Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
File:                     8HDB502tEidOj1dd_gu3wU69yZA.mft (raw, json)
Hash identifier:          TxWXFfImuwsZoffoAzl9fSgdyS31advIohznBysxH0Q=
Subject key identifier:   D7:AE:65:25:17:E2:74:88:A7:36:DE:0B:8B:9F:E6:38:0E:EB:35:56
Authority key identifier: F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90
Certificate issuer:       /CN=A91348DF/serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990
Certificate serial:       02FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
Manifest number:          02FB
Signing time:             Fri 31 Jan 2025 01:20:44 +0000
Manifest this update:     Fri 31 Jan 2025 01:20:43 +0000
Manifest next update:     Fri 07 Feb 2025 01:20:43 +0000
Files and hashes:         1: 8HDB502tEidOj1dd_gu3wU69yZA.crl (hash: FZx7WOfRz8i+KFRPT6MpOFgFF1HhN9Pgj3ExObiLNiA=)
                          2: 06A2C3E2C1E211EC86C79687C4F9AE02.roa (hash: L9t+DRBbmPVBfDehx/WMt8l2VQJogVd/uUcSz4yUxtc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 767 (0x2ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91348DF/serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990
        Validity
            Not Before: Jan 31 01:20:43 2025 GMT
            Not After : Feb  7 01:20:43 2025 GMT
        Subject: CN=679c256c-b7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a6:ca:75:41:c5:4e:53:d7:f1:c0:5c:4d:05:
                    11:30:54:f5:7c:d3:e2:aa:49:49:53:e3:81:f6:78:
                    87:c3:72:de:ca:bb:69:b6:b0:fa:53:0d:a6:4e:56:
                    b8:f8:33:dc:a5:72:14:c8:32:dc:40:a4:e2:80:32:
                    0d:62:52:0d:23:02:d1:84:4d:ea:62:0d:e5:38:f1:
                    d3:5b:67:3b:d9:46:ed:7c:8f:1b:fd:92:96:2b:ce:
                    f5:93:b4:99:35:28:dd:5d:70:93:59:cf:23:5a:e9:
                    a7:4a:c1:22:59:77:a2:db:7e:84:b3:d1:85:08:a5:
                    ae:5e:7d:52:28:c7:5e:74:89:71:09:da:f9:bb:76:
                    1e:2f:72:e2:99:8e:af:a7:d9:5c:83:c9:c3:3d:92:
                    18:62:d0:43:44:b8:dd:08:25:41:46:09:74:4f:fb:
                    9f:66:43:41:6a:ea:23:ab:f9:91:1f:32:47:8d:7e:
                    bb:94:d3:b2:80:aa:3f:da:11:1c:96:c2:e9:cf:3e:
                    6b:0d:99:4f:7f:10:21:60:5d:26:00:d4:e5:0a:d4:
                    9e:51:fb:58:ff:66:b1:81:c1:f7:84:d0:93:6d:dc:
                    c3:09:69:20:81:64:dc:39:33:05:4a:67:e1:32:76:
                    d4:94:10:58:52:85:7a:ce:cb:af:20:f3:ef:c3:35:
                    d9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AE:65:25:17:E2:74:88:A7:36:DE:0B:8B:9F:E6:38:0E:EB:35:56
            X509v3 Authority Key Identifier:
                keyid:F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:91:48:39:08:4a:1c:be:e4:93:64:d6:46:75:50:d0:80:f0:
         02:39:61:f9:30:22:c9:41:04:79:e3:37:bd:6e:49:db:bf:7e:
         fa:db:a9:c2:fc:d2:e3:c7:6b:d9:f8:ba:e4:d5:e1:8a:46:50:
         6c:2c:f8:87:21:31:b2:b4:6d:8e:ac:20:10:bb:92:e6:2f:7c:
         00:a2:eb:6d:97:b2:66:3e:38:d3:a2:7e:c7:85:9e:0a:17:b4:
         5f:dd:42:8f:25:31:b4:bb:ec:77:01:80:05:2c:7e:cb:de:d3:
         85:7c:65:78:d4:82:50:d2:58:05:dc:e1:2f:c3:1c:43:11:0b:
         11:4f:3e:d1:db:09:7e:b2:6b:3d:6c:9a:e8:15:69:69:03:f1:
         00:05:5c:3f:72:24:d4:0b:29:99:3c:b0:47:8e:bf:29:ca:f7:
         c0:7e:49:76:00:c2:dc:28:53:ad:6b:60:76:b0:7a:a5:1a:c3:
         4c:b9:67:bc:da:79:49:d0:a0:65:65:c1:5e:7f:33:d4:d2:01:
         8c:a9:a8:fc:12:49:05:0b:ff:5e:18:9b:82:71:ae:e1:91:96:
         4d:c3:04:3e:1d:e6:e3:e2:a1:60:4f:3a:d1:99:75:ea:c0:2d:
         1a:3f:a4:92:4d:b9:bf:11:f3:30:ed:59:32:35:35:d8:da:8f:
         8a:9e:bd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:21:45 2025 by rpki-client