Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft
File:                     MRUQtiC24M1CLhwrbpUrYEil8eI.mft (raw, json)
Hash identifier:          pYalVVtaPdyWpdGED93GfNzTYXwCC6OrHYm4yuyarwk=
Subject key identifier:   52:46:7C:A7:98:A8:46:23:EA:B6:41:B4:B8:C1:2E:88:F9:D5:DE:7F
Authority key identifier: 31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2
Certificate issuer:       /CN=A91BF979/serialNumber=311510B620B6E0CD422E1C2B6E952B6048A5F1E2
Certificate serial:       0372
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft
Manifest number:          0371
Signing time:             Sat 29 Mar 2025 01:09:20 +0000
Manifest this update:     Sat 29 Mar 2025 01:09:20 +0000
Manifest next update:     Sat 05 Apr 2025 01:09:20 +0000
Files and hashes:         1: MRUQtiC24M1CLhwrbpUrYEil8eI.crl (hash: sMfZEJhoadRqS9k/wP+eMyx4JrtYYLPU7QmLrCAfAOs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882 (0x372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF979
        Validity
            Not Before: Mar 29 01:09:20 2025 GMT
            Not After : Apr  5 01:09:20 2025 GMT
        Subject: CN=67e74840-41d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e2:68:b1:8f:0b:d6:44:d0:af:fc:15:ce:2a:
                    3b:a8:a5:a7:df:0d:dd:c4:3a:50:39:0f:c4:90:d2:
                    68:6c:3e:19:15:60:fb:8c:b7:82:e2:05:47:c7:75:
                    27:8e:20:c8:87:7a:d7:8f:94:90:69:c2:72:b5:a0:
                    06:d8:ab:f6:f2:9f:3c:b6:99:14:47:73:ad:40:0c:
                    32:bd:22:be:ce:4a:47:37:89:ac:df:0f:9c:fa:38:
                    47:a8:8c:81:f5:7a:a1:49:76:10:e5:73:fe:e2:07:
                    6f:1b:e0:03:4a:33:c3:fc:32:89:a1:44:23:7a:fe:
                    f4:4e:65:0c:68:6b:c4:0a:4b:39:33:6e:55:0d:e1:
                    23:b5:85:76:53:12:13:4e:5f:75:af:b7:5f:ac:40:
                    bc:7e:96:85:9d:1e:8f:38:70:78:e2:e8:7c:e0:43:
                    e6:b0:5a:c0:7e:31:00:28:68:ae:70:ee:36:5b:ac:
                    ac:3b:fd:02:80:c6:dc:5a:0b:eb:9f:e5:36:d0:0e:
                    6d:f7:e8:44:6f:14:1f:30:1b:68:89:1e:a3:1d:ce:
                    79:be:fc:88:a8:bc:2b:9a:49:7f:7a:65:de:f9:14:
                    eb:15:14:cc:e2:22:24:43:61:53:4f:15:19:4f:2b:
                    1d:86:fd:16:d0:34:84:82:ad:42:ea:0f:b2:f7:1d:
                    f3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:46:7C:A7:98:A8:46:23:EA:B6:41:B4:B8:C1:2E:88:F9:D5:DE:7F
            X509v3 Authority Key Identifier:
                keyid:31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:69:ca:eb:c4:da:63:b9:e3:35:ad:a8:ee:95:c8:14:c7:e7:
         b4:a9:f1:63:ce:97:ed:ea:3d:db:15:ee:53:d2:6e:88:61:f3:
         d8:d3:dd:4d:97:17:e7:47:0e:f4:c0:9b:cd:d8:98:5d:5d:ca:
         00:52:95:60:f0:6d:db:8b:18:68:d2:7c:04:eb:c3:7b:18:3f:
         1f:8f:c8:e9:d3:a8:0c:2f:c4:70:d1:c1:19:be:f9:4b:1d:b1:
         83:ab:ac:f3:c4:65:66:ac:10:10:e5:8b:7d:f9:b0:5c:c3:c0:
         82:0a:39:66:7d:35:99:9b:5b:18:16:fc:09:3c:1b:3f:55:ef:
         09:bc:bb:f7:61:9a:4f:f1:d9:de:19:9c:2f:58:49:5c:63:73:
         35:21:e4:c7:32:53:5e:80:a0:f9:3e:0c:a5:1c:f2:56:9f:71:
         45:f3:1e:6a:99:c2:81:d1:b7:0b:6e:30:e9:53:bc:6e:21:3a:
         4f:c1:63:02:45:00:44:ef:95:b9:1b:1c:22:c2:56:4c:f7:77:
         fd:d5:13:d2:e3:cf:60:e0:48:a1:97:69:4d:23:9c:50:72:f9:
         e0:5a:4d:12:84:ea:ed:40:71:98:f6:d7:62:d1:2f:bd:6b:32:
         d5:58:22:ca:66:f8:2a:99:06:a1:9b:87:48:05:02:1d:86:aa:
         b9:c8:cd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:28:12 2025 by rpki-client