Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
File:                     IrN0ThSJpKURK82Mvxepj_HbZnU.mft (raw, json)
Hash identifier:          FNrAcEC1lhkZslVQA66xy9CUBKCb8hFvlRnMQRNp2j4=
Subject key identifier:   74:98:8B:E3:4A:06:99:B7:B3:02:58:FB:27:77:61:93:33:E2:80:2D
Authority key identifier: 22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75
Certificate issuer:       /CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675
Certificate serial:       02F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
Manifest number:          02EC
Signing time:             Sat 29 Mar 2025 01:35:33 +0000
Manifest this update:     Sat 29 Mar 2025 01:35:33 +0000
Manifest next update:     Sat 05 Apr 2025 01:35:33 +0000
Files and hashes:         1: IrN0ThSJpKURK82Mvxepj_HbZnU.crl (hash: xYDffFSUPXMBF/8oXUKb8yDD1jA+laF1DKAqSv5/T9E=)
                          2: F2C91F5678BE11EFBB3FC76DC4F9AE02.roa (hash: du3inK9qkjwR/A2n6vO6SMQjDynHJ0y0PAziJifzAng=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 755 (0x2f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2B54
        Validity
            Not Before: Mar 29 01:35:33 2025 GMT
            Not After : Apr  5 01:35:33 2025 GMT
        Subject: CN=67e74e65-ada7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a5:3a:fd:94:7c:78:20:bb:46:1b:d1:96:43:
                    d6:cd:7d:ab:a8:90:51:4a:b5:b5:f8:ad:27:12:7a:
                    7c:ae:4b:12:c4:88:ce:e1:ba:9b:aa:2c:6d:bb:31:
                    57:8b:d2:ea:fe:79:40:63:04:8a:b0:ce:0b:41:c2:
                    04:cc:c7:1c:18:66:63:0d:50:44:db:7f:be:22:79:
                    ea:eb:c7:b1:53:82:38:8a:f1:dc:ca:df:3b:48:8a:
                    5a:27:78:d2:0d:b4:b1:bb:43:6c:02:6f:fd:fa:a5:
                    c7:9b:e7:37:c1:2c:62:30:57:b7:51:d3:d9:21:c3:
                    9d:7f:62:9a:05:68:a5:b6:cb:e7:cb:60:21:92:35:
                    3f:69:ca:a8:9f:2c:be:e8:03:5c:86:00:ad:fa:dd:
                    88:c8:e6:dc:ae:82:03:67:ce:fa:c1:e2:5c:a7:ba:
                    27:4f:17:12:09:58:e4:a6:9d:e8:7e:4e:4f:c4:f1:
                    e4:ba:cc:6b:73:e7:33:b9:d1:dd:07:69:86:ea:ba:
                    c0:c8:25:9f:47:c3:93:71:1d:9f:aa:7f:00:48:09:
                    99:b8:e4:c4:1f:3b:e9:51:1f:93:8c:05:0d:ea:e4:
                    58:4a:cb:05:70:a7:44:6f:a2:ff:7d:b4:6e:94:06:
                    d3:91:d9:f6:06:18:32:6e:9c:d6:02:79:5f:32:36:
                    cc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:98:8B:E3:4A:06:99:B7:B3:02:58:FB:27:77:61:93:33:E2:80:2D
            X509v3 Authority Key Identifier:
                keyid:22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:6e:b3:c5:a5:3c:ad:1f:e6:fe:ec:79:83:f4:a9:29:d0:a8:
         63:8d:a5:f8:da:34:26:2b:d5:8e:ac:3e:db:c5:52:8c:f5:9c:
         32:e4:4d:2a:77:9f:a2:0a:4e:99:7a:8a:d8:c5:59:61:cc:d3:
         00:42:f4:74:0d:81:1a:7f:74:72:6c:cd:38:02:ee:7a:a2:1e:
         e6:81:e8:6b:47:3b:39:8a:ec:34:0d:a3:27:66:9e:a8:4e:9c:
         d0:50:b2:43:34:c5:55:44:79:e8:6d:6b:3a:53:19:bc:9c:e3:
         7e:e8:c0:30:10:c4:5d:91:12:ca:a3:a9:2e:91:7c:81:2c:80:
         97:7c:e9:02:14:f6:cd:7a:13:39:83:d9:99:97:33:27:6a:61:
         a3:94:32:0e:52:62:18:d4:31:ab:4e:1e:f0:32:ef:90:c8:dc:
         8c:77:14:c0:e3:03:51:17:ce:6a:f0:90:02:13:18:78:6a:b3:
         ab:83:cc:9a:11:91:f4:ea:e0:c1:9f:46:b8:3f:a3:f9:67:fc:
         9d:91:1f:a5:c5:1b:d9:18:ce:12:9b:76:56:e3:17:0e:84:01:
         1c:25:88:4d:60:8d:1e:b7:91:9e:c0:5d:e6:3d:29:fc:34:64:
         6d:64:e9:91:b6:7e:71:5f:e0:9f:69:15:57:3f:cc:68:2d:22:
         4d:67:28:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----