:7d:09:30:60:4a:64:23:c3:89:79:db:a3:d8:7f:42:
         9c:17:a8:1d:dc:29:d7:cd:81:28:73:7f:c7:d9:84:0f:ab:32:
         49:14:ac:18:03:f4:41:95:7f:e3:c7:5f:f4:23:4a:19:36:6d:
         09:d9:9f:f6:3b:eb:b5:5f:90:5f:fc:2d:0e:d2:bd:1f:f8:22:
         cc:09:b4:6e:58:de:c5:10:24:a2:56:8f:a6:4b:42:e2:21:1e:
         e7:b1:09:cb:f7:1f:66:61:43:e8:37:b7:a5:cd:94:0a:65:38:
         3b:5a:1c:98:2b:e8:f4:c6:c8:f8:2f:18:4c:e3:17:56:f8:8f:
         fb:6c:cc:c6:49:cd:65:f3:87:66:0e:fa:3c:e6:b2:77:fd:92:
         94:20:b7:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzMzNkExMTAvBgNVBAUTKDIxRDNFRDIxRjdDREVCQzdEMDBGMUJCN0EwOTUxMUI5
NUNERUZFMjMwHhcNMjUwMzI5MDYwNDE4WhcNMjUwNDA1MDYwNDE4WjAYMRYwFAYD
VQQDEw02N2U3OGQ2My0wMzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsAUCMHm+zaRRseJ3oxckyEhJ7+a/nhJUqw2Z29YrNN8GW/2CML8uZxNoRp3t
8aOxvmHt5LCBwNWV6hJVU6vqVt+kd0Z4EmBzODKE0Qto+wzj7ItpYOsTINKE1EuC
l7xjHyatNRDRnrXFV9S+JegPfZoOPm4L/5HxF9GeGAJ+pKCTMN65lNddLaC5FmyH
6qVrZijPAWn0r1S8tHwC7gGeiLMbTthW7bcC3185jw7M8phOqJD454bsMnTAcoLz
PGvGXCxJ7V5xIZGO2Qsv8aIsjJanFsqwL+dXuEtuPQFCamCx7P8RksaUbuK5qz2Y
qoU/jBbOa6syIV1InlvHMe0YIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOoqycW
qAUN3/D6knQJ3uOCj0pBMB8GA1UdIwQYMBaAFCHT7SH3zevH0A8bt6CVEblc3v4j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzM2QS84RjVBOTM1NjVB
RUExMUVGOTRFOTNENkVDNEY5QUUwMi9JZFB0SWZmTjY4ZlFEeHUzb0pVUnVWemVf
aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lkUHRJZmZONjhmUUR4dTNvSlVSdVZ6ZV9pTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzM2QS84RjVBOTM1NjVBRUExMUVGOTRFOTNENkVDNEY5QUUwMi9JZFB0SWZmTjY4
ZlFEeHUzb0pVUnVWemVfaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAnN3hlUHznkLjVECnUOKI7ISYHa21WCI65blwf63R2XOcK3/IOD2mn
TbtjrnxaYnGcYD57rPFMrPmMLiBY/OlHmyiCRMnJvgdvfXBTHE3zZ+KAQQu85NKK
O+gDfHW39IlMx8TEh1wfRxc2WweFYX19CTBgSmQjw4l526PYf0KcF6gd3CnXzYEo
c3/H2YQPqzJJFKwYA/RBlX/jx1/0I0oZNm0J2Z/2O+u1X5Bf/C0O0r0f+CLMCbRu
WN7FECSiVo+mS0LiIR7nsQnL9x9mYUPoN7elzZQKZTg7WhyYK+j0xsj4LxhM4xdW
+I/7bMzGSc1l84dmDvo85rJ3/ZKUILcL
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:44 2025 by rpki-client