Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
File:                     aUCPaxygKBZoPM5MCOAEkyUZRLI.mft (raw, json)
Hash identifier:          FUa/2n7Bv/2QrxyvIE+V04ip7dELgHqrBSp2LVL22QQ=
Subject key identifier:   15:26:C5:E1:B7:6C:C4:A1:60:CC:C1:A2:F6:1E:E3:3D:17:83:A4:A4
Authority key identifier: 69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2
Certificate issuer:       /CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2
Certificate serial:       09FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
Manifest number:          09E9
Signing time:             Thu 30 Jan 2025 20:01:19 +0000
Manifest this update:     Thu 30 Jan 2025 20:01:18 +0000
Manifest next update:     Thu 06 Feb 2025 20:01:18 +0000
Files and hashes:         1: aUCPaxygKBZoPM5MCOAEkyUZRLI.crl (hash: 5NQMpcDa1RUtUXEbp5LdAy/raI5Km30FQLiRZtMoUYM=)
                          2: EA7A8118DCCC11ECAFD2715CC4F9AE02.roa (hash: jYfYvo6c9Uctow0tEjbRvX1Vhcvx4MlD93YOip7bp2g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2554 (0x9fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2
        Validity
            Not Before: Jan 30 20:01:18 2025 GMT
            Not After : Feb  6 20:01:18 2025 GMT
        Subject: CN=679bda8f-1fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ae:5b:1a:b1:70:e8:9a:2c:c6:78:ee:c7:6b:
                    14:87:b1:48:89:f8:e5:37:31:99:00:06:c0:ab:28:
                    43:f7:19:c2:25:cb:11:e1:23:cc:98:93:78:48:7e:
                    ae:6a:9e:fb:c6:c6:d3:ef:4a:84:91:54:55:22:a2:
                    aa:f7:31:f6:64:96:9d:0c:f4:a7:39:f0:33:11:3b:
                    b5:ff:de:d6:da:64:d4:59:8f:21:a2:2f:fe:63:f2:
                    93:db:fd:84:7f:b4:d6:4f:6a:b8:87:50:03:97:29:
                    b8:d5:16:13:3d:ef:2c:99:ba:1f:84:1d:21:20:7d:
                    fb:b8:eb:63:36:7a:dd:fb:f2:d9:44:2e:27:1f:11:
                    f7:30:13:5f:78:8a:d3:4b:1c:58:dd:0f:3e:c2:77:
                    55:d4:21:3e:52:fc:0f:3b:fe:6a:84:a7:21:66:65:
                    04:f2:71:85:52:ba:b4:81:72:28:8e:33:81:9c:c2:
                    a7:7d:0f:ec:3e:f2:ab:23:3f:ca:46:3d:7e:14:14:
                    e7:95:8b:f6:d6:45:cb:0c:9a:a6:33:0f:0f:a1:83:
                    b3:ad:3c:79:ab:1f:0e:b0:28:84:89:18:66:20:2c:
                    26:66:37:ac:da:8c:f4:4c:b6:f7:57:63:f0:01:d6:
                    82:d7:b5:11:92:7e:fd:7a:c9:63:5b:a0:78:af:a6:
                    22:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:26:C5:E1:B7:6C:C4:A1:60:CC:C1:A2:F6:1E:E3:3D:17:83:A4:A4
            X509v3 Authority Key Identifier:
                keyid:69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:3a:46:f7:78:5e:bf:8b:18:6e:ff:d2:ee:0e:3e:ec:e3:ed:
         48:45:d6:c2:48:55:c6:d8:40:0e:ca:c6:b8:65:9a:1b:2d:32:
         2c:45:25:60:1b:cf:99:18:be:93:99:ad:52:5b:bf:1f:09:bf:
         41:96:d8:39:a2:39:b8:1a:d1:4b:64:7b:ee:ba:19:7d:77:8f:
         5f:74:c8:07:97:6e:98:89:fe:3a:28:2b:ca:6f:bb:cb:9b:a2:
         85:6a:f6:b6:d2:28:d0:82:b6:29:4e:a7:12:be:f3:6c:de:ba:
         cc:ed:0b:5d:4c:2c:50:42:26:15:b6:00:6b:46:04:95:67:2f:
         2c:ea:d4:a3:d0:ca:22:37:45:24:e7:41:fe:64:3d:12:04:f0:
         27:82:f6:b4:8c:48:bc:84:45:c0:0a:f2:2b:98:f3:f5:23:1b:
         9d:50:91:63:79:c8:d6:08:fe:1c:b2:c7:10:10:26:91:ac:1b:
         5b:46:06:e1:cb:77:a9:d8:d9:41:b1:24:ec:7f:4e:c9:03:5d:
         85:c5:86:67:f5:c4:a3:8c:bd:1f:84:c4:12:e5:95:8e:bd:dd:
         bf:f9:46:fa:aa:12:ad:97:3e:b2:48:8c:50:22:b5:2b:ef:bf:
         75:2d:da:df:40:bd:c3:3e:4a:e1:d6:78:a2:4c:08:6f:38:51:
         dc:d4:89:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:28:59 2025 by rpki-client