Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft
File:                     n095sMMg0u--SKvL-paoRdZHlu8.mft (raw, json)
Hash identifier:          5QFnSZ9/eWD80nND17U9N2ndeBYyAHzhTW8N8lWozJQ=
Subject key identifier:   10:54:B0:EC:7C:9A:37:60:0F:48:25:2A:93:A5:7B:F1:19:7F:B2:E5
Authority key identifier: 9F:4F:79:B0:C3:20:D2:EF:BE:48:AB:CB:FA:96:A8:45:D6:47:96:EF
Certificate issuer:       /CN=A91A78A7/serialNumber=9F4F79B0C320D2EFBE48ABCBFA96A845D64796EF
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n095sMMg0u--SKvL-paoRdZHlu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft
Manifest number:          01B2
Signing time:             Sat 29 Mar 2025 02:01:22 +0000
Manifest this update:     Sat 29 Mar 2025 02:01:21 +0000
Manifest next update:     Sat 05 Apr 2025 02:01:21 +0000
Files and hashes:         1: n095sMMg0u--SKvL-paoRdZHlu8.crl (hash: k8MPg6yYwWY2+5V3bwqNcMFdab/2VGFtDk7YlD2KqTc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A78A7
        Validity
            Not Before: Mar 29 02:01:21 2025 GMT
            Not After : Apr  5 02:01:21 2025 GMT
        Subject: CN=67e75472-b84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6a:7a:5f:36:51:36:f3:f9:a0:87:f2:02:70:
                    3a:fc:85:a3:3f:f7:e2:d5:1f:42:ab:73:3f:87:a2:
                    d4:0c:8c:ff:7a:b8:a2:f8:57:2a:27:a7:c6:33:b0:
                    bd:f5:ab:ea:f5:e4:3a:e2:f0:b0:f2:17:3c:ac:fe:
                    4a:5d:30:37:33:5e:01:db:dd:34:53:d8:13:f8:5c:
                    63:26:60:18:bb:7c:0f:48:c6:a3:a0:55:34:98:8b:
                    ef:4d:4e:b8:9a:72:07:7a:25:17:eb:fe:15:a9:1e:
                    ce:12:cd:a5:fc:ba:27:67:e6:16:83:48:e0:73:2c:
                    dd:4e:ad:fa:41:5d:15:ca:9f:e1:d0:dc:1e:83:c8:
                    18:56:e4:5f:16:aa:48:90:b3:09:fe:d2:7b:ea:bd:
                    23:a9:91:05:7c:07:0b:72:ff:bc:34:35:64:c4:bd:
                    4a:0c:b5:50:95:10:d2:80:3e:e1:41:1b:96:00:7a:
                    bf:9a:9a:7c:f2:e1:30:ca:66:d9:d0:8c:b2:5b:11:
                    5f:1e:ab:18:56:c5:04:4d:2e:22:70:f3:3c:c9:22:
                    b2:2f:07:e6:11:03:38:ac:95:30:7e:7d:08:f1:aa:
                    4b:92:65:cd:26:06:3c:d7:47:75:c6:fa:01:28:95:
                    66:6f:5d:61:eb:23:04:c1:af:03:50:6c:08:4f:d2:
                    d8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:54:B0:EC:7C:9A:37:60:0F:48:25:2A:93:A5:7B:F1:19:7F:B2:E5
            X509v3 Authority Key Identifier:
                keyid:9F:4F:79:B0:C3:20:D2:EF:BE:48:AB:CB:FA:96:A8:45:D6:47:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n095sMMg0u--SKvL-paoRdZHlu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:2a:3b:b6:3e:56:31:8d:92:68:f2:b6:64:5b:d6:93:19:9b:
         02:2d:44:2f:d7:1e:81:78:9b:d0:45:5f:42:ad:1f:78:46:02:
         66:07:c4:8e:07:e0:15:b5:ee:86:5b:18:8c:23:43:a5:36:49:
         ec:29:ef:c8:c8:4f:4b:d8:a5:11:bc:b1:31:d8:23:00:c9:3b:
         93:0d:94:ec:ca:80:59:7e:6b:2e:cc:85:3c:24:df:38:42:ea:
         67:73:3e:52:1f:98:c6:c4:53:a7:4b:36:40:44:42:43:d7:05:
         71:83:8b:5b:e0:2a:87:5d:08:16:7a:c1:f8:58:d4:be:4c:98:
         22:d1:aa:60:8b:55:03:29:1c:49:72:5a:da:9f:39:f8:33:b0:
         60:03:1a:4e:6f:86:6a:72:79:77:eb:31:00:01:f5:dd:3a:c9:
         6d:23:b3:eb:b7:c7:4c:4f:3e:76:6a:da:b2:23:77:4a:93:bf:
         04:de:d2:0b:f4:39:8c:06:78:9b:c0:d5:e9:7f:38:e9:25:6d:
         31:a9:5a:19:5f:55:9e:b0:e5:87:31:8b:57:c6:da:b0:0f:da:
         22:a6:d1:04:34:dd:98:77:82:b2:7c:c9:71:d3:4f:49:b1:f7:
         23:91:bb:d4:2e:a1:5a:d7:73:74:e7:02:e8:a3:31:85:52:ed:
         46:00:7b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:37:26 2025 by rpki-client