Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft
File:                     RtfjskJlD3X4XEWBNYWNzYyZwgM.mft (raw, json)
Hash identifier:          btwKhqi8n5TZYQvpgHwPhl3KE92Iu328P+U+ggetPGw=
Subject key identifier:   D0:46:FB:20:62:6A:33:32:20:86:BA:9D:89:54:C9:D2:DB:90:A5:DC
Authority key identifier: 46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03
Certificate issuer:       /CN=A91F3989/serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203
Certificate serial:       BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft
Manifest number:          BB
Signing time:             Sat 29 Mar 2025 05:17:28 +0000
Manifest this update:     Sat 29 Mar 2025 05:17:28 +0000
Manifest next update:     Sat 05 Apr 2025 05:17:28 +0000
Files and hashes:         1: RtfjskJlD3X4XEWBNYWNzYyZwgM.crl (hash: u+cQhXjcErsKfEagm5OG03EsQuKPAbNFO99FZdcYcDs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3989
        Validity
            Not Before: Mar 29 05:17:28 2025 GMT
            Not After : Apr  5 05:17:28 2025 GMT
        Subject: CN=67e78268-2354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:0f:73:cb:f0:68:c0:fb:b1:67:0c:71:bf:
                    f0:8e:0c:26:97:5c:bb:3a:5f:47:12:b0:32:ee:38:
                    94:8f:c7:73:9b:e0:a7:be:07:b3:5b:9c:d3:3f:7a:
                    00:0e:f2:b8:f6:13:46:a9:60:b3:15:ea:f4:99:6e:
                    e6:24:23:53:17:f2:f8:fc:d3:8e:96:c3:89:b7:b8:
                    15:b2:e2:1e:e0:50:84:19:a6:98:c2:4f:09:dc:ed:
                    1a:29:c2:b6:b0:de:20:6b:4e:71:b4:c0:69:0e:6a:
                    0b:a8:ee:26:62:3a:56:4e:fc:25:55:95:dc:3f:f7:
                    c3:32:a8:70:bf:c3:de:96:9a:de:71:26:80:45:5e:
                    cd:57:95:31:c9:81:ec:b2:26:82:08:4a:b8:85:9f:
                    0d:b2:f8:2a:84:e9:c5:e5:e5:7e:90:a9:5e:ce:0a:
                    c7:b4:e3:a8:30:56:a4:4d:a4:da:c8:1b:a5:70:2b:
                    ec:39:b1:98:e3:c2:ee:9a:4e:2d:6e:af:ba:d9:50:
                    0b:79:c8:90:b9:f0:04:5d:9f:79:8c:ef:bc:fb:13:
                    a8:05:0d:9c:35:27:fe:f5:47:55:df:94:5e:ed:46:
                    e0:c1:1e:90:9d:79:e9:17:66:87:60:12:91:03:02:
                    52:a3:a4:78:6c:1b:ba:f8:c1:15:ff:7b:a3:04:fb:
                    61:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:46:FB:20:62:6A:33:32:20:86:BA:9D:89:54:C9:D2:DB:90:A5:DC
            X509v3 Authority Key Identifier:
                keyid:46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:c3:ba:5f:e6:c2:f4:ce:5c:0e:78:b7:0d:86:72:3b:42:8e:
         be:fe:d3:f7:75:cf:f3:fc:1f:d0:af:63:57:45:c2:e2:9d:a3:
         ea:6c:ad:62:31:c4:a9:14:22:61:c7:4d:ad:80:a9:98:50:8f:
         0b:34:08:a2:48:b1:5c:a5:6a:87:63:26:e6:17:a2:e1:5c:8f:
         aa:66:7d:fd:91:74:8e:ad:47:c0:e4:bc:ab:dc:3b:00:20:1b:
         79:81:95:c7:b8:8b:b0:bd:2f:db:d3:d6:ac:d1:b5:6c:44:e3:
         f2:42:23:77:54:f5:3c:1c:cf:b6:5d:c3:02:2e:71:23:67:34:
         80:a6:3f:0f:1b:1c:b4:40:c3:24:a7:ee:77:3a:a0:65:a4:d7:
         5c:0f:8a:5f:f0:f0:6c:9b:ac:05:12:d6:0e:10:9c:c1:4b:2a:
         db:2f:9c:29:5c:c6:48:6b:fa:e5:cc:71:9b:b3:cc:fb:8c:ed:
         7a:1a:ba:b6:40:59:74:c9:b6:79:13:ff:26:4e:d6:fe:0b:dc:
         49:87:aa:48:cf:50:5b:6f:88:79:65:3d:e4:cd:ee:8a:71:c3:
         39:27:0e:77:34:9d:57:f0:8f:45:8d:5f:f9:71:c0:d7:5a:cf:
         1f:13:ff:f0:99:2e:3d:fb:e2:6e:b4:b2:1a:24:fa:0b:2f:7c:
         00:10:8a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:06:19 2025 by rpki-client