Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft
File:                     xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft (raw, json)
Hash identifier:          5iUmhYbdNDk4JD51NnLqP8/UeJtCve4d5corkH8xLrQ=
Subject key identifier:   0F:8B:08:B0:23:73:A8:51:C6:DB:77:91:F6:F7:F0:E8:6D:F8:AC:40
Authority key identifier: C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77
Certificate issuer:       /CN=A918767B/serialNumber=C53423288F9FFC1004842BCC40A519238934AA77
Certificate serial:       03F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft
Manifest number:          03F1
Signing time:             Sat 29 Mar 2025 00:45:36 +0000
Manifest this update:     Sat 29 Mar 2025 00:45:35 +0000
Manifest next update:     Sat 05 Apr 2025 00:45:35 +0000
Files and hashes:         1: xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl (hash: GgTpuy2vo8f0s7jlaLZ1ub7Vi3QQyeAz2dyMs/bb51s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1009 (0x3f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918767B
        Validity
            Not Before: Mar 29 00:45:35 2025 GMT
            Not After : Apr  5 00:45:35 2025 GMT
        Subject: CN=67e742af-064c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:10:55:b8:62:db:4e:08:1f:ff:58:ef:c0:35:
                    df:99:8c:cd:19:af:b2:cf:b0:ac:e8:cb:8f:73:25:
                    54:93:f2:ba:88:13:14:16:06:24:bd:e4:bb:4e:a1:
                    fd:57:3d:90:fe:8d:eb:bd:eb:b4:bc:f7:6f:14:9f:
                    0d:df:80:57:0b:5f:4c:7f:64:d5:8c:b9:ca:0b:92:
                    99:44:58:fb:7e:fb:2d:66:92:22:05:1a:ba:5a:01:
                    ae:78:19:3a:b0:66:55:10:55:38:18:eb:34:4f:48:
                    84:fb:a6:c9:e6:a9:0e:3e:f3:f6:94:58:e1:1d:7c:
                    d4:10:c7:44:62:e6:b3:ed:48:a9:be:8a:cb:6d:1b:
                    3f:5d:98:4c:46:64:43:65:08:77:ec:8f:40:f6:a0:
                    ed:30:28:07:49:02:31:78:e3:48:75:5e:61:4c:80:
                    7e:0e:df:db:88:20:fe:2e:1c:a8:61:e7:5f:f7:76:
                    02:79:ef:3d:96:ae:f5:a2:56:62:00:ea:22:bf:46:
                    f5:0f:67:75:47:43:8d:f8:60:2f:cf:f0:22:d2:01:
                    c5:0d:fe:b3:41:c7:89:9f:b1:a2:08:e4:e9:56:09:
                    a7:21:f6:55:ae:4b:df:07:d8:3d:70:15:48:23:40:
                    22:54:51:04:8d:58:7c:2b:89:13:74:6b:72:f0:dd:
                    d0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8B:08:B0:23:73:A8:51:C6:DB:77:91:F6:F7:F0:E8:6D:F8:AC:40
            X509v3 Authority Key Identifier:
                keyid:C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:6b:9c:0a:8f:db:0b:7e:8c:e7:0f:5f:18:36:9c:ab:64:4b:
         6f:21:dd:10:4c:7c:70:0f:59:2d:5f:49:c3:d3:66:3e:7f:b6:
         5c:29:26:c3:d2:7b:54:48:6e:a2:ab:7f:ed:4e:61:9e:e4:15:
         48:b0:92:f9:35:7e:b0:88:01:3e:66:42:f5:49:cd:3e:75:9d:
         0d:81:3e:68:74:2c:1b:d6:fb:40:42:5b:3f:d6:4a:6a:7b:63:
         9f:9b:06:12:5e:de:bc:56:19:d4:06:8d:05:37:9b:bf:cd:26:
         80:c1:5a:f0:f8:19:ca:31:ed:3d:5b:9b:d2:69:69:4e:e6:da:
         a9:28:e5:fa:60:3a:28:4e:17:67:67:c2:47:5c:36:78:79:64:
         7a:dd:a6:8e:49:8d:81:5d:72:62:6e:1d:e1:72:1e:28:82:03:
         cf:99:b4:1a:91:a6:1d:60:34:59:dc:dd:7a:9c:27:31:5d:a1:
         09:de:48:fd:b1:24:6e:b2:76:c0:b9:cf:67:56:1e:02:08:b2:
         8c:76:bb:8c:5d:f8:09:61:ca:40:fc:e6:34:48:39:05:9f:bf:
         c5:a3:72:1d:31:91:5f:a3:bd:53:45:ff:3e:18:6e:11:bd:8c:
         f7:9f:ad:7b:86:0e:cb:92:8f:e7:9d:24:d4:ed:cb:f0:d9:42:
         f8:5b:46:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:34:29 2025 by rpki-client