Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft
File:                     kSlbu3W_quuVMbObNux1Id3jDWM.mft (raw, json)
Hash identifier:          xFmm/l+QaXbR+ojGV1JUrEmaTt0l1Mdgc74ddshhJPg=
Subject key identifier:   67:87:3F:69:30:60:D6:8D:6F:0F:78:E5:4A:C8:1D:E8:EB:81:46:CE
Authority key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63
Certificate issuer:       /CN=A911D9B2/serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft
Manifest number:          F7
Signing time:             Fri 31 Jan 2025 04:41:28 +0000
Manifest this update:     Fri 31 Jan 2025 04:41:27 +0000
Manifest next update:     Fri 07 Feb 2025 04:41:27 +0000
Files and hashes:         1: kSlbu3W_quuVMbObNux1Id3jDWM.crl (hash: F0A5VfnOr+TYIdFgXLLEebmoQp8l4hr0zBoZKuRbHl4=)
                          2: 11A28878915611EE83F61C41C4F9AE02.roa (hash: PDLab9I2VoJXocP3omeTp4+5FxlvzesQ2sG877OCrkk=)
                          3: 59962840D01911EE96596B16C4F9AE02.roa (hash: jM6outMgdpJ44HUHhOOUfnOx+r280G0rdmU4B0AEX90=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D9B2/serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63
        Validity
            Not Before: Jan 31 04:41:27 2025 GMT
            Not After : Feb  7 04:41:27 2025 GMT
        Subject: CN=679c5477-7081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:9b:38:76:ea:e4:08:5d:6b:2b:09:0c:55:
                    22:86:6e:50:8b:fa:51:eb:47:7b:1f:56:c2:3e:89:
                    d0:c4:21:32:be:d6:ce:b8:03:30:76:9e:d0:d7:63:
                    dc:c4:87:59:28:bc:60:f6:40:63:66:b1:b5:15:f6:
                    92:38:18:0d:98:2a:d5:7e:d2:d5:7d:f3:05:83:7c:
                    17:e6:48:f0:93:dc:ff:f2:97:d6:9f:3b:dd:46:47:
                    82:44:85:ae:4b:42:a5:bc:1e:0a:5c:df:e3:2c:e6:
                    ba:a9:28:cc:ba:d2:9c:bf:94:18:8f:15:96:f0:1f:
                    bf:71:33:41:f8:45:b0:f4:c7:26:c7:ce:25:6e:a9:
                    4c:61:e7:3f:57:3e:62:c0:68:d5:d9:2f:fd:2f:8b:
                    d7:d5:8e:38:03:49:a0:24:42:17:9d:29:a1:96:a7:
                    b0:30:65:cf:55:4e:ff:e2:b9:cc:12:58:b0:8b:3b:
                    51:77:95:1e:b7:45:15:2a:72:64:56:2e:5e:5d:82:
                    44:f2:c8:aa:a9:ed:40:f8:87:a4:f2:d6:25:00:20:
                    cc:07:b9:4d:31:78:a0:8f:9d:e3:4a:f5:48:8d:9c:
                    6b:64:81:80:f0:59:b1:a6:87:65:c7:8b:d8:7d:b2:
                    4d:f0:31:8f:76:8b:22:fb:5b:29:29:5b:93:bf:24:
                    9d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:87:3F:69:30:60:D6:8D:6F:0F:78:E5:4A:C8:1D:E8:EB:81:46:CE
            X509v3 Authority Key Identifier:
                keyid:91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c0:5e:a9:02:83:de:5c:e2:b3:d2:71:22:f3:60:3b:50:b5:
         aa:40:55:c3:f2:49:50:db:b0:e7:6d:1f:d5:3a:5b:d8:a6:1c:
         17:8a:3c:8d:ad:56:f1:58:c6:77:b7:77:46:ac:ad:4d:dd:cd:
         da:4f:d6:09:c3:6b:05:15:b7:54:b5:81:db:61:7a:d8:44:55:
         f9:5e:2c:54:35:df:66:5d:c3:5f:70:1c:c5:a3:56:f5:1a:39:
         0b:e6:8d:0a:b9:20:fc:2b:57:48:2e:07:f5:23:42:74:33:f1:
         b9:f9:81:33:ba:0b:8f:1f:cf:51:5d:4d:cb:90:d8:d3:c6:62:
         3c:83:29:95:f5:62:49:93:48:f7:c1:0d:d8:f0:82:02:7a:1e:
         53:70:ff:b3:0b:de:29:0e:ba:f3:0f:56:84:15:6d:ee:5a:28:
         aa:76:7d:d1:ed:f9:e2:bb:48:9b:aa:f4:56:6f:72:ce:61:33:
         51:4f:10:79:75:f7:9e:e7:41:b7:98:f2:7a:89:a5:14:0b:b8:
         d6:11:dd:7a:f4:47:12:d7:2c:cf:10:78:28:a1:4f:de:ad:43:
         14:f6:55:73:26:bc:21:b0:30:21:30:a8:93:95:e5:99:38:2a:
         09:77:f2:fd:6f:5f:5d:9f:1c:0d:cc:f4:5c:35:60:b9:75:94:
         5b:1e:bd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:49:50 2025 by rpki-client