Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
File:                     FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft (raw, json)
Hash identifier:          gfaF3/XL6+jjMvaA4H3OFASTbnlpzQiLVL0a9+DciO0=
Subject key identifier:   48:99:03:99:3B:C6:D6:60:32:76:CF:78:78:3B:8E:72:70:EC:76:7E
Authority key identifier: 14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27
Certificate issuer:       /CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
Certificate serial:       04EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
Manifest number:          04DF
Signing time:             Thu 30 Jan 2025 23:49:55 +0000
Manifest this update:     Thu 30 Jan 2025 23:49:55 +0000
Manifest next update:     Thu 06 Feb 2025 23:49:55 +0000
Files and hashes:         1: FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl (hash: DxD4cYTt4+WVhLLPYSU22hn9VZwBdIbtt87m70q5OTk=)
                          2: AC58009E782A11EFA7DD8F7CC4F9AE02.roa (hash: QVvq8n67O4BwvE2m1nf05uYuzsM/8nQ/hW6OWK20q7A=)
                          3: C8900982059611ECB2896C55C4F9AE02.roa (hash: hg4ELKymdwHyn2QAAvtW6T2bJJMNtTNjpAlYq36iGfA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1259 (0x4eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
        Validity
            Not Before: Jan 30 23:49:55 2025 GMT
            Not After : Feb  6 23:49:55 2025 GMT
        Subject: CN=679c1023-feb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:9a:83:19:eb:5b:50:e8:6d:c4:74:d0:3d:
                    66:30:6d:07:10:ac:47:99:4d:2d:2e:26:39:76:4e:
                    41:c1:a4:16:36:99:d0:28:e9:31:b0:f6:33:ba:d5:
                    75:40:b3:b7:b3:d7:24:f7:83:aa:70:90:82:05:3d:
                    1c:8f:a3:94:43:dc:ee:80:80:08:08:71:be:0b:d3:
                    36:7e:79:0d:8f:75:21:10:6c:17:ff:bf:ed:11:5a:
                    95:d5:d5:fc:bc:6a:99:6c:ee:b8:27:f5:da:29:5c:
                    68:98:49:88:77:55:6e:5e:11:41:dc:e9:86:a9:1c:
                    b1:1f:2a:9f:f6:14:e5:a3:85:6f:58:e0:b9:6f:bf:
                    9a:50:fc:97:e6:b5:a1:94:64:08:18:29:10:84:b8:
                    c0:a2:0f:bd:6a:af:fa:c3:b5:84:ac:aa:07:74:5d:
                    cb:ae:aa:93:c0:06:64:78:11:81:50:6f:83:8e:c4:
                    b5:72:e4:15:0d:ae:7a:ea:7a:b0:71:9e:8b:31:70:
                    21:9f:74:97:3f:81:65:ec:4c:a8:fc:c4:33:8d:6f:
                    c6:6f:d9:5d:35:e3:09:a4:49:36:96:16:d7:ca:7f:
                    1c:38:c3:97:05:80:81:f9:57:af:8d:8f:73:3b:0e:
                    f9:09:b9:9f:55:b1:fd:7b:3c:74:b6:7e:be:08:9c:
                    fc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:99:03:99:3B:C6:D6:60:32:76:CF:78:78:3B:8E:72:70:EC:76:7E
            X509v3 Authority Key Identifier:
                keyid:14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:11:28:3f:1f:9a:84:a7:90:da:13:ae:3a:f9:cf:75:81:47:
         79:ae:88:25:8c:92:ce:28:2d:0c:f8:14:d6:37:5e:2e:8e:cd:
         7e:ce:90:ec:7e:c3:8f:12:39:29:1f:9c:3b:15:f1:fb:33:5e:
         4d:bb:41:4f:ec:ce:d6:6e:3a:1a:a7:a6:cd:d6:65:09:ef:79:
         98:e2:e0:68:a9:0e:ab:55:93:09:4d:7c:4d:95:c6:c6:7d:57:
         62:09:60:2c:82:ed:64:bb:fb:5d:9d:6c:b0:39:fd:1b:d1:44:
         74:f2:bb:1d:f0:22:31:34:ab:d1:3d:d1:25:fd:7f:79:d2:e1:
         cc:4b:3c:23:5a:45:3e:d0:f2:5b:ee:19:ca:51:3c:69:12:2a:
         c2:bd:6c:c4:92:26:e2:80:a2:a5:6e:de:fc:17:fb:b7:3c:ca:
         9a:47:87:32:97:04:52:74:2b:0c:bb:50:67:df:98:eb:4b:4b:
         31:67:99:e9:08:c9:3c:22:ac:ad:09:1d:89:b8:12:80:a1:bd:
         1a:fc:44:97:c8:98:55:94:c5:68:1a:1f:57:fa:67:45:38:1c:
         88:a3:36:44:a3:a9:b8:c7:bb:f6:3b:53:70:c1:69:82:ce:9d:
         48:87:d9:3d:48:4b:3e:e5:8b:9b:83:02:af:17:8f:a1:50:9f:
         11:50:c9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:47 2025 by rpki-client