Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft
File:                     tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft (raw, json)
Hash identifier:          cym+0uLBDGoAv3kAfEsgNW6EWcsEY29AFX+hFVtZKhg=
Subject key identifier:   E1:91:81:F9:B5:5F:57:3E:80:D7:98:11:1A:E9:92:BF:3C:BA:1E:76
Authority key identifier: B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7
Certificate issuer:       /CN=A9185B41/serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7
Certificate serial:       0A25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft
Manifest number:          1202
Signing time:             Fri 28 Mar 2025 20:00:17 +0000
Manifest this update:     Fri 28 Mar 2025 20:00:17 +0000
Manifest next update:     Fri 04 Apr 2025 20:00:17 +0000
Files and hashes:         1: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl (hash: lkD3/yad4K6oetiC+9UVd6jL9KTn5ltB2thCqhQfzuo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2597 (0xa25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185B41
        Validity
            Not Before: Mar 28 20:00:17 2025 GMT
            Not After : Apr  4 20:00:17 2025 GMT
        Subject: CN=67e6ffd1-4415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:52:34:5a:bd:f9:e1:19:3b:3b:9b:b5:65:88:
                    10:eb:d5:76:cc:9e:f0:ae:a3:bd:ff:e6:57:e4:3a:
                    8b:e5:c6:ec:74:17:43:8e:e3:97:72:55:98:38:d6:
                    40:b9:ab:ba:8f:10:77:d4:0e:a2:24:9c:61:6b:36:
                    72:2d:0f:49:e4:ec:47:b6:24:ad:2b:b9:8a:3e:1f:
                    62:ec:24:ba:da:5f:a4:ac:a1:3c:91:77:b2:00:d1:
                    77:6f:62:68:ad:7d:b3:d2:03:a3:a0:b9:99:04:36:
                    cb:0d:bc:a5:87:7a:ab:61:b1:4b:b8:fc:7d:11:15:
                    48:bb:c2:e1:8d:b4:a8:0a:09:28:d9:e8:ac:74:b1:
                    78:3b:89:4b:4b:2b:3a:7e:e5:05:28:fc:34:3d:e2:
                    5c:62:b3:84:17:e5:da:ff:dd:69:17:ac:23:82:b3:
                    32:99:d2:59:ff:3e:a2:ab:12:6d:07:38:da:8f:83:
                    2b:a7:90:d5:11:13:2e:8d:40:79:04:20:c3:78:c8:
                    8d:23:41:76:f8:1a:00:af:ad:37:f0:43:0e:b4:7e:
                    87:ce:6e:e1:54:c5:16:04:cd:02:10:b5:b8:28:bf:
                    fb:b5:72:6d:1d:f9:80:37:18:bd:95:db:a0:12:42:
                    84:be:a9:40:f4:47:9b:a3:1f:2a:26:e1:1d:d1:39:
                    b1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:91:81:F9:B5:5F:57:3E:80:D7:98:11:1A:E9:92:BF:3C:BA:1E:76
            X509v3 Authority Key Identifier:
                keyid:B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:35:84:e7:f7:b9:aa:93:72:91:c5:50:2c:89:44:3b:29:76:
         0d:d0:9f:3f:af:7e:00:9e:0c:13:04:dc:16:25:db:65:74:17:
         f0:36:4a:d4:3d:63:32:9b:91:00:6b:48:cd:5d:89:31:ab:43:
         0e:80:40:92:2d:9c:a8:c0:06:db:2b:3e:2c:12:b7:8f:d3:b7:
         32:8b:58:50:89:39:73:24:a9:11:74:49:20:7b:25:5d:bc:9a:
         b1:14:b6:49:92:2f:99:3b:64:cd:9f:86:94:b3:c2:c4:ce:f5:
         fd:ad:da:25:74:c5:06:d3:ee:c2:82:c8:9f:5f:78:22:09:ad:
         49:52:0e:f1:32:e9:77:51:0a:54:3a:ba:66:84:53:f2:77:6d:
         ec:1d:9f:e3:c5:77:e7:37:f0:fc:12:b9:5d:1c:a4:3e:e7:28:
         00:37:86:b9:10:db:c3:89:6b:d4:d6:74:a8:c3:98:b8:98:9c:
         f4:be:63:b8:ce:76:30:49:4b:de:0b:2f:c9:e2:d7:ea:0a:63:
         db:1c:08:36:d4:b7:eb:0e:0e:c4:66:1e:05:33:98:48:64:57:
         01:32:a5:eb:18:7b:ec:49:2b:4a:54:2e:c0:04:41:97:5d:e4:
         49:17:cd:65:52:50:6a:6d:45:fb:04:fd:ed:6c:ca:e4:1b:7d:
         a5:25:3a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:25:06 2025 by rpki-client