Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
File:                     FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json)
Hash identifier:          6G/ILrxwOK8O1omKabPumgZkjTx8LpT9Cmi6xDf16Mk=
Subject key identifier:   52:97:DC:24:0C:C5:01:7C:2C:19:75:67:3E:CA:B5:1D:E6:A8:C9:9D
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Certificate issuer:       /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial:       0367
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
Manifest number:          0363
Signing time:             Fri 31 Jan 2025 00:59:33 +0000
Manifest this update:     Fri 31 Jan 2025 00:59:33 +0000
Manifest next update:     Fri 07 Feb 2025 00:59:33 +0000
Files and hashes:         1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: 6KoBZyuEEv5hqp9+TqdEkSOkBQuLxYlIgah+7RjJ/Jc=)
                          2: 2106E428992111EC99E0095AC4F9AE02.roa (hash: PcKJkGwaK4o171v3EBWrcFnHzSRmJYq7ZGQ7KxepW58=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871 (0x367)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
        Validity
            Not Before: Jan 31 00:59:33 2025 GMT
            Not After : Feb  7 00:59:33 2025 GMT
        Subject: CN=679c2075-c508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:de:07:46:1e:0e:66:96:9b:d7:c1:d8:d3:07:
                    f2:ff:4d:fb:9a:35:45:e6:0a:fa:f5:87:27:30:b2:
                    69:ed:4c:e9:3b:cc:4d:11:92:de:35:fd:87:19:5f:
                    a6:b4:09:7d:a1:6a:e8:ec:47:3b:c8:fa:80:4f:8c:
                    c4:d7:3b:3d:91:55:7d:ec:70:65:95:75:c1:bf:a6:
                    6f:77:9f:c5:9c:9e:4c:44:1e:d3:28:79:23:d9:06:
                    a7:ad:5e:e6:2c:a5:91:ab:45:7f:eb:0b:ca:3c:bc:
                    ac:f7:e1:ec:dc:ff:a3:ef:de:02:a9:7c:b3:4b:fa:
                    cd:fb:83:9b:e5:4a:c3:41:72:fb:3f:c0:57:be:d7:
                    f5:4f:80:eb:01:ee:99:8b:96:ad:96:b8:2c:5f:da:
                    c9:a2:74:e6:a0:35:00:f2:b2:74:ac:1e:e4:d2:a8:
                    09:d3:8f:10:cd:19:65:97:81:79:32:dc:9f:ff:8e:
                    56:2b:50:3b:72:bd:95:28:a6:c2:56:b6:04:17:0a:
                    29:4a:da:cd:d2:56:91:7d:a6:09:84:8c:5f:c1:24:
                    8f:2f:74:a8:fa:4c:fc:90:38:4a:ac:a7:e9:8b:92:
                    fc:82:fe:e0:54:f5:43:0e:1d:dd:8c:ba:32:59:fc:
                    6b:49:3d:1a:5f:08:c5:49:c0:01:cc:3c:ae:e3:32:
                    d1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:97:DC:24:0C:C5:01:7C:2C:19:75:67:3E:CA:B5:1D:E6:A8:C9:9D
            X509v3 Authority Key Identifier:
                keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f1:43:db:1b:eb:5a:a8:ad:6e:97:26:24:fa:35:a8:1d:a2:
         9f:12:11:cc:ed:58:f2:ec:79:6f:b0:a8:be:fe:d2:fa:a1:5f:
         e4:d8:3c:8b:2c:91:75:ff:d7:50:11:be:8c:32:d6:a7:16:11:
         41:06:cf:80:ba:90:6d:67:15:d5:74:9b:69:ed:1a:3b:d8:1b:
         86:cb:e6:93:2a:7d:f0:1d:8b:45:98:fd:77:50:26:19:35:29:
         27:cc:1d:5d:35:61:c3:cb:e1:40:90:68:0b:38:6e:ea:7e:bf:
         4a:3c:a9:e6:5c:c8:1e:ac:25:f8:54:8a:6d:c5:63:4d:bf:a1:
         de:e7:81:3e:3d:7f:e4:75:00:73:2f:47:4a:32:0e:fb:14:72:
         f7:11:3d:28:ea:65:ce:89:d9:f6:95:29:7d:d8:b9:11:5c:55:
         8b:3e:30:7d:4b:20:59:5b:cb:eb:3b:93:f3:48:c1:24:eb:17:
         fa:a7:68:fd:0a:04:e9:6c:a5:a0:47:ed:fb:93:7d:c1:15:f0:
         b4:f2:dc:83:d1:ce:56:af:ac:e7:9d:66:26:77:87:0b:97:3a:
         12:07:da:9d:8b:f2:44:7b:0e:45:09:4b:ce:64:4f:2c:e0:ec:
         96:70:81:48:06:54:62:44:e1:2c:88:66:9d:24:3c:17:e9:a5:
         d7:f4:41:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:23:01 2025 by rpki-client