Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.mft
File:                     YB71rSfD3A1NmC22u0dsBsvHAKA.mft (raw, json)
Hash identifier:          DEykOmdJde/emNdR45Ym4NsWH5g/dx4i+ltuSaBHhdw=
Subject key identifier:   93:5D:A0:7F:AF:F4:72:44:B4:38:F7:E0:12:DF:4E:37:5B:BC:6D:CE
Authority key identifier: 60:1E:F5:AD:27:C3:DC:0D:4D:98:2D:B6:BB:47:6C:06:CB:C7:00:A0
Certificate issuer:       /CN=A91BFE4E/serialNumber=601EF5AD27C3DC0D4D982DB6BB476C06CBC700A0
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB71rSfD3A1NmC22u0dsBsvHAKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.mft
Manifest number:          60
Signing time:             Sat 29 Mar 2025 06:21:46 +0000
Manifest this update:     Sat 29 Mar 2025 06:21:45 +0000
Manifest next update:     Sat 05 Apr 2025 06:21:45 +0000
Files and hashes:         1: YB71rSfD3A1NmC22u0dsBsvHAKA.crl (hash: VJPnWQ3od66WTGCuam2yuJ70kVEpOhoijT5wEdsoPuE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFE4E
        Validity
            Not Before: Mar 29 06:21:45 2025 GMT
            Not After : Apr  5 06:21:45 2025 GMT
        Subject: CN=67e7917a-641d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:99:34:47:42:d7:1b:40:e0:30:73:50:df:
                    05:21:3b:a4:c7:07:98:30:c5:49:64:d5:f7:57:e5:
                    6d:3a:a1:32:8b:00:a2:c1:e5:d6:c8:60:e1:52:bd:
                    76:5e:de:2b:16:fa:2a:68:e1:15:56:e8:d7:a9:b1:
                    e4:a3:02:85:7d:db:83:86:b1:6b:93:6c:4b:24:13:
                    96:e3:4e:79:95:62:55:59:53:ff:53:27:0c:86:0d:
                    82:2c:1b:b0:31:58:2f:f5:6c:58:33:a1:06:b2:ae:
                    90:7b:9a:9e:45:12:75:a9:cc:44:58:e7:f9:07:c6:
                    a7:db:2a:6a:48:76:19:e0:ed:50:9a:e8:34:3b:e3:
                    20:10:87:7e:18:95:75:b2:3e:ff:38:2c:b3:a2:0e:
                    48:be:aa:2a:9d:3a:8b:36:af:41:ba:e8:1d:8c:ba:
                    11:aa:a5:4c:26:ff:a2:33:82:c5:45:66:98:a1:79:
                    b9:0f:e1:ed:16:58:3a:a8:16:95:0e:5d:43:f7:93:
                    f6:fe:ba:6c:81:55:9f:4e:fe:a4:26:bb:34:2f:24:
                    32:fe:3a:6b:04:5c:d5:7a:19:70:fa:d4:ad:f7:ee:
                    1d:7d:e7:05:93:a2:cd:21:96:34:00:ab:5c:d9:33:
                    86:9e:fa:4c:b2:6d:ba:0b:24:88:8e:f9:61:ca:23:
                    90:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5D:A0:7F:AF:F4:72:44:B4:38:F7:E0:12:DF:4E:37:5B:BC:6D:CE
            X509v3 Authority Key Identifier:
                keyid:60:1E:F5:AD:27:C3:DC:0D:4D:98:2D:B6:BB:47:6C:06:CB:C7:00:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB71rSfD3A1NmC22u0dsBsvHAKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:2a:34:48:4f:7a:35:62:60:1e:c3:3f:1c:37:19:35:b9:4e:
         d3:f9:ed:a5:aa:dd:12:73:44:50:a7:a4:06:d8:42:06:7a:68:
         0d:b0:50:22:e9:71:a8:2f:42:e4:0e:76:22:f7:00:0f:40:f1:
         0e:b5:a9:23:2a:f1:6e:30:6b:61:1d:3c:19:39:87:a5:ac:a5:
         d1:fa:39:e5:4b:9a:ce:f3:7a:4a:41:69:bf:ea:de:05:fd:80:
         0f:68:57:63:82:69:8b:0b:48:36:70:d9:25:f6:79:58:5c:bc:
         ad:0b:88:03:28:fb:28:18:f0:21:18:d9:f3:d9:75:1f:f3:b6:
         99:cc:c1:d1:8a:fd:04:6a:4d:de:69:ce:21:0a:4b:74:d7:e1:
         81:3d:7e:14:6d:bb:c3:67:98:2d:73:ad:7c:b4:c5:48:5d:fd:
         62:09:a4:a0:85:e7:7e:88:51:67:40:28:63:93:29:6d:f5:fb:
         54:dc:ad:26:16:47:1e:a5:af:9d:fa:e7:bb:93:a8:da:d6:54:
         ea:40:24:cd:a7:8b:25:82:d9:a9:3f:e9:8c:59:02:02:ec:9a:
         80:b2:fb:9b:b2:c7:99:87:1f:01:3e:9d:31:c3:71:97:86:4f:
         81:86:81:fe:05:06:bc:f3:75:b7:4e:f2:66:0d:6c:a1:90:9b:
         81:ab:02:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:26:33 2025 by rpki-client