Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
File:                     NJajCV1HiwJuR1VeusUdjgorO5Y.mft (raw, json)
Hash identifier:          BjKq/BILkueu68FNkqmM0JgDt6vFQLcncClmBVC5SYY=
Subject key identifier:   EA:7F:FF:AC:EF:96:2B:6F:78:44:6B:AE:25:AD:56:8D:F2:49:DE:56
Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96
Certificate issuer:       /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
Certificate serial:       0547
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
Manifest number:          0543
Signing time:             Thu 30 Jan 2025 23:29:06 +0000
Manifest this update:     Thu 30 Jan 2025 23:29:05 +0000
Manifest next update:     Thu 06 Feb 2025 23:29:05 +0000
Files and hashes:         1: NJajCV1HiwJuR1VeusUdjgorO5Y.crl (hash: TsBU2bMMRZEpDBUEacWeNTxV370qU2ybMWk4b6ayCxM=)
                          2: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (hash: FpiXZKAhTjkDCch/pIRU9MHgJD8fPUreDGZSqo9JNCY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1351 (0x547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
        Validity
            Not Before: Jan 30 23:29:05 2025 GMT
            Not After : Feb  6 23:29:05 2025 GMT
        Subject: CN=679c0b42-f6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:93:28:f2:c7:9d:ea:60:89:99:a7:cb:5c:a9:
                    09:73:29:28:b9:f3:c8:6c:00:0f:27:21:1e:50:46:
                    84:44:01:81:7f:60:0b:cf:bc:c2:6d:5d:11:98:e9:
                    62:d3:af:ac:1b:5f:4d:a6:f3:8e:e1:69:e9:f0:77:
                    f6:f9:b4:27:c1:ca:13:08:72:fe:fa:bb:5d:fd:88:
                    c8:89:18:80:66:60:c6:fd:5c:38:5f:44:6a:cb:75:
                    55:2f:61:8d:01:d7:da:0d:7a:61:ce:c6:a9:08:ef:
                    0f:1d:88:e3:ec:3e:bd:10:9a:3f:23:27:0a:cd:f1:
                    1b:ec:fc:31:0d:ad:b5:6a:31:ee:70:3e:d7:17:88:
                    c2:c9:51:8e:7c:5d:b5:10:0a:ef:72:2a:22:b9:a5:
                    b2:af:6f:84:8e:ef:8e:3b:3b:69:31:69:64:81:fb:
                    48:5e:22:3e:70:c7:78:f3:5f:21:7b:ea:86:95:fe:
                    82:08:87:5f:22:2e:97:b8:72:f1:4d:52:89:43:3c:
                    17:d7:65:25:4d:a1:60:2b:41:92:a5:10:fe:0d:76:
                    87:5c:dc:12:ab:15:1e:54:52:dc:45:ec:3b:9c:60:
                    98:3b:8f:2c:bb:c8:53:be:29:ec:bb:1b:7c:d6:60:
                    71:d7:23:16:5f:3b:67:ee:ec:aa:d4:6e:5b:b2:8d:
                    ab:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7F:FF:AC:EF:96:2B:6F:78:44:6B:AE:25:AD:56:8D:F2:49:DE:56
            X509v3 Authority Key Identifier:
                keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:9e:48:9e:70:12:48:c0:a6:e1:dd:1e:97:e0:63:02:61:f8:
         a8:c0:4b:11:f1:80:a7:12:8c:5a:06:3d:45:13:0b:6c:27:78:
         77:62:cc:be:7e:7a:67:22:10:3b:ae:44:e0:3f:68:d0:cf:12:
         c6:f0:27:35:20:89:87:f0:96:9c:58:35:de:35:bd:90:84:ca:
         d9:3e:c8:8b:5e:c0:70:d7:1f:f1:e1:0a:9c:cd:b0:16:81:88:
         e7:23:96:2f:17:33:7e:1f:64:db:6c:f1:c9:40:82:e9:3e:97:
         d6:61:5d:91:e0:e0:2f:c2:d3:4e:52:af:a3:26:8e:47:e5:66:
         94:6f:b3:e9:2b:74:f0:76:2b:bd:27:1a:d9:6d:74:40:5f:80:
         6e:49:74:57:bb:28:86:c3:bd:e3:4a:ce:23:27:d2:de:8a:cf:
         27:a4:a6:8a:3b:c8:0f:a4:7f:a7:23:93:f0:fb:b3:dd:3e:f7:
         57:8b:1b:4f:a0:68:2a:71:bc:a0:ec:14:b1:d9:48:d4:a1:ee:
         0d:4a:74:8c:96:cb:db:16:25:97:2f:52:c8:19:bb:e6:ac:0a:
         11:47:a2:49:cc:65:50:4d:5e:f1:22:3c:1a:cd:13:07:89:44:
         8a:4c:81:5a:3c:24:1f:c9:c0:6f:62:4c:72:25:f4:58:05:e4:
         10:69:6d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:35:05 2025 by rpki-client