Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
File:                     cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft (raw, json)
Hash identifier:          LAwLTuA2L8Ia3e1joPxgnc5T0mcy7QSgeF1ilbrsUUc=
Subject key identifier:   45:1E:ED:9E:4A:4B:BB:FD:BE:A9:6A:5A:AF:44:81:E9:B5:87:9E:39
Authority key identifier: 70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E
Certificate issuer:       /CN=A918B936/serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E
Certificate serial:       20E4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
Manifest number:          20E4
Signing time:             Fri 28 Mar 2025 16:03:13 +0000
Manifest this update:     Fri 28 Mar 2025 16:03:13 +0000
Manifest next update:     Fri 04 Apr 2025 16:03:13 +0000
Files and hashes:         1: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl (hash: r1oz2b4AYJX2rKMT1kJ0qComwdBh3Cl9y7eMun3dXMM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8420 (0x20e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B936
        Validity
            Not Before: Mar 28 16:03:13 2025 GMT
            Not After : Apr  4 16:03:13 2025 GMT
        Subject: CN=67e6c841-b857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:10:3f:f2:ea:8f:87:77:65:d2:ef:d3:77:9a:
                    5f:b3:92:80:74:1b:34:e2:65:bc:18:b7:98:4e:f8:
                    70:75:12:f5:22:12:c2:83:de:0d:db:19:57:9d:22:
                    23:be:07:3e:6b:dc:bd:e7:ea:e9:85:86:de:59:3b:
                    70:58:47:4a:75:74:86:48:17:ee:ed:75:6e:ef:1e:
                    0c:20:82:96:91:bd:5f:79:85:0d:60:00:9b:1a:54:
                    4c:fb:75:35:e0:cf:04:e5:20:08:d2:aa:b2:51:ae:
                    43:c6:6f:c8:52:ce:af:ef:00:ec:84:26:9f:19:62:
                    09:e1:d8:ea:23:a9:b0:ae:2c:25:a6:02:55:1f:99:
                    37:f7:71:52:22:71:39:4b:a2:b7:17:66:2d:4b:89:
                    25:0b:dd:32:61:a8:a6:bf:a8:40:c8:70:d3:c4:b4:
                    6d:1f:13:f0:a1:ea:22:9c:62:fe:85:57:0d:3e:5a:
                    65:41:1c:82:d3:b1:df:a7:c0:ec:46:42:bd:58:f8:
                    66:63:0e:26:18:f6:08:6a:a6:4d:85:bb:37:b7:3b:
                    df:e6:95:4f:e0:5c:33:9c:ab:30:44:66:46:5f:91:
                    f2:5f:b5:8d:78:1c:7a:c2:0a:df:76:b9:0a:13:63:
                    32:b6:6c:7a:1d:82:4a:9e:cf:53:1b:2d:14:05:f0:
                    0a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1E:ED:9E:4A:4B:BB:FD:BE:A9:6A:5A:AF:44:81:E9:B5:87:9E:39
            X509v3 Authority Key Identifier:
                keyid:70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ff:c2:ac:92:fe:ab:bc:62:20:c6:13:c9:e3:a6:c4:6e:37:
         50:e1:bf:27:a0:f8:26:3e:0b:5e:16:c2:5e:46:68:22:3c:04:
         1d:84:23:38:9e:e0:fd:51:85:09:81:62:32:5a:7f:00:ef:bb:
         e2:99:75:52:ff:d9:d5:d6:af:6d:a5:9b:d8:bb:04:f4:84:cc:
         05:3f:02:d6:71:d8:af:96:bc:1d:04:95:c5:23:cd:ac:a3:e7:
         18:5a:8f:99:30:5e:b2:10:55:e5:ca:d7:eb:89:7c:51:20:32:
         78:ab:64:dd:43:a6:1d:e4:38:fb:39:99:6e:fa:c2:22:a5:5c:
         ad:ee:60:78:2f:b3:6d:4b:dc:91:32:c6:bd:8b:28:af:b5:4e:
         e2:02:3f:2a:ce:55:8e:5a:e9:fa:a2:1f:69:81:9d:50:70:a7:
         fd:ce:96:9b:53:d8:b6:8d:75:68:60:f7:9c:29:ac:14:74:ca:
         fa:68:af:fe:c4:a1:55:7a:9e:2b:82:67:9b:c4:4e:d5:4b:dd:
         02:e1:2d:c8:06:bd:0e:ba:38:84:b6:fc:38:c6:7b:65:18:76:
         d9:5f:04:a5:68:9d:46:8b:50:45:7c:bc:f2:06:6f:ab:98:86:
         72:55:40:73:8f:61:e9:27:f4:41:a5:c6:4f:d2:00:91:0a:bf:
         65:ae:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:51 2025 by rpki-client