Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft
File:                     VELdytiYUdlLqsCrc5LOQZohisw.mft (raw, json)
Hash identifier:          8kHm9LcQGN0RBUEgsT/UiojgCsN+MLLvhZEyvobjKUY=
Subject key identifier:   47:0F:6E:A7:D1:A6:F4:BD:9C:88:5A:63:90:04:F8:77:49:47:74:1A
Authority key identifier: 54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC
Certificate issuer:       /CN=A91BA0F9/serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC
Certificate serial:       1C39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft
Manifest number:          5098
Signing time:             Fri 28 Mar 2025 15:22:03 +0000
Manifest this update:     Fri 28 Mar 2025 15:22:02 +0000
Manifest next update:     Fri 04 Apr 2025 15:22:02 +0000
Files and hashes:         1: VELdytiYUdlLqsCrc5LOQZohisw.crl (hash: fgYQR+xvHiEHy9DjMrZ2YzS54YiElFzGvrFVsa8Ke4w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7225 (0x1c39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA0F9
        Validity
            Not Before: Mar 28 15:22:02 2025 GMT
            Not After : Apr  4 15:22:02 2025 GMT
        Subject: CN=67e6be9b-c3c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:cd:c1:0b:ef:0b:fb:26:67:63:e4:08:28:c2:
                    24:d3:05:f7:f9:32:31:19:63:05:9b:cc:76:97:f0:
                    9c:8d:52:89:f7:d4:03:fe:fb:f2:20:01:2d:66:90:
                    e7:49:ea:af:23:25:e0:7e:c7:6d:50:e6:85:91:82:
                    3f:ba:29:5e:a7:cd:52:d6:c5:e8:65:2c:5e:93:d2:
                    bd:de:b4:bb:81:c5:3f:e9:09:16:40:f1:ef:3b:e3:
                    0e:36:b8:96:93:4c:fe:84:d9:01:c1:02:01:8e:6a:
                    44:29:b5:64:1f:6b:e2:69:13:bd:79:de:9d:16:89:
                    4d:57:d5:16:6e:9e:2c:88:78:07:4d:eb:61:a1:3a:
                    22:75:28:ac:a1:38:36:d6:c5:c3:4c:71:fb:1a:e4:
                    7f:d7:90:fe:4e:fb:38:f4:01:fd:14:1a:34:c7:6e:
                    fe:d0:4e:e8:67:1a:56:1e:b6:64:06:7d:d7:a6:37:
                    8f:00:0a:2e:41:96:b2:8d:15:1c:b2:db:bb:82:92:
                    de:a6:41:e8:c4:e7:70:2b:16:75:f3:52:e5:f7:93:
                    32:91:f4:1d:30:36:60:48:79:ac:2d:e0:9e:04:38:
                    f2:0b:69:8d:a5:c2:5a:be:3a:cf:08:8a:7d:93:6e:
                    bc:2f:45:46:8c:31:e2:e2:16:65:b4:db:31:cd:c3:
                    76:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0F:6E:A7:D1:A6:F4:BD:9C:88:5A:63:90:04:F8:77:49:47:74:1A
            X509v3 Authority Key Identifier:
                keyid:54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a8:f7:70:1b:6e:72:9c:6e:07:84:53:50:e5:c5:e2:7c:e0:
         27:f1:0d:47:71:22:fe:68:be:a8:8d:c1:86:a9:ad:96:f7:8f:
         3c:4c:5a:6f:ac:71:8b:d9:e8:f4:57:d9:83:9e:37:12:f1:e9:
         e5:20:de:a0:87:4b:30:11:be:4d:ca:1a:8a:ec:a3:e9:57:2a:
         ff:e9:26:37:73:31:39:5b:2e:58:60:8d:01:5e:b5:90:b6:5b:
         c5:69:6b:5e:96:4f:1d:ce:6d:c4:38:07:27:08:54:9e:ff:36:
         18:8b:e3:a2:5c:f0:ad:07:52:9b:b2:47:6d:bb:be:d0:1c:2c:
         a6:17:4f:16:22:6c:85:67:6f:01:66:8b:86:73:c9:9c:ba:0e:
         44:8a:6d:ec:9b:ee:86:bd:6c:76:67:bf:71:81:d1:cc:77:e5:
         13:79:af:60:54:7d:3e:c3:78:77:c5:ff:06:5c:38:81:ae:2c:
         aa:1e:70:db:53:1d:36:70:43:ff:8f:e6:54:28:94:e4:62:15:
         23:e8:f7:06:b0:34:5a:c0:1a:4d:c4:ce:52:cb:6b:21:8d:44:
         e8:54:93:1b:9a:26:eb:80:d6:62:d7:e0:67:a9:7e:dd:a3:73:
         0f:69:cd:a7:22:d8:81:5d:21:0c:e6:33:a1:02:b8:e7:1d:06:
         42:a2:c2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:37:14 2025 by rpki-client