Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft
File:                     Iin2usLWDFC9Hk9Y9CwMobD4m28.mft (raw, json)
Hash identifier:          Q5ZhMfdK91FkuY0b8qYVlsrGC9O8OKNn6ZGJePc6Rbw=
Subject key identifier:   13:10:A9:A2:C5:5F:EA:BF:A7:FD:AA:39:FD:6C:E8:C0:35:FE:23:53
Authority key identifier: 22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F
Certificate issuer:       /CN=A91B8C13/serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F
Certificate serial:       3471
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft
Manifest number:          3471
Signing time:             Fri 28 Mar 2025 15:24:10 +0000
Manifest this update:     Fri 28 Mar 2025 15:24:10 +0000
Manifest next update:     Fri 04 Apr 2025 15:24:10 +0000
Files and hashes:         1: Iin2usLWDFC9Hk9Y9CwMobD4m28.crl (hash: 3tZIodj7L1mgBDb/MYIhGdH7NKc4SDm4Uu9cZAWMS/I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13425 (0x3471)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8C13
        Validity
            Not Before: Mar 28 15:24:10 2025 GMT
            Not After : Apr  4 15:24:10 2025 GMT
        Subject: CN=67e6bf1a-a23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d7:36:e7:25:83:2e:91:6f:9e:c6:90:75:10:
                    b6:0f:e8:ec:02:01:a9:87:8a:eb:d1:ab:bf:3d:ab:
                    36:75:b0:cc:8e:02:c3:75:0b:03:00:d1:9a:b2:56:
                    34:cf:c7:b8:ba:a5:a6:1d:f0:e6:00:31:53:cc:17:
                    5a:a9:17:7a:f4:ab:5b:2c:73:81:46:5e:23:7a:e1:
                    5c:d8:d3:db:df:ca:c7:f1:89:28:59:ed:53:9c:ff:
                    c6:5a:a4:6a:50:9c:f6:22:d8:56:b5:88:9b:48:f6:
                    41:ef:a3:be:b3:20:70:91:e3:49:df:39:09:d8:61:
                    98:31:7e:fd:c4:6d:5b:4d:ac:19:20:00:9c:05:db:
                    2b:85:a6:83:cb:34:6e:27:e4:9c:23:19:01:c5:10:
                    be:b5:c7:79:6e:ef:49:17:72:52:c6:8b:2d:f0:dc:
                    a2:56:f9:bb:6e:96:e4:54:49:6b:3a:3a:f9:a9:0a:
                    17:5a:8b:76:88:8e:2a:47:f2:fb:73:b7:0c:86:4d:
                    96:f3:f2:02:fd:ad:7b:18:b0:05:ba:7c:36:bb:31:
                    30:b9:96:bb:54:46:ef:04:9c:71:92:a9:17:aa:40:
                    83:6a:4f:8f:22:fe:ac:63:22:84:9b:b0:eb:6c:e2:
                    bd:be:73:ec:be:64:5e:e6:06:01:44:64:69:1a:0f:
                    99:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:10:A9:A2:C5:5F:EA:BF:A7:FD:AA:39:FD:6C:E8:C0:35:FE:23:53
            X509v3 Authority Key Identifier:
                keyid:22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:fd:03:cd:91:c9:8b:c2:44:0b:76:b2:60:78:42:c3:ee:53:
         c8:a7:4a:d3:6c:54:15:41:45:15:40:36:ae:1d:fc:e4:c6:0f:
         a7:fd:6e:b5:3b:a0:cb:b6:4c:c3:7f:ca:39:5a:df:77:3d:68:
         38:fc:c2:f6:8a:82:3f:1a:fb:85:da:23:8a:91:ae:76:e6:af:
         39:e8:e4:58:2d:a5:2b:5d:87:a2:f3:70:9f:1d:f5:69:0e:cd:
         dc:4f:e3:7f:aa:16:9f:5b:8c:59:61:8f:f9:11:ee:32:49:5f:
         95:d9:de:98:f8:73:07:5c:43:4b:d3:65:3f:2c:15:6e:5f:38:
         30:ca:c2:d7:a2:39:53:81:e3:45:37:d5:58:49:6c:89:d7:0d:
         df:95:d0:e5:f7:a8:8c:e2:37:96:4c:fd:16:a1:83:ac:2e:09:
         10:ce:3f:a8:5b:26:0b:6a:8e:14:c6:cb:06:01:7c:c0:22:1a:
         9e:ce:ab:2e:67:4e:d6:5e:90:37:bc:0c:9d:40:8b:85:f1:22:
         89:27:92:f5:88:8e:27:4c:89:59:8e:16:0d:78:ec:30:da:91:
         f5:46:1b:9c:b4:73:10:97:17:87:a4:1b:58:02:dc:93:a1:27:
         8e:d6:07:7d:1a:84:b7:f5:86:9c:15:b8:ef:40:ef:32:39:37:
         cd:c6:73:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:19:47 2025 by rpki-client