Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft
File:                     2cYV0QtB5uVphlzKp_4oDRKOMRw.mft (raw, json)
Hash identifier:          qWixFLhf+xn6TDYsD84vqw5gBTfflqV0YYRLvi5WP98=
Subject key identifier:   48:FA:05:CF:A5:08:97:1D:10:25:AF:E4:89:67:19:8E:2C:D3:B8:A4
Authority key identifier: D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C
Certificate issuer:       /CN=A91293E9/serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C
Certificate serial:       0621
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft
Manifest number:          0616
Signing time:             Thu 30 Jan 2025 22:46:27 +0000
Manifest this update:     Thu 30 Jan 2025 22:46:27 +0000
Manifest next update:     Thu 06 Feb 2025 22:46:27 +0000
Files and hashes:         1: 2cYV0QtB5uVphlzKp_4oDRKOMRw.crl (hash: d5fyrLbIrMqlWk9TkEnynbZvWHk4uSSl859D+9a2D24=)
                          2: 1AC1982A8C6A11EB91832D52C4F9AE02.roa (hash: fSfAPi/bUi9k15IOKds7b6yXEktxoZjFwfG44RAp5IM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1569 (0x621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91293E9/serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C
        Validity
            Not Before: Jan 30 22:46:27 2025 GMT
            Not After : Feb  6 22:46:27 2025 GMT
        Subject: CN=679c0143-459b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8a:16:19:f2:ee:df:70:bd:49:2f:6c:67:39:
                    76:91:b9:84:b8:bb:b6:d0:5f:20:63:b6:ca:4e:ce:
                    db:22:a7:f5:1d:64:d4:75:41:89:27:96:d2:98:02:
                    e7:65:89:40:eb:8b:7a:e3:00:eb:fc:db:e5:95:a0:
                    18:29:89:32:07:be:c0:cd:05:5f:07:78:76:77:ca:
                    2e:02:16:a0:31:59:ce:a8:00:ec:20:98:a6:0a:0f:
                    fc:be:bf:be:5b:97:f5:1b:8d:fe:14:fc:3f:6d:26:
                    93:35:e4:9b:06:b5:13:06:94:e9:47:06:b4:40:a7:
                    0e:e2:ac:32:53:43:86:1c:51:38:b7:28:d6:cc:c2:
                    c3:43:03:55:ef:57:6b:04:04:0b:25:ae:d5:19:5c:
                    8b:f0:34:75:af:c6:f9:3b:e4:89:56:09:72:a0:1d:
                    1a:83:c1:10:8d:73:5b:4d:89:d4:e0:72:64:96:fb:
                    80:7c:ed:b0:1c:fc:5f:5b:02:97:20:5a:f1:73:55:
                    b9:9b:6e:8a:9e:5d:20:c8:06:54:42:8d:9e:85:b1:
                    db:37:66:0a:1d:80:80:70:64:64:a2:0f:97:a0:9a:
                    6e:4a:07:8e:c4:d3:33:ce:cc:c7:32:70:a7:a4:e0:
                    6f:be:9a:63:b4:7e:dd:0a:27:40:df:41:0f:8e:c5:
                    c8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FA:05:CF:A5:08:97:1D:10:25:AF:E4:89:67:19:8E:2C:D3:B8:A4
            X509v3 Authority Key Identifier:
                keyid:D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:7c:b3:43:57:9b:d3:9f:45:d6:9b:12:24:0d:4d:c6:ed:0f:
         f4:1d:d7:da:7a:90:4f:6e:39:52:dd:31:56:24:74:dd:e9:5f:
         0e:26:27:17:a9:98:79:b7:b0:60:2c:1f:8f:67:be:93:ef:08:
         ff:8c:8a:5f:96:9a:7f:ea:2f:aa:7a:4e:49:0d:1b:e8:75:86:
         f1:4f:f6:ee:04:8b:91:96:83:2d:bf:96:2d:ab:bd:e5:55:cd:
         29:2f:af:e8:07:0c:6f:4f:76:c2:5e:23:2e:47:97:a1:b7:79:
         21:c6:4a:63:61:d0:59:7f:15:1c:61:ab:cc:86:18:37:1c:94:
         bf:75:d8:9b:3e:01:b7:e2:cb:d7:f0:e2:43:79:d6:b6:2f:b2:
         9f:6d:22:03:2d:00:62:ed:b3:9b:63:f5:5d:a9:b9:8d:c8:47:
         5e:ec:80:f1:bb:d9:8d:9a:df:7e:64:04:40:d4:8a:c4:05:a5:
         41:45:a5:59:be:d9:5c:e6:f8:99:a4:39:9b:ab:6d:4b:eb:bb:
         36:47:41:fa:78:53:0c:f0:03:93:9b:ba:ce:1d:82:43:c1:49:
         4e:5d:5a:93:df:1e:ef:9d:32:e3:07:4e:ca:9b:89:4e:d7:01:
         d3:69:c5:f8:2e:52:88:3c:d3:91:51:02:36:bd:80:f1:10:6b:
         85:6c:42:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:18 2025 by rpki-client