Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
File:                     mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft (raw, json)
Hash identifier:          u+U1WOIdmQ6RiXCUwk63GYWxklkKbHiVzKOWBN2/zJM=
Subject key identifier:   16:43:FA:62:48:16:21:9F:91:EE:78:0D:55:19:7C:A0:68:8E:88:F3
Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
Certificate issuer:       /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Certificate serial:       06A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
Manifest number:          0699
Signing time:             Thu 30 Jan 2025 22:11:42 +0000
Manifest this update:     Thu 30 Jan 2025 22:11:42 +0000
Manifest next update:     Thu 06 Feb 2025 22:11:42 +0000
Files and hashes:         1: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl (hash: 83nzUPAr3myn2wE2n/swZoXuekv0n3a0cokrj0qFed4=)
                          2: 591B98DE548711EB89568B65C4F9AE02.roa (hash: T5q+eImeXNp91yECBvJenA539SIQtdXjJLj9KEHZwJA=)
                          3: 59BC86E0548711EB89568B65C4F9AE02.roa (hash: Xg3MEPCbPkaEDSePRNK0YQVKPDagtg02uBwUqJ223/w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1701 (0x6a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366
        Validity
            Not Before: Jan 30 22:11:42 2025 GMT
            Not After : Feb  6 22:11:42 2025 GMT
        Subject: CN=679bf91e-f257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:a8:02:4d:6e:d0:36:fc:f8:2f:28:64:ac:6f:
                    5f:ff:bf:69:55:6b:7c:2a:6d:50:19:f7:c3:38:cc:
                    e9:d6:96:9d:d9:71:91:21:cc:cf:47:86:0b:77:62:
                    86:34:64:06:54:74:21:ca:40:39:46:6b:b4:73:de:
                    7e:a7:07:be:82:17:11:9a:5d:dd:33:c4:98:0d:cf:
                    8f:c3:3f:14:fd:30:f3:ab:95:45:8b:02:c2:d8:8e:
                    e8:93:c1:84:ae:f5:9c:f4:fe:75:8a:49:56:a5:54:
                    88:dc:4b:59:e6:27:ca:dc:16:86:34:9c:26:a3:d1:
                    81:44:d5:ea:f4:a7:e6:7e:e4:3c:43:8c:4c:a6:11:
                    7c:22:00:08:e6:92:8d:c4:54:15:41:c7:c3:10:4b:
                    e1:8d:7d:ca:36:0c:04:2d:83:44:3f:1e:44:c9:e2:
                    f2:53:69:ed:38:1b:af:4a:fb:37:3f:20:6d:37:30:
                    97:ab:3d:a0:23:42:ab:a3:16:ad:a1:bf:5d:c9:4b:
                    5a:27:e5:1b:72:8a:10:cf:71:1e:92:43:9d:90:ac:
                    1f:78:c6:a4:98:89:1e:0f:45:36:12:68:5e:3e:5a:
                    bd:75:18:69:36:02:18:93:67:25:c5:6e:14:c0:0d:
                    a4:f5:8a:f7:90:d3:d8:aa:49:5f:bd:d2:62:19:7e:
                    38:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:43:FA:62:48:16:21:9F:91:EE:78:0D:55:19:7C:A0:68:8E:88:F3
            X509v3 Authority Key Identifier:
                keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e3:4e:51:0f:dd:c9:51:e5:79:6d:23:cc:2a:91:67:2a:91:
         4d:ba:0a:93:26:f9:d9:d7:47:87:26:26:44:82:20:d4:d6:67:
         d7:fc:79:96:4c:56:c9:1b:0d:0d:6b:e9:83:13:ea:13:7e:68:
         2b:23:15:8c:ce:a9:91:f3:6b:c6:41:6f:98:bf:f1:0e:09:d2:
         c5:48:65:e3:98:fc:2f:54:e8:d5:2a:a7:ca:21:4f:d1:98:d3:
         2b:0d:c9:4c:18:09:87:f7:08:d4:f0:ae:a7:ef:28:56:15:b0:
         8e:2b:a9:ce:b6:cf:4f:b8:32:70:9c:d1:9a:59:19:04:79:88:
         04:68:4d:8a:e9:48:1a:6d:e0:28:fa:9f:e2:22:a0:64:5a:04:
         85:44:55:b2:19:59:b3:d4:58:5c:c2:65:1a:6e:bd:e1:15:b5:
         e1:49:1c:20:56:7f:f7:46:61:93:5b:8b:fc:c4:c5:ce:dc:81:
         72:1f:61:02:3a:e0:53:ba:48:c2:b4:68:45:a6:8f:a8:64:86:
         36:ac:71:b9:dd:7d:11:76:d6:6e:4c:00:07:e4:5f:62:39:9d:
         85:e1:c6:b0:4e:e2:25:db:75:93:21:09:62:99:96:90:6f:c4:
         94:28:79:cf:bc:5d:1e:f6:3d:76:71:91:f3:6d:e7:a0:22:1e:
         c0:20:f7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:28:02 2025 by rpki-client