Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft
File:                     5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft (raw, json)
Hash identifier:          YfmHFMKIKnYALr7KxT7OAM6J1/48JFDrnDUJiFlnhjw=
Subject key identifier:   A5:01:6C:67:E7:9C:30:26:EF:BE:54:2F:3D:1E:E2:FB:98:D4:09:7D
Authority key identifier: E6:A5:4B:AD:7D:17:6E:44:47:A9:E9:4F:24:48:03:27:C1:B4:0C:9E
Certificate issuer:       /CN=A91293F4/serialNumber=E6A54BAD7D176E4447A9E94F24480327C1B40C9E
Certificate serial:       094F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft
Manifest number:          0948
Signing time:             Thu 30 Jan 2025 20:19:03 +0000
Manifest this update:     Thu 30 Jan 2025 20:19:03 +0000
Manifest next update:     Thu 06 Feb 2025 20:19:03 +0000
Files and hashes:         1: 5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl (hash: Q29xVeFqBoY01Niu+kGaK0G8M7UHRXhUSjDhXx0TBQk=)
                          2: 3E730FA28E8111EAB2038B6BC4F9AE02.roa (hash: daPv+SX5G+t+lBu/9eE3wzv1kdiunichnFivR9qNxI4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2383 (0x94f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91293F4/serialNumber=E6A54BAD7D176E4447A9E94F24480327C1B40C9E
        Validity
            Not Before: Jan 30 20:19:03 2025 GMT
            Not After : Feb  6 20:19:03 2025 GMT
        Subject: CN=679bdeb7-13af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:59:19:14:2b:26:2e:c1:57:61:3e:a1:9a:e5:
                    c5:43:88:04:97:0d:83:07:17:fd:cd:65:77:8b:23:
                    03:ca:ee:6b:28:c0:ba:1f:ce:64:a3:49:d6:b2:fb:
                    80:87:a6:b1:e6:6f:25:36:c9:a0:44:9e:2c:22:b1:
                    2b:0b:50:82:ab:7e:03:5d:de:71:7f:2c:63:3d:b0:
                    00:ff:3d:42:88:30:a2:0c:5d:7d:6f:42:a8:57:eb:
                    b6:f5:f5:00:c2:0f:26:79:fc:07:87:34:5a:9e:90:
                    55:e2:63:3c:b9:d8:92:1b:b0:85:ab:d8:72:09:d4:
                    16:47:38:ce:28:80:0e:d3:37:6f:75:90:8a:b8:e8:
                    b5:42:8d:39:32:b0:4c:56:89:22:f4:03:72:07:7f:
                    7f:aa:fa:e2:cd:e6:b0:4a:ff:30:94:05:94:d0:08:
                    57:06:a4:82:65:3a:2c:41:44:fc:e2:b3:28:68:6d:
                    92:84:fe:06:6c:21:b9:af:24:20:8e:fe:d7:8e:be:
                    d5:0c:b2:3a:42:1c:d1:27:1b:9a:1b:c0:42:ab:84:
                    be:bc:49:61:dc:35:93:4f:07:c0:1e:b0:cd:39:bb:
                    7c:8b:5c:37:38:bc:5a:c9:46:69:d3:26:6c:c3:2c:
                    7e:f1:df:e5:78:45:e2:29:c5:01:cd:c5:9a:b3:b4:
                    5e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:01:6C:67:E7:9C:30:26:EF:BE:54:2F:3D:1E:E2:FB:98:D4:09:7D
            X509v3 Authority Key Identifier:
                keyid:E6:A5:4B:AD:7D:17:6E:44:47:A9:E9:4F:24:48:03:27:C1:B4:0C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:be:f8:e4:f1:a3:cd:3b:62:e5:d8:08:51:02:e6:b3:2f:64:
         bd:54:6c:08:e4:3e:b7:1b:c9:39:fb:5c:58:f9:17:8f:b2:69:
         3d:8f:99:fa:f2:63:fd:24:9f:56:d1:48:ab:5d:0e:01:00:60:
         a6:7d:ed:bf:f3:3b:8a:e5:09:1a:32:86:f1:cc:71:05:f8:28:
         ef:cb:0f:d8:f4:0b:8a:83:38:a8:1f:15:aa:10:ef:fc:af:56:
         2a:d8:84:c8:ec:51:5e:6f:f0:05:47:31:4c:f7:f8:2b:7a:74:
         3e:dd:7c:91:39:bc:98:45:49:02:4c:94:84:89:34:66:4b:67:
         d9:91:93:da:9d:60:12:41:78:e6:fb:0b:3d:65:c0:9c:d7:f5:
         ee:d9:d6:6a:86:1a:ee:84:b3:c9:2b:a4:ae:e4:b6:d7:e6:2a:
         ae:0e:e0:3d:0a:99:64:59:cb:e1:83:d0:14:1c:87:b2:a9:72:
         93:a2:20:9d:3b:7a:c8:60:02:97:57:36:1a:95:52:43:d8:f2:
         2e:20:62:01:6d:04:cf:89:9e:51:8e:42:ce:25:ea:0f:af:14:
         21:0e:68:04:f8:3e:7a:66:8e:9b:48:ee:ac:3e:0a:81:ad:ea:
         6b:92:95:d4:4a:d2:65:50:3a:6f:f1:e3:7c:75:ba:5e:3f:8b:
         38:83:13:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:15:21 2025 by rpki-client