Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F577C/58DB98C6568C11EC826B2F1EC4F9AE02/rIkZDTdnL9a0Ix0T_Hf7Jp_Qdqg.mft
File:                     rIkZDTdnL9a0Ix0T_Hf7Jp_Qdqg.mft (raw, json)
Hash identifier:          GE/va2jyQqaCguYDR6QZq6M/DwKN72VeGzZ0jEZLjcc=
Subject key identifier:   81:6A:88:90:55:C8:38:4A:F2:52:FC:91:07:F4:90:14:1A:8F:AF:53
Authority key identifier: AC:89:19:0D:37:67:2F:D6:B4:23:1D:13:FC:77:FB:26:9F:D0:76:A8
Certificate issuer:       /CN=A91F577C/serialNumber=AC89190D37672FD6B4231D13FC77FB269FD076A8
Certificate serial:       0403
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIkZDTdnL9a0Ix0T_Hf7Jp_Qdqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F577C/58DB98C6568C11EC826B2F1EC4F9AE02/rIkZDTdnL9a0Ix0T_Hf7Jp_Qdqg.mft
Manifest number:          03FF
Signing time:             Mon 30 Dec 2024 02:13:24 +0000
Manifest this update:     Mon 30 Dec 2024 02:13:23 +0000
Manifest next update:     Mon 06 Jan 2025 02:13:23 +0000
Files and hashes:         1: rIkZDTdnL9a0Ix0T_Hf7Jp_Qdqg.crl (hash: WFePs4CTsnS/ZrtkAMFlxGwrMbkhEIQ1tWoI2nnm6BM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1027 (0x403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F577C
        Validity
            Not Before: Dec 30 02:13:23 2024 GMT
            Not After : Jan  6 02:13:23 2025 GMT
        Subject: CN=677201c3-4f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:94:0a:86:f1:be:d2:58:19:96:49:a0:5a:f2:
                    67:09:fb:ac:25:ab:7b:23:24:bd:ff:cf:c1:bd:78:
                    b3:03:d9:fc:56:20:68:18:bd:0f:a0:18:75:7a:38:
                    a0:df:24:32:26:b2:da:03:72:15:c2:bd:ac:18:85:
                    77:ac:95:aa:21:d7:6f:e5:01:a6:fc:3b:2c:28:8f:
                    3f:d7:2f:29:27:e2:d6:de:c1:ce:6a:34:98:28:3d:
                    53:5c:b6:2e:93:3a:81:50:33:33:08:ec:7c:b6:6f:
                    b1:d5:a0:c1:f8:31:31:34:95:b6:3d:b0:3b:74:2e:
                    e0:ce:80:82:fe:97:5c:41:2f:2a:75:03:00:d5:1c:
                    75:1c:ad:7b:25:be:a3:5f:e7:df:2c:b0:2f:2b:0d:
                    7f:93:f4:07:32:ab:55:a6:51:3a:0c:93:58:66:14:
                    f5:d8:16:b7:d7:fe:b7:b7:72:01:24:dc:dc:da:79:
                    ed:a7:0f:08:55:1e:78:e7:f0:7e:4a:65:7c:ba:41:
                    15:a9:ad:52:0e:00:e3:55:75:05:e1:91:a3:11:c4:
                    5f:a1:03:0c:a5:09:1e:24:38:1c:42:a4:35:45:fa:
                    2f:f6:7c:91:3f:93:2b:69:ca:54:87:b4:c6:67:4d:
                    a6:32:4b:f6:70:56:74:30:62:58:63:b3:a7:8b:32:
                    7a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6A:88:90:55:C8:38:4A:F2:52:FC:91:07:F4:90:14:1A:8F:AF:53
            X509v3 Authority Key Identifier:
                keyid:AC:89:19:0D:37:67:2F:D6:B4:23:1D:13:FC:77:FB:26:9F:D0:76:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F577C/58DB98C6568C11EC826B2F1EC4F9AE02/rIkZDTdnL9a0Ix0T_Hf7Jp_Qdqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIkZDTdnL9a0Ix0T_Hf7Jp_Qdqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F577C/58DB98C6568C11EC826B2F1EC4F9AE02/rIkZDTdnL9a0Ix0T_Hf7Jp_Qdqg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:36:50:b0:23:a2:8a:a0:46:cd:11:c3:7f:01:5d:89:20:ce:
         ef:91:a8:98:db:98:1c:dd:b6:77:ee:fb:cc:04:01:7f:01:dc:
         ae:a6:a3:3a:10:f3:97:26:34:84:8b:b6:0d:0c:e1:48:5a:3b:
         3c:6f:3d:44:e7:a0:70:72:ee:01:72:a8:01:3e:7c:7c:d8:1d:
         a1:76:b9:b5:98:ab:f6:9c:70:c9:16:3d:0c:6d:cd:c7:58:ff:
         96:98:8b:cb:f4:b5:01:e9:2c:e5:b5:2e:29:1b:40:dd:d7:07:
         25:8e:31:d9:52:00:fa:35:04:9d:cd:4b:37:77:e0:6f:64:24:
         09:bb:90:59:20:c9:96:9c:39:20:3b:88:2a:cf:e1:02:39:04:
         2e:4b:37:fd:60:e4:2a:3e:28:dd:aa:9f:03:c7:d2:da:78:61:
         14:b5:56:71:66:ba:ab:b3:e4:d5:8a:c2:20:57:70:55:e9:9e:
         84:f9:37:b6:27:5c:1b:6d:91:93:72:a8:b9:37:5d:bb:c4:35:
         46:76:ee:52:14:6f:b6:eb:61:3d:62:2d:2a:77:ba:47:0a:9e:
         68:b8:50:20:81:ce:50:67:9b:a8:e9:92:a8:6d:7b:e3:01:48:
         d5:18:a5:ed:a0:28:18:ad:06:2e:92:4a:a7:4f:5a:86:9e:f7:
         02:49:d4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:54:26 2025 by rpki-client