Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
File:                     FiENxlKhYN7k5AFbvLQJ-odyRkA.mft (raw, json)
Hash identifier:          M0sfqfWu75E2gEXCHO5sQS5mSart/m7AbRcZL9s7uYM=
Subject key identifier:   20:55:E0:04:DD:23:47:8B:74:08:C2:8A:8B:9B:FB:E9:A9:3C:A4:B1
Authority key identifier: 16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40
Certificate issuer:       /CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640
Certificate serial:       3465
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
Manifest number:          387A
Signing time:             Fri 28 Mar 2025 14:37:30 +0000
Manifest this update:     Fri 28 Mar 2025 14:37:29 +0000
Manifest next update:     Fri 04 Apr 2025 14:37:29 +0000
Files and hashes:         1: FiENxlKhYN7k5AFbvLQJ-odyRkA.crl (hash: U2Ufw21hkLEp7PhwxtnnxeSj/qBmMKHYjA/SxnfXLKg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13413 (0x3465)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91983BD
        Validity
            Not Before: Mar 28 14:37:29 2025 GMT
            Not After : Apr  4 14:37:29 2025 GMT
        Subject: CN=67e6b429-dfed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f5:76:28:db:01:eb:45:47:e1:16:d5:ae:61:
                    3b:6b:fd:a3:45:02:19:35:72:e2:c4:b4:da:a8:8a:
                    47:1a:d9:d2:3c:dd:6a:6a:e2:bd:3a:70:ca:03:33:
                    c9:8c:e0:26:4b:a9:91:bd:a2:08:88:fe:0e:58:61:
                    0b:c7:56:4f:14:8a:d9:30:78:bc:65:ed:69:35:dd:
                    d3:a4:0a:72:d3:06:e6:cd:6c:4a:a1:a8:87:5b:ce:
                    fe:2f:c0:85:0b:a0:17:a5:4b:12:e2:80:45:5d:7a:
                    4f:e6:45:ad:96:5f:38:53:14:10:ec:ab:e6:f6:74:
                    21:7d:dd:92:e4:d5:fd:c7:61:35:68:f3:20:26:b0:
                    27:b2:41:cf:d5:3b:2d:b1:58:67:a4:07:b7:e3:b1:
                    06:b5:1c:13:de:70:d5:b3:b7:9a:dd:81:73:b2:dd:
                    d3:fe:ef:1d:9c:21:bd:eb:37:5c:37:d9:57:1c:87:
                    c8:6f:15:df:6b:9d:69:b4:fd:90:63:10:cf:4e:f8:
                    d5:c2:4a:f4:49:fa:33:f2:15:bf:77:46:37:c2:72:
                    4a:32:c9:4e:8a:d0:7e:be:30:d4:84:65:ea:d5:e6:
                    b5:aa:a4:df:12:c7:2f:ee:4d:ed:62:bc:17:98:17:
                    df:ae:c2:d6:4d:22:8a:9a:6f:f3:27:16:bd:83:3e:
                    76:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:55:E0:04:DD:23:47:8B:74:08:C2:8A:8B:9B:FB:E9:A9:3C:A4:B1
            X509v3 Authority Key Identifier:
                keyid:16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:62:8a:06:ef:9d:85:8c:f0:16:3f:9a:b7:24:a2:fa:03:40:
         49:81:91:dc:4a:fc:05:b2:b1:ed:d2:24:21:5a:47:c7:66:cd:
         85:05:6d:e3:0b:c9:9b:f7:24:6e:65:d3:8d:1d:15:e0:82:a0:
         93:7f:7b:c7:34:22:a0:bc:ed:c9:5d:40:c6:9c:db:cc:0c:60:
         1e:2d:d0:9b:c9:5b:45:ee:07:36:e2:8d:f7:15:6f:9f:e1:88:
         60:3e:ef:42:de:5c:06:a7:0b:d3:15:bd:db:b1:a1:9a:06:7b:
         6c:9c:eb:06:db:5d:88:64:d3:bb:f9:65:0a:29:32:a4:72:a2:
         72:80:8a:47:e0:f5:d2:77:4d:7d:73:0a:c2:ca:b2:b5:79:43:
         99:0e:04:56:5c:e6:7b:28:73:79:bd:31:96:8f:73:ec:01:a9:
         ca:0b:1e:96:87:26:8d:fe:05:84:f4:a4:bb:41:b3:84:c4:13:
         5a:3d:24:f8:91:24:ca:e5:5d:72:58:a7:16:8d:32:25:c9:23:
         47:6f:ff:ef:39:cb:a0:92:ad:06:f6:27:f3:6d:f9:2e:6e:ec:
         e9:52:e6:e4:77:db:d9:23:17:1a:6c:63:cb:9d:2e:ec:23:04:
         3b:b9:f5:da:35:67:a7:b9:d4:c5:e6:7d:a9:40:08:f0:03:f1:
         fe:09:c6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:46:33 2025 by rpki-client