Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft
File:                     ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft (raw, json)
Hash identifier:          LbtaaFm53mFHmQTV7kAdorAKhfqh119P9s8WoVyWZTE=
Subject key identifier:   C3:E6:D6:69:4A:18:91:FD:48:AB:30:FD:D0:A6:95:0B:1F:AE:11:E6
Authority key identifier: 64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94
Certificate issuer:       /CN=A91336DF/serialNumber=64F21CDE648B39B5282B8CB127928E2332488294
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft
Manifest number:          40
Signing time:             Fri 31 Jan 2025 06:29:49 +0000
Manifest this update:     Fri 31 Jan 2025 06:29:49 +0000
Manifest next update:     Fri 07 Feb 2025 06:29:49 +0000
Files and hashes:         1: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl (hash: JdgdgVOaWykTYVdtYx7g8z9bB4+5HbKshZW/XR9wqLw=)
                          2: F51067B4C65D11EF84CD2E17C4F9AE02.roa (hash: jvqTe31x/hXb7xXYlkCK4m1tiC8DGQsXAio95m/E2uI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91336DF/serialNumber=64F21CDE648B39B5282B8CB127928E2332488294
        Validity
            Not Before: Jan 31 06:29:49 2025 GMT
            Not After : Feb  7 06:29:49 2025 GMT
        Subject: CN=679c6ddd-b955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c9:23:73:1c:a9:f9:93:06:83:a9:85:52:e1:
                    dc:00:81:aa:76:30:7e:a7:30:05:42:02:3d:37:70:
                    8f:7f:ca:ed:3a:bc:d4:9f:ae:12:54:c9:4f:17:dd:
                    f0:f4:bb:5e:28:38:7b:99:b0:06:21:40:cc:44:df:
                    67:32:1d:a0:a9:42:45:9d:ac:bf:2c:76:23:4c:d0:
                    7a:2d:1c:b8:eb:6d:a4:f1:b0:e1:2b:81:e4:56:1e:
                    b5:d6:6d:15:71:4d:05:2b:2f:45:95:02:88:14:20:
                    87:27:21:c1:ef:63:52:a0:e7:bc:17:2c:1a:9e:f9:
                    ef:82:11:4b:7f:d2:c2:2f:7b:7c:06:e7:af:9f:63:
                    c0:10:93:f6:da:2d:99:3f:e0:0c:d7:f5:72:8a:61:
                    8f:34:6d:05:91:cc:f5:75:c2:f7:a9:4a:03:db:05:
                    50:d3:51:3d:f6:49:59:31:6e:5d:07:3f:42:83:a4:
                    da:29:03:a6:80:1e:3a:b9:a7:fb:73:aa:92:41:83:
                    ed:4f:73:31:40:36:f8:f5:ba:d2:ab:95:cc:23:b0:
                    43:c7:c0:c9:c0:f0:8c:a6:ef:7f:5b:bd:24:f1:ee:
                    50:92:a0:b4:b1:3e:65:b7:e0:89:d5:6f:a1:6b:e5:
                    d0:3b:cd:32:7e:61:8a:9c:8f:f4:d9:98:4f:1c:88:
                    e3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E6:D6:69:4A:18:91:FD:48:AB:30:FD:D0:A6:95:0B:1F:AE:11:E6
            X509v3 Authority Key Identifier:
                keyid:64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:a4:57:a5:59:c6:55:33:fa:5d:0a:df:f7:d6:b9:de:97:67:
         3a:3a:3f:29:f1:aa:2e:96:2f:09:4e:4b:18:8a:b8:56:b1:94:
         83:d6:e8:f4:3b:e5:d9:60:5e:d2:49:f6:2b:f8:f7:c4:8b:ef:
         cb:1d:63:cd:b7:fb:59:df:93:5a:1e:a5:32:16:30:1e:53:01:
         e8:a0:4c:11:96:45:e0:cd:54:f0:e7:64:eb:6c:a3:a9:ed:dc:
         94:6a:1c:58:ba:4a:14:eb:02:56:8d:d9:34:e5:19:1c:47:19:
         41:5f:13:5b:58:5f:92:36:c9:f3:01:f5:16:05:a7:4b:d9:85:
         34:97:ef:0e:ab:dc:a7:6f:78:2d:a7:82:5d:3d:48:4b:1a:2e:
         95:92:79:67:fd:96:b1:6f:2d:eb:56:3f:a2:bb:fb:7f:8b:22:
         63:b1:13:5c:66:9d:c4:05:0c:92:99:29:ca:b8:09:1d:16:5b:
         63:b8:f5:f9:05:ed:21:95:d6:a6:17:55:c1:50:17:7c:d7:0a:
         3d:fa:c1:4d:fb:22:88:5e:86:c6:70:fe:47:ca:d2:9b:76:e1:
         00:81:2e:49:33:9f:15:38:80:88:92:6f:87:d3:34:86:55:d0:
         d7:31:e8:30:11:44:90:c9:69:24:37:1e:bd:52:07:88:fb:e4:
         11:9e:3e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:48:30 2025 by rpki-client