Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
File:                     1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft (raw, json)
Hash identifier:          4eNEfjKWenzupy7qFJCB7DbSvq4jUCKbYAQ7k8uZ/eg=
Subject key identifier:   25:7D:4C:97:EE:1A:09:EE:A6:A0:03:CC:74:8E:B2:6A:1C:9C:01:C6
Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59
Certificate issuer:       /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
Certificate serial:       0185
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
Manifest number:          0626
Signing time:             Thu 30 Jan 2025 23:59:24 +0000
Manifest this update:     Thu 30 Jan 2025 23:59:24 +0000
Manifest next update:     Thu 06 Feb 2025 23:59:24 +0000
Files and hashes:         1: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl (hash: jSPtxzsAY5Oy/R0jQF4iVZrdKUtQeKidc3CgViA0V8E=)
                          2: 1B4BA08497A711EDA815F80AC4F9AE02.roa (hash: i3AC8vPuhzwp18lBIjdc3QexvCV8/oJkEtYwjXr5lB0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
        Validity
            Not Before: Jan 30 23:59:24 2025 GMT
            Not After : Feb  6 23:59:24 2025 GMT
        Subject: CN=679c125c-4d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:45:c6:bf:de:0b:29:5b:90:b0:af:e6:4d:2c:
                    73:81:f7:64:f0:10:61:3a:f2:9d:db:6e:23:26:d2:
                    0d:21:db:69:b4:91:a6:fb:3c:69:b3:38:54:dc:86:
                    ff:a3:ff:48:34:b5:a3:11:2b:45:33:5b:90:25:df:
                    a0:f6:0a:cb:5d:0e:f1:13:57:fe:f1:1c:41:fa:f0:
                    07:5f:d4:07:aa:57:ff:ea:df:9e:c3:76:01:d5:a4:
                    7e:ee:a5:de:a4:4c:cc:91:79:3c:51:a8:46:cb:4d:
                    12:b7:dc:25:2d:40:e3:55:26:04:b9:76:1f:c9:fb:
                    82:03:b0:f1:f4:eb:dc:ea:95:a7:be:c9:94:f1:1b:
                    07:17:53:d2:4b:5d:ee:f9:a2:e1:3f:ac:00:87:d0:
                    79:cc:b0:de:78:b1:93:1d:76:9d:97:c6:d6:ea:53:
                    a8:76:6c:f3:58:01:81:79:30:44:6c:5b:f2:b2:51:
                    ab:8d:e8:1a:9d:8d:67:d4:7c:33:dd:00:86:ba:dc:
                    f1:60:af:7c:fd:34:8d:bd:9c:e3:29:0e:d6:d8:51:
                    17:eb:10:4b:4d:75:40:cf:5e:8d:c6:c0:2a:84:d2:
                    be:a1:f4:54:56:99:ce:86:e2:da:9a:1c:36:05:bb:
                    38:7f:94:58:9d:71:ea:f4:9d:ca:6b:01:8a:00:cf:
                    7a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7D:4C:97:EE:1A:09:EE:A6:A0:03:CC:74:8E:B2:6A:1C:9C:01:C6
            X509v3 Authority Key Identifier:
                keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:04:0e:77:6a:b9:b6:3e:4b:9a:09:61:0e:b7:d5:4d:02:c4:
         71:6e:0f:41:a3:59:eb:fa:9d:9d:6f:ac:46:4e:22:6f:6c:9c:
         dc:34:9d:fc:92:a8:7b:8c:84:5a:63:54:7e:b5:01:28:ee:f3:
         80:38:09:2b:1e:cf:94:3f:b2:d6:f7:aa:d4:46:ed:50:94:d3:
         07:51:99:ab:88:6b:40:44:12:84:1e:15:48:ba:f9:24:a7:1b:
         ef:9d:9f:ba:b2:0e:bb:ac:78:52:62:c3:38:59:88:5e:c3:13:
         de:73:0f:e2:c9:85:6b:ce:e0:4d:a0:e0:25:22:d8:fa:d1:4a:
         7c:a3:2f:3b:29:2f:31:92:d3:37:71:60:c3:b9:16:54:fe:90:
         84:ab:d0:c3:05:26:94:b0:5d:3b:9a:6a:84:91:03:d4:78:0a:
         ed:95:00:44:18:a6:c8:17:d7:df:4e:dd:f6:60:71:47:ac:d5:
         23:25:3e:cf:4d:36:69:2f:fc:4d:4e:ce:9d:07:8f:49:8c:7d:
         57:46:c0:87:07:6a:ae:00:bf:70:d2:e4:de:1e:fb:9c:2d:fb:
         23:5d:55:96:2f:8c:06:0b:ae:4b:2d:1a:10:19:5b:1c:d4:ef:
         4c:1d:15:9f:1a:ce:91:b0:23:cc:34:b2:80:f8:ca:f2:0e:00:
         96:5a:2c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:26 2025 by rpki-client