Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft
File:                     E2EsNInrrttWOQK8neWS_I2DxVs.mft (raw, json)
Hash identifier:          ZqF8jjy5fyWL56hLsNkJBtAuV2TYil3uWTcb6/dMiiY=
Subject key identifier:   AC:A9:82:66:E2:26:A9:00:EC:34:89:01:03:1A:D2:9C:68:F5:1D:F3
Authority key identifier: 13:61:2C:34:89:EB:AE:DB:56:39:02:BC:9D:E5:92:FC:8D:83:C5:5B
Certificate issuer:       /CN=A91D513A/serialNumber=13612C3489EBAEDB563902BC9DE592FC8D83C55B
Certificate serial:       3466
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft
Manifest number:          3465
Signing time:             Fri 28 Mar 2025 15:23:47 +0000
Manifest this update:     Fri 28 Mar 2025 15:23:46 +0000
Manifest next update:     Fri 04 Apr 2025 15:23:46 +0000
Files and hashes:         1: E2EsNInrrttWOQK8neWS_I2DxVs.crl (hash: pEf8TVd08D16tKT4/JYfV3/U/8vwYHVa0vRjBX7cSPc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13414 (0x3466)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D513A
        Validity
            Not Before: Mar 28 15:23:46 2025 GMT
            Not After : Apr  4 15:23:46 2025 GMT
        Subject: CN=67e6bf03-8860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4e:57:e5:d2:49:35:26:48:ab:ea:1d:ae:e6:
                    42:20:e6:f2:67:50:a2:92:06:d6:84:39:79:dc:69:
                    0f:3f:ca:05:1a:13:4a:9a:0b:7e:1f:e4:24:18:4c:
                    d5:1f:49:bf:3f:f6:9e:cc:5c:53:a7:90:bf:3b:ed:
                    9c:17:11:41:4f:a6:10:5b:7c:dc:69:ed:c5:03:95:
                    f4:2a:3f:a4:25:e6:6d:f7:78:97:0b:bc:7c:77:cb:
                    03:5f:80:af:f1:ce:9d:41:2f:ec:3d:67:a8:ba:72:
                    70:18:5a:b8:c2:51:fc:13:b9:89:0c:d7:39:df:1c:
                    21:a0:11:f5:d3:e0:f7:2e:b0:29:fd:87:70:98:a7:
                    97:c0:3e:ec:ac:24:a1:7c:30:aa:1f:f9:bf:59:6b:
                    10:a7:bc:28:ba:35:47:67:ee:60:b4:55:b5:75:f1:
                    62:30:8f:8f:2c:bf:d0:2e:84:61:dc:2e:a1:d7:e8:
                    d7:49:92:49:a8:bf:e7:ac:53:a0:7f:f5:4e:3c:20:
                    bb:fd:0e:69:1f:97:c1:fa:48:43:8e:f8:92:d4:f1:
                    b0:4a:4d:bd:ca:a4:23:dd:7b:32:10:d0:2c:55:fe:
                    db:d2:5a:e9:9a:ae:7d:04:6f:5e:df:5e:53:be:5e:
                    00:f0:23:0f:f1:74:28:c9:30:c8:b2:11:6c:99:0f:
                    e5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A9:82:66:E2:26:A9:00:EC:34:89:01:03:1A:D2:9C:68:F5:1D:F3
            X509v3 Authority Key Identifier:
                keyid:13:61:2C:34:89:EB:AE:DB:56:39:02:BC:9D:E5:92:FC:8D:83:C5:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d1:53:cf:6b:50:60:39:a1:47:58:93:67:de:9b:41:b8:29:
         ff:62:c6:30:8e:4f:f1:ba:31:45:f7:f4:45:13:75:11:23:aa:
         00:49:fa:c9:6d:31:a3:e1:2d:cb:10:b3:04:39:73:31:0b:ee:
         f4:25:4c:8b:08:44:56:4d:f1:ee:84:11:27:50:46:1c:46:1e:
         4d:cb:f7:72:78:0b:b5:56:87:91:df:5a:44:32:3f:4c:75:af:
         47:60:6c:1b:9a:7e:25:ba:35:93:5a:53:2f:4c:b9:f5:8b:ac:
         a9:ce:c2:74:bb:ca:4c:a8:10:ac:22:b0:72:8a:e4:88:38:5f:
         eb:44:06:98:62:19:61:4f:11:1c:e3:e1:8b:27:d6:9f:5d:54:
         d8:e4:e2:fe:00:0f:76:fe:02:5c:ee:a8:7e:37:aa:3b:a4:59:
         7e:01:df:36:e8:92:0a:de:5c:c1:99:0c:dc:af:8c:e2:37:a9:
         e2:7c:d3:2a:1a:5c:de:1e:cf:e3:a0:01:71:fe:60:f2:06:00:
         eb:fe:c2:8e:cd:dd:b0:52:c7:c0:5a:d0:c8:b2:47:06:5b:69:
         ed:fb:00:4c:b7:1a:eb:6a:e1:28:7d:2f:3e:f7:0d:2f:3b:8a:
         3b:e9:59:3d:12:ec:29:28:e8:bd:69:c3:ca:6e:66:d3:ff:49:
         4e:22:6e:2b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDUxM0ExMTAvBgNVBAUTKDEzNjEyQzM0ODlFQkFFREI1NjM5MDJCQzlERTU5MkZD
OEQ4M0M1NUIwHhcNMjUwMzI4MTUyMzQ2WhcNMjUwNDA0MTUyMzQ2WjAYMRYwFAYD
VQQDEw02N2U2YmYwMy04ODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2U5X5dJJNSZIq+odruZCIObyZ1CikgbWhDl53GkPP8oFGhNKmgt+H+QkGEzV
H0m/P/aezFxTp5C/O+2cFxFBT6YQW3zcae3FA5X0Kj+kJeZt93iXC7x8d8sDX4Cv
8c6dQS/sPWeounJwGFq4wlH8E7mJDNc53xwhoBH10+D3LrAp/YdwmKeXwD7srCSh
fDCqH/m/WWsQp7woujVHZ+5gtFW1dfFiMI+PLL/QLoRh3C6h1+jXSZJJqL/nrFOg
f/VOPCC7/Q5pH5fB+khDjviS1PGwSk29yqQj3XsyENAsVf7b0lrpmq59BG9e315T
vl4A8CMP8XQoyTDIshFsmQ/luQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKypgmbi
JqkA7DSJAQMa0pxo9R3zMB8GA1UdIwQYMBaAFBNhLDSJ667bVjkCvJ3lkvyNg8Vb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTEzQS80MDFCRjgxRTFE
QUExMUUyQTU3MkUyQTUwOEIwMkNEMi9FMkVzTklucnJ0dFdPUUs4bmVXU19JMkR4
VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0UyRXNOSW5ycnR0V09RSzhuZVdTX0kyRHhWcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTEzQS80MDFCRjgxRTFEQUExMUUyQTU3MkUyQTUwOEIwMkNEMi9FMkVzTklucnJ0
dFdPUUs4bmVXU19JMkR4VnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA90VPPa1BgOaFHWJNn3ptBuCn/YsYwjk/xujFF9/RFE3URI6oASfrJ
bTGj4S3LELMEOXMxC+70JUyLCERWTfHuhBEnUEYcRh5Ny/dyeAu1VoeR31pEMj9M
da9HYGwbmn4lujWTWlMvTLn1i6ypzsJ0u8pMqBCsIrByiuSIOF/rRAaYYhlhTxEc
4+GLJ9afXVTY5OL+AA92/gJc7qh+N6o7pFl+Ad826JIK3lzBmQzcr4ziN6nifNMq
GlzeHs/joAFx/mDyBgDr/sKOzd2wUsfAWtDIskcGW2nt+wBMtxrrauEofS8+9w0v
O4o76Vk9EuwpKOi9acPKbmbT/0lOIm4r
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:06 2025 by rpki-client