Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
File:                     Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft (raw, json)
Hash identifier:          N3ajQ3vFczULIpgh0lGa6n5DyR8ZRIZto7sgx1aWkYg=
Subject key identifier:   5F:0C:2E:2D:B6:DA:8D:DB:A2:20:6E:49:12:0A:DA:E5:64:B3:29:3A
Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45
Certificate issuer:       /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845
Certificate serial:       045A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
Manifest number:          0448
Signing time:             Sat 29 Mar 2025 00:32:57 +0000
Manifest this update:     Sat 29 Mar 2025 00:32:56 +0000
Manifest next update:     Sat 05 Apr 2025 00:32:56 +0000
Files and hashes:         1: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl (hash: pH3D6cHFd27WB+81Lymi4ikK7FpaTdYtE0Z3WoACZ3E=)
                          2: F63AA888900F11ED8B4CB41DC4F9AE02.roa (hash: SXmEoVAwCuv2S1VkQaBNQLi7h8OwZxPvKiz0YPbjYQg=)
                          3: 8120226CBEE111ECBFC4F882C4F9AE02.roa (hash: cKv5ZDuMTRB1GZ6qDVjyr/DKInN5ROhN7fMypCO2t9o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1114 (0x45a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9467
        Validity
            Not Before: Mar 29 00:32:56 2025 GMT
            Not After : Apr  5 00:32:56 2025 GMT
        Subject: CN=67e73fb8-6d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e0:57:93:2f:3d:c9:56:97:84:35:d4:6d:00:
                    00:be:cc:75:13:5d:2d:82:98:4f:1b:b3:ee:13:35:
                    33:9e:36:71:fd:5e:bd:a4:d2:48:84:7d:6d:d4:ec:
                    a3:cc:85:54:a7:a9:09:d1:1f:dc:39:da:48:04:e5:
                    6f:71:33:8e:38:4c:3a:26:c8:12:b7:da:33:bc:9f:
                    7c:b2:2a:02:fa:09:3a:28:2d:19:7a:09:a6:25:63:
                    fb:d1:a7:1e:85:32:61:13:ee:0f:d5:82:df:ea:db:
                    98:e2:4c:2f:5a:d0:b1:ac:5b:d0:d4:59:88:c0:91:
                    a2:33:50:f5:fb:43:b7:87:a5:91:c6:4d:a4:c3:ab:
                    8d:0a:88:56:70:8a:63:9e:8b:15:0a:d2:dd:17:fb:
                    3c:63:fa:88:5a:cd:6e:1f:1f:51:bb:ca:7a:db:c7:
                    c9:7e:88:01:70:99:fb:88:86:8c:d2:73:b4:5a:12:
                    46:49:0e:0b:58:f8:4c:2b:ed:71:6a:64:e4:2c:ee:
                    d1:e2:45:cf:31:f9:56:dd:46:30:40:76:05:a4:9c:
                    dc:73:7b:6c:ef:f1:8b:fc:c8:ef:7d:79:6e:3b:6a:
                    fd:7d:9c:6b:44:c4:2b:9d:12:d3:17:6e:c5:0d:34:
                    f3:62:2b:a9:3f:40:00:e2:10:7c:e1:ac:8c:a7:df:
                    77:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:0C:2E:2D:B6:DA:8D:DB:A2:20:6E:49:12:0A:DA:E5:64:B3:29:3A
            X509v3 Authority Key Identifier:
                keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ea:85:4c:91:44:f7:9f:4b:b7:a3:69:1a:7a:0a:6e:0d:0c:
         52:71:ed:42:e8:15:50:63:c4:a8:a1:6a:15:f6:6c:fe:e7:4f:
         34:cf:35:28:68:0b:11:b3:27:0a:6e:e1:c8:d7:99:34:1a:2d:
         dd:69:e4:4f:93:48:af:e0:12:32:90:c7:2c:93:8a:a2:c5:e3:
         7a:88:23:87:46:2b:68:d4:ec:b0:22:ba:0a:48:e6:c0:e8:19:
         94:0c:57:3e:0f:37:59:88:a4:02:67:26:86:fc:65:e7:05:f8:
         78:fd:3c:4f:4d:b9:95:35:3c:08:0a:66:ed:07:08:2a:d7:d3:
         4c:e6:84:d2:30:65:84:95:8d:3d:d1:2e:5f:2f:bd:f6:19:35:
         2f:67:98:14:aa:ef:f4:a5:b5:ca:b0:d9:dd:18:44:bd:86:75:
         74:a5:a5:de:60:f8:ec:46:e4:8b:5c:af:4b:4f:dc:ef:27:14:
         d9:60:36:32:1c:13:fb:7f:19:b6:c8:5d:d0:d0:62:ec:66:5f:
         22:96:57:8b:80:c7:66:ba:55:05:da:51:44:25:4e:c4:34:20:
         7f:29:d6:72:0d:eb:6e:ef:69:ec:81:81:a2:55:54:76:06:ed:
         1b:fe:4f:81:85:18:d9:16:5a:6f:fa:51:00:a0:13:51:40:3c:
         e8:9b:38:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:29:50 2025 by rpki-client