Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft
File:                     lCJM-heqoN5UOrYQifwdOdGZDj4.mft (raw, json)
Hash identifier:          UWZEcAMizktU+G3sPmptyLn6pHOY/puRLPzuh2qA/mA=
Subject key identifier:   39:D9:5F:B1:BE:60:4D:31:58:A2:3D:C6:58:CA:17:02:1E:70:55:B0
Authority key identifier: 94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E
Certificate issuer:       /CN=A918B936/serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E
Certificate serial:       20E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft
Manifest number:          20E6
Signing time:             Fri 28 Mar 2025 16:03:11 +0000
Manifest this update:     Fri 28 Mar 2025 16:03:10 +0000
Manifest next update:     Fri 04 Apr 2025 16:03:10 +0000
Files and hashes:         1: lCJM-heqoN5UOrYQifwdOdGZDj4.crl (hash: pgtfcVjo2WU2krlolitYJ0NSYzAr67dEhNtzE7FvCl4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8422 (0x20e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B936
        Validity
            Not Before: Mar 28 16:03:10 2025 GMT
            Not After : Apr  4 16:03:10 2025 GMT
        Subject: CN=67e6c83e-740d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0e:b4:04:c7:cf:e8:87:73:b4:ac:f7:1a:a8:
                    e9:03:d4:f0:ad:71:52:ed:e5:fe:83:41:45:30:ed:
                    b5:08:84:86:56:19:14:49:1c:d2:76:cd:2a:c6:19:
                    b7:7f:b6:2e:2b:dd:38:2c:a2:b8:35:09:16:f7:26:
                    4d:5a:4b:fb:62:18:54:a6:98:cd:9f:bd:c0:9c:2e:
                    c2:1c:b8:7f:62:a2:51:8f:ac:fd:d1:4c:91:3f:93:
                    0c:02:be:92:2e:69:04:58:ba:5c:96:81:97:e5:22:
                    2e:73:b7:3a:72:b6:0d:5b:9a:d3:5f:8d:d8:5a:0b:
                    17:3a:8c:86:99:0d:07:d1:9e:39:73:dc:34:49:44:
                    16:67:20:fa:00:31:d1:a2:33:e9:07:e8:bd:20:e8:
                    26:d2:28:8c:47:0d:2d:3a:05:20:6d:cc:81:68:a2:
                    51:b7:bb:70:bd:3b:54:79:e1:f5:1b:5c:31:61:62:
                    9f:5e:b2:bb:71:03:de:8d:63:1e:30:b8:94:88:ab:
                    12:2a:b7:6a:5b:c2:be:d8:bf:31:8e:2d:5e:6f:d6:
                    4e:a4:2f:fc:83:09:09:71:f0:a0:23:76:26:9e:56:
                    04:76:22:3c:5c:ea:77:aa:b7:27:3b:67:ae:c3:7d:
                    ab:5e:f0:3b:74:6d:d4:6e:49:71:10:15:5e:b9:74:
                    2d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D9:5F:B1:BE:60:4D:31:58:A2:3D:C6:58:CA:17:02:1E:70:55:B0
            X509v3 Authority Key Identifier:
                keyid:94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:db:e8:07:fd:f4:d6:4c:c8:8d:f0:de:6a:9a:4e:20:fd:06:
         ac:81:0c:c8:f7:05:57:b6:bf:27:e0:2a:45:8b:9e:22:ae:c7:
         87:2b:b9:0e:82:12:fc:35:77:94:59:cd:64:55:0a:ca:e3:70:
         11:d9:46:20:43:e0:7a:4e:ca:7b:e6:b9:b7:22:ef:f3:9f:c7:
         06:2e:80:a5:16:d0:c0:f7:ad:f5:e3:79:e0:36:ec:ef:a7:e5:
         95:3e:80:94:df:0d:84:28:66:8d:01:0e:e2:7e:37:fd:59:2d:
         16:17:96:cb:0b:f9:6f:bd:ec:5a:06:e2:01:9d:fd:d0:77:3a:
         b2:43:5c:46:5f:a6:05:8b:29:3f:bc:79:f7:23:23:34:ee:93:
         f6:05:9f:34:04:18:85:77:bd:97:7e:79:c2:a5:90:c1:a3:96:
         33:fc:c2:83:ea:74:ff:4d:e4:9d:3e:73:94:2d:97:73:55:55:
         55:5c:58:a8:4d:c7:db:2a:23:73:c5:bf:af:c7:06:7d:e3:a1:
         cf:de:c0:34:23:e9:68:d3:47:db:f2:e3:fc:b2:68:99:93:ba:
         6c:78:66:0d:81:3e:ec:c0:29:3f:00:ae:90:78:28:3a:07:67:
         36:a7:24:b4:28:54:fa:07:38:32:79:69:8d:6c:5b:f6:db:07:
         60:9f:e0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:20:06 2025 by rpki-client