Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
File:                     we5pqmqhrLoy4Wdk2oG_ekFopg0.mft (raw, json)
Hash identifier:          7ybgdpcUSq5hyhHb9f5D6IASNw2tHp1Ij9qhW+tqFbc=
Subject key identifier:   79:C1:BF:0F:D4:13:EC:52:44:54:36:99:A9:A7:EC:24:67:DE:C4:DF
Authority key identifier: C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D
Certificate issuer:       /CN=A91D0B6B/serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
Manifest number:          0B
Signing time:             Sat 29 Mar 2025 07:26:50 +0000
Manifest this update:     Sat 29 Mar 2025 07:26:50 +0000
Manifest next update:     Sat 05 Apr 2025 07:26:50 +0000
Files and hashes:         1: we5pqmqhrLoy4Wdk2oG_ekFopg0.crl (hash: hl7hIXo5s6184aKnIKVFHifNRRQvcFK+89jsbzXHwT0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0B6B
        Validity
            Not Before: Mar 29 07:26:50 2025 GMT
            Not After : Apr  5 07:26:50 2025 GMT
        Subject: CN=67e7a0ba-8e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:5a:24:12:cb:e9:3f:35:d1:75:45:8f:7d:39:
                    dd:ee:19:14:bc:f4:ca:ae:ee:e1:fd:83:e8:25:77:
                    ee:89:20:ea:a2:0f:c6:48:fd:99:a2:32:61:28:d7:
                    dd:55:fc:e0:88:af:92:8f:75:5b:a2:52:bd:4f:50:
                    af:c1:a0:2d:cc:70:84:45:5d:df:13:d0:33:39:61:
                    1c:a6:f5:ed:c0:79:8d:4a:fa:9f:f1:88:f3:2b:44:
                    50:90:1d:76:c1:e1:18:cd:11:ce:43:bb:6b:6a:b9:
                    8b:e9:e7:af:54:d5:1d:33:00:16:0d:6e:6d:fe:ba:
                    14:7c:c9:a8:be:51:81:b4:f8:41:ba:10:83:3a:a5:
                    0b:b4:10:c4:f4:81:e3:e9:af:66:b0:98:fe:df:1d:
                    73:2d:c7:c7:4a:55:45:98:0d:9f:7f:de:e3:a8:1f:
                    e5:89:be:44:40:bd:aa:36:8c:2b:b0:08:1d:b7:65:
                    3d:cf:16:f1:cf:82:0d:47:1b:b1:ff:b2:01:53:e5:
                    25:18:7d:39:c6:73:8d:62:73:58:5a:f7:97:01:f8:
                    8e:69:01:67:3c:b1:fd:3e:d8:68:12:10:ac:ea:3a:
                    25:3e:ce:9f:33:b9:21:39:26:c3:04:f0:51:8e:bb:
                    10:d2:43:5f:83:c4:62:40:83:43:c7:bc:b9:09:6d:
                    78:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C1:BF:0F:D4:13:EC:52:44:54:36:99:A9:A7:EC:24:67:DE:C4:DF
            X509v3 Authority Key Identifier:
                keyid:C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:f0:31:1e:bf:55:b2:f1:6f:f7:f2:fb:27:ce:c5:73:80:52:
         5f:86:bd:12:f6:39:b2:7c:9d:1f:57:8a:db:bf:ef:43:31:81:
         94:d9:38:5a:f7:34:15:d4:49:5a:1e:3d:8f:c8:95:c8:d8:7a:
         1b:00:ae:2c:f8:7a:ab:85:f4:6b:45:ed:bb:cf:c0:67:50:d1:
         45:ca:be:1f:c0:ee:0d:23:dd:80:6b:20:af:29:97:29:a7:17:
         0f:c5:a2:29:7d:b0:5d:e5:37:80:d9:70:4f:9c:f4:fe:80:87:
         74:d4:57:2b:7d:aa:cf:00:92:1e:56:ee:d0:d9:00:43:02:2b:
         0d:f9:c1:18:b8:90:be:e6:f3:ff:e2:81:3d:d0:4c:9c:e4:06:
         d2:04:9d:39:d6:56:e0:51:77:dc:46:ea:29:84:ce:94:00:43:
         0d:25:55:14:26:65:d1:b8:a3:cf:0d:a1:42:02:8d:b8:fa:f2:
         9f:10:fe:17:bc:11:07:3f:b1:be:73:ef:80:30:35:6e:39:23:
         28:40:ad:7b:7e:96:51:f7:8d:e1:f0:a1:42:0c:9a:cd:b8:80:
         00:0e:1c:85:0f:0b:47:8b:8d:ee:f6:5e:30:c6:7c:df:74:f0:
         c0:d0:bb:08:4f:ae:3c:8e:2b:4d:7e:f9:dd:04:56:2b:9f:41:
         aa:2f:a5:e4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MEI2QjExMC8GA1UEBRMoQzFFRTY5QUE2QUExQUNCQTMyRTE2NzY0REE4MUJGN0E0
MTY4QTYwRDAeFw0yNTAzMjkwNzI2NTBaFw0yNTA0MDUwNzI2NTBaMBgxFjAUBgNV
BAMTDTY3ZTdhMGJhLThlMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD3WiQSy+k/NdF1RY99Od3uGRS89Mqu7uH9g+gld+6JIOqiD8ZI/ZmiMmEo191V
/OCIr5KPdVuiUr1PUK/BoC3McIRFXd8T0DM5YRym9e3AeY1K+p/xiPMrRFCQHXbB
4RjNEc5Du2tquYvp569U1R0zABYNbm3+uhR8yai+UYG0+EG6EIM6pQu0EMT0gePp
r2awmP7fHXMtx8dKVUWYDZ9/3uOoH+WJvkRAvao2jCuwCB23ZT3PFvHPgg1HG7H/
sgFT5SUYfTnGc41ic1ha95cB+I5pAWc8sf0+2GgSEKzqOiU+zp8zuSE5JsME8FGO
uxDSQ1+DxGJAg0PHvLkJbXjRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUecG/D9QT
7FJEVDaZqafsJGfexN8wHwYDVR0jBBgwFoAUwe5pqmqhrLoy4Wdk2oG/ekFopg0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQjZCLzc1QTkyMjMwRkUz
RjExRUY4RkEyNzc1MkM0RjlBRTAyL3dlNXBxbXFockxveTRXZGsyb0dfZWtGb3Bn
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvd2U1cHFtcWhyTG95NFdkazJvR19la0ZvcGcwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw
QjZCLzc1QTkyMjMwRkUzRjExRUY4RkEyNzc1MkM0RjlBRTAyL3dlNXBxbXFockxv
eTRXZGsyb0dfZWtGb3BnMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACvwMR6/VbLxb/fy+yfOxXOAUl+GvRL2ObJ8nR9Xitu/70MxgZTZOFr3
NBXUSVoePY/IlcjYehsAriz4equF9GtF7bvPwGdQ0UXKvh/A7g0j3YBrIK8plymn
Fw/Foil9sF3lN4DZcE+c9P6Ah3TUVyt9qs8Akh5W7tDZAEMCKw35wRi4kL7m8//i
gT3QTJzkBtIEnTnWVuBRd9xG6imEzpQAQw0lVRQmZdG4o88NoUICjbj68p8Q/he8
EQc/sb5z74AwNW45IyhArXt+llH3jeHwoUIMms24gAAOHIUPC0eLje72XjDGfN90
8MDQuwhPrjyOK01++d0EViufQaovpeQ=
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:05:35 2025 by rpki-client