Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.mft
File:                     edSLikSpvRZsNNwg7IxXE_MJLss.mft (raw, json)
Hash identifier:          oWQdUB0uc3o5SUqaaKCAnx7wSckqc324SbY0iwNKiao=
Subject key identifier:   D9:D4:F3:8F:36:4A:85:7E:42:AC:5B:52:40:F2:D8:D8:48:92:BA:C0
Authority key identifier: 79:D4:8B:8A:44:A9:BD:16:6C:34:DC:20:EC:8C:57:13:F3:09:2E:CB
Certificate issuer:       /CN=A91E299A/serialNumber=79D48B8A44A9BD166C34DC20EC8C5713F3092ECB
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edSLikSpvRZsNNwg7IxXE_MJLss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.mft
Manifest number:          20
Signing time:             Sat 29 Mar 2025 07:10:35 +0000
Manifest this update:     Sat 29 Mar 2025 07:10:34 +0000
Manifest next update:     Sat 05 Apr 2025 07:10:34 +0000
Files and hashes:         1: edSLikSpvRZsNNwg7IxXE_MJLss.crl (hash: BrifFT6WabKlL5ybxpNG1mVvWt3wuu4DSFF0NrkNYYU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E299A
        Validity
            Not Before: Mar 29 07:10:34 2025 GMT
            Not After : Apr  5 07:10:34 2025 GMT
        Subject: CN=67e79ceb-e5d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:eb:b8:e8:81:b1:07:ec:a4:c0:92:58:b0:11:
                    23:0a:1c:04:3c:87:d5:38:3f:d4:69:ef:58:cc:1b:
                    38:6f:76:a8:a4:05:c7:ab:e8:63:1b:00:cd:5c:29:
                    67:fa:bd:f7:57:e2:d8:50:3f:8f:ec:1e:00:27:85:
                    47:fc:23:fe:53:d6:48:b4:3d:a0:ce:18:04:bb:98:
                    a3:37:c5:76:8f:05:28:5a:62:e7:f0:b1:1f:59:99:
                    de:c2:25:a3:65:fb:4b:35:de:16:a1:99:f7:9a:c9:
                    a7:c4:10:d1:88:cb:04:09:9d:be:97:3e:3e:2c:fc:
                    30:ba:70:67:78:01:a3:95:73:4f:6e:9b:17:3a:a2:
                    ff:e5:87:d4:8a:bb:0d:e5:f9:08:08:41:a1:47:ae:
                    ec:ea:55:00:fc:0c:d9:fc:1b:43:76:24:07:7c:69:
                    75:56:9d:1d:cc:3b:a4:ff:50:77:11:54:5f:9d:69:
                    6b:e8:77:29:fd:c2:82:c2:5a:4b:3f:b8:4f:94:ac:
                    81:85:50:e2:74:21:13:18:f8:25:4b:2e:07:74:c8:
                    83:bb:64:80:c2:ca:64:c1:d2:9a:66:c7:60:29:a3:
                    97:c5:2c:80:f6:db:e5:69:7a:7d:38:6c:47:23:18:
                    2b:d2:74:1a:ee:84:a0:a9:16:23:66:89:69:c6:f7:
                    a4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D4:F3:8F:36:4A:85:7E:42:AC:5B:52:40:F2:D8:D8:48:92:BA:C0
            X509v3 Authority Key Identifier:
                keyid:79:D4:8B:8A:44:A9:BD:16:6C:34:DC:20:EC:8C:57:13:F3:09:2E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edSLikSpvRZsNNwg7IxXE_MJLss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:21:63:3b:13:c6:86:bb:25:2a:32:fc:36:d9:5b:c6:ec:3d:
         67:46:95:17:0b:6d:39:53:5a:8e:7a:4d:29:1b:64:9e:3d:9d:
         f9:40:93:c3:98:ca:8c:c1:3f:8d:9e:20:9b:f0:6d:44:78:44:
         86:03:a2:79:39:fd:cb:6e:53:13:d2:52:9f:c7:00:38:53:e1:
         a7:da:18:26:11:48:8f:ef:67:ef:a4:2d:83:5e:9b:1d:86:55:
         cb:2e:1a:2e:d2:26:c0:39:36:9d:e7:5b:9f:c7:0d:bb:02:87:
         16:81:4f:ec:83:25:82:ea:2e:f6:e8:29:44:dd:aa:31:2f:93:
         1f:aa:17:ce:cf:5f:a1:43:6e:8d:79:10:2c:cd:d8:1f:1f:c0:
         7e:30:75:67:49:5f:32:b9:c2:83:43:03:94:45:b2:10:cf:c7:
         61:c0:a9:45:9a:fd:ca:04:bf:19:8d:3d:36:a5:29:35:b3:fe:
         0d:02:46:1f:4d:fb:ca:f5:5a:5f:8b:23:f7:92:c0:2b:c4:dd:
         d3:9d:f7:a3:38:af:51:92:24:12:84:94:73:b1:51:0f:e9:82:
         d6:d5:6a:ff:5b:68:40:61:15:ad:73:07:5d:5c:ec:ba:0e:68:
         9a:51:49:44:5c:54:08:be:6a:48:4c:df:86:7d:20:ac:6c:83:
         0c:24:50:76
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
Mjk5QTExMC8GA1UEBRMoNzlENDhCOEE0NEE5QkQxNjZDMzREQzIwRUM4QzU3MTNG
MzA5MkVDQjAeFw0yNTAzMjkwNzEwMzRaFw0yNTA0MDUwNzEwMzRaMBgxFjAUBgNV
BAMTDTY3ZTc5Y2ViLWU1ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDG67jogbEH7KTAkliwESMKHAQ8h9U4P9Rp71jMGzhvdqikBcer6GMbAM1cKWf6
vfdX4thQP4/sHgAnhUf8I/5T1ki0PaDOGAS7mKM3xXaPBShaYufwsR9Zmd7CJaNl
+0s13hahmfeayafEENGIywQJnb6XPj4s/DC6cGd4AaOVc09umxc6ov/lh9SKuw3l
+QgIQaFHruzqVQD8DNn8G0N2JAd8aXVWnR3MO6T/UHcRVF+daWvodyn9woLCWks/
uE+UrIGFUOJ0IRMY+CVLLgd0yIO7ZIDCymTB0ppmx2Apo5fFLID22+Vpen04bEcj
GCvSdBruhKCpFiNmiWnG96TrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2dTzjzZK
hX5CrFtSQPLY2EiSusAwHwYDVR0jBBgwFoAUedSLikSpvRZsNNwg7IxXE/MJLssw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyOTlBL0EwQUMwOTkyRERG
NzExRUY4MEQyMTU2RkM0RjlBRTAyL2VkU0xpa1NwdlJac05Od2c3SXhYRV9NSkxz
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZWRTTGlrU3B2UlpzTk53ZzdJeFhFX01KTHNzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUy
OTlBL0EwQUMwOTkyRERGNzExRUY4MEQyMTU2RkM0RjlBRTAyL2VkU0xpa1NwdlJa
c05Od2c3SXhYRV9NSkxzcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADohYzsTxoa7JSoy/DbZW8bsPWdGlRcLbTlTWo56TSkbZJ49nflAk8OY
yozBP42eIJvwbUR4RIYDonk5/ctuUxPSUp/HADhT4afaGCYRSI/vZ++kLYNemx2G
VcsuGi7SJsA5Np3nW5/HDbsChxaBT+yDJYLqLvboKUTdqjEvkx+qF87PX6FDbo15
ECzN2B8fwH4wdWdJXzK5woNDA5RFshDPx2HAqUWa/coEvxmNPTalKTWz/g0CRh9N
+8r1Wl+LI/eSwCvE3dOd96M4r1GSJBKElHOxUQ/pgtbVav9baEBhFa1zB11c7LoO
aJpRSURcVAi+akhM34Z9IKxsgwwkUHY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:20:58 2025 by rpki-client