Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.mft
File:                     FMxtyeCRBW52oT-Pinw1duzx27E.mft (raw, json)
Hash identifier:          Ddoaj112NeGBl8poS/tRgbZZTkZeQTuY4cWJAYiUOGU=
Subject key identifier:   8A:AA:D7:1F:DD:13:9E:9F:3C:F3:7C:4F:2C:00:28:6A:7C:76:2C:BD
Authority key identifier: 14:CC:6D:C9:E0:91:05:6E:76:A1:3F:8F:8A:7C:35:76:EC:F1:DB:B1
Certificate issuer:       /CN=A91C9D04/serialNumber=14CC6DC9E091056E76A13F8F8A7C3576ECF1DBB1
Certificate serial:       15B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMxtyeCRBW52oT-Pinw1duzx27E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.mft
Manifest number:          1EA2
Signing time:             Fri 28 Mar 2025 16:53:40 +0000
Manifest this update:     Fri 28 Mar 2025 16:53:39 +0000
Manifest next update:     Fri 04 Apr 2025 16:53:39 +0000
Files and hashes:         1: FMxtyeCRBW52oT-Pinw1duzx27E.crl (hash: 4+5t4X1Dkkf6QmrQr4ovdln5ktjSSWsDAWzpz0KzW4I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5559 (0x15b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9D04
        Validity
            Not Before: Mar 28 16:53:39 2025 GMT
            Not After : Apr  4 16:53:39 2025 GMT
        Subject: CN=67e6d414-1317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c7:a2:25:6a:91:a0:4a:67:63:fa:49:de:2a:
                    9e:0b:da:0b:f3:e4:aa:30:32:52:2d:f9:f8:3d:6d:
                    de:4c:d1:fe:8d:3e:ea:ea:a6:e7:ca:b1:9f:5c:5c:
                    ec:37:1f:58:1c:c9:75:07:e9:73:73:43:8c:95:65:
                    b6:08:10:89:06:6d:bf:5b:94:16:ff:7a:ed:cc:d2:
                    d7:dd:20:8e:9f:f6:eb:d2:7b:15:60:20:96:a4:5e:
                    59:88:92:3e:ae:a6:04:c7:0d:b8:0e:35:1b:97:e1:
                    2e:f7:7a:a5:fd:fa:75:33:0b:06:63:96:d2:e9:4e:
                    72:e1:b9:b8:b0:bd:30:d7:50:ff:5c:d0:08:70:4a:
                    fd:24:a2:1c:07:d3:1d:75:2b:5b:7c:b6:61:f6:a0:
                    6b:73:be:08:75:c4:ea:cd:81:48:f4:1f:9f:be:33:
                    b1:fc:88:1a:79:12:c0:c1:35:61:57:2d:6e:50:05:
                    b1:8d:30:93:b3:69:f7:cb:7a:4c:ec:e9:42:a3:89:
                    87:99:34:04:71:03:d4:03:d8:91:86:71:bb:1e:aa:
                    07:4b:95:c6:44:50:92:58:b0:15:4d:54:f1:e1:82:
                    cf:8d:ba:53:53:62:0b:85:1d:f9:a3:f3:f6:61:04:
                    49:f6:b7:f1:38:1e:83:5d:84:1e:ee:4b:2c:05:1d:
                    bf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AA:D7:1F:DD:13:9E:9F:3C:F3:7C:4F:2C:00:28:6A:7C:76:2C:BD
            X509v3 Authority Key Identifier:
                keyid:14:CC:6D:C9:E0:91:05:6E:76:A1:3F:8F:8A:7C:35:76:EC:F1:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMxtyeCRBW52oT-Pinw1duzx27E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:41:d8:ce:03:53:17:84:85:65:a7:69:cb:93:6d:29:25:d1:
         6c:06:6e:3c:3e:5e:f4:85:9b:65:f6:1c:42:c7:db:77:1c:07:
         f4:a6:94:c0:24:e9:df:3b:f0:e0:20:0d:6a:a5:59:20:bf:3c:
         39:98:b3:a8:de:86:64:c0:18:dd:b8:66:7f:f2:78:96:e6:58:
         d7:c5:13:0a:50:87:eb:60:94:86:1a:a0:26:bc:46:7d:d5:0a:
         43:84:d9:ae:96:58:5f:bb:1b:47:9a:e4:70:62:17:d2:03:12:
         c4:da:46:60:01:ca:5b:93:e5:cc:5d:db:3b:fd:d8:db:cf:4e:
         6c:88:ce:b1:6e:67:62:93:55:78:2d:12:49:b6:45:31:07:74:
         cd:fd:f7:85:cd:9d:b5:8d:d7:ad:64:20:59:1d:60:4a:6d:b5:
         ae:44:19:b7:74:aa:8a:01:42:0e:5b:af:37:c3:f4:ed:31:06:
         e6:f1:12:d4:f4:7b:d4:db:7b:e3:d7:0f:89:ca:a5:32:b6:ab:
         8e:a3:b0:89:49:ac:aa:6c:cf:97:3b:22:fe:ce:85:ac:ff:1f:
         4f:45:7e:25:6e:bc:49:04:3a:0b:50:ca:cb:fb:1e:c9:1e:1c:
         12:7e:24:ae:48:5a:8e:8d:ac:89:cb:f5:4e:12:fd:31:b3:b5:
         dd:4b:96:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:36:47 2025 by rpki-client