Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft
File:                     c5C6Rl4CIu4xQH5VCebenj-pENs.mft (raw, json)
Hash identifier:          63Di3hEsdMvJuk9YMizJ1+TRYYEp4iMBTVLe1yyMvPQ=
Subject key identifier:   FB:EB:93:D7:5B:27:B0:91:D8:7F:54:C0:1F:E8:A5:33:1C:6F:C2:7B
Authority key identifier: 73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB
Certificate issuer:       /CN=A91CA6E6/serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB
Certificate serial:       A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft
Manifest number:          0208
Signing time:             Sat 29 Mar 2025 03:28:18 +0000
Manifest this update:     Sat 29 Mar 2025 03:28:17 +0000
Manifest next update:     Sat 05 Apr 2025 03:28:17 +0000
Files and hashes:         1: c5C6Rl4CIu4xQH5VCebenj-pENs.crl (hash: 4kKQT8bEOkZiDwOvlKc5xTkn2fooU0XmvyOlDGIu+4s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA6E6
        Validity
            Not Before: Mar 29 03:28:17 2025 GMT
            Not After : Apr  5 03:28:17 2025 GMT
        Subject: CN=67e768d2-f0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:55:0a:c8:fa:0a:10:ef:e9:47:db:d4:dc:09:
                    c6:bf:4c:2a:f9:45:25:5d:54:1c:2f:cd:95:a9:0c:
                    24:94:ad:1a:2a:2c:b2:86:4b:37:c6:48:8d:b3:a4:
                    cf:1d:b1:c3:30:ee:02:18:5c:e4:85:25:e5:e8:9b:
                    3b:6d:3e:30:c6:e5:d8:25:95:25:54:1a:39:c4:2d:
                    dc:fd:ef:34:95:6b:cb:ff:6a:b5:98:3f:a1:c0:a5:
                    1e:22:c1:9d:64:ce:34:0b:9b:50:46:d7:9a:c1:b3:
                    67:55:8a:d1:17:ed:31:25:08:d1:f1:6f:a6:d6:52:
                    48:be:16:f7:b5:bc:9e:65:cd:f3:28:1b:cf:b9:df:
                    52:a1:17:dd:ca:5a:15:a0:87:1e:ac:bf:0a:e4:15:
                    73:f6:ea:0a:ba:b6:6a:cb:6e:05:51:8d:67:e1:b3:
                    7d:db:d7:4c:fe:93:be:02:a5:d5:8b:e3:5f:54:b1:
                    8a:20:7c:ae:c8:9f:d4:51:c4:fd:24:f5:85:10:51:
                    2a:e5:3c:f9:d5:56:02:52:9d:94:a7:7b:ab:e2:45:
                    42:10:72:ad:54:3a:e6:ba:00:53:c9:52:54:75:2f:
                    06:9b:6f:f9:3d:00:29:58:c3:49:cb:1c:a6:ce:23:
                    35:a9:02:84:ff:5e:99:6e:05:b8:7f:14:6e:1e:95:
                    79:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EB:93:D7:5B:27:B0:91:D8:7F:54:C0:1F:E8:A5:33:1C:6F:C2:7B
            X509v3 Authority Key Identifier:
                keyid:73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e4:ac:a0:54:a7:50:2c:46:94:1b:be:e7:8c:22:1f:da:b4:
         e1:74:5e:b3:e1:44:1f:4f:dd:b4:57:b4:54:46:bc:bf:70:c4:
         fa:84:8a:84:f4:31:af:2d:76:7b:17:9d:13:68:0a:97:2e:37:
         0c:ac:c8:9b:56:03:cc:81:02:6e:7f:4c:3b:72:dc:9f:d0:db:
         bf:99:a0:78:52:4a:79:11:ed:89:9e:34:f4:6c:18:70:7f:a4:
         39:6b:3b:dd:c5:eb:11:30:5f:1a:51:82:dd:e9:e8:51:78:f6:
         1b:07:c1:0e:c0:8d:3b:ff:a7:55:5b:ac:c0:a3:37:f4:74:d4:
         47:d3:e1:89:7f:1b:33:49:b3:97:f0:63:e8:ea:d4:d7:66:e4:
         a4:2c:8d:3d:24:f8:d0:23:28:3c:d5:9e:f0:7d:00:c5:1d:b9:
         49:18:f1:c0:50:7b:89:9e:9b:48:72:05:5e:06:01:3c:0f:3e:
         d0:f3:ce:5c:69:46:e4:99:53:60:ec:95:25:10:3b:a3:b3:da:
         1d:26:f5:ba:e7:65:89:b7:bf:ff:ed:54:ac:86:b0:3a:9b:b1:
         d9:86:63:fb:24:8b:41:02:d1:fa:9d:91:42:e5:9a:39:c1:de:
         2b:5f:0f:f5:af:b3:67:d6:92:a5:cf:c6:b8:9e:da:bd:db:4c:
         2a:ed:94:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:41 2025 by rpki-client