Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft
File:                     DPzMWYD1fmvITfEbTFcZNdJdrMo.mft (raw, json)
Hash identifier:          iO2aziYA9Q6EEcqhoty415hRVKMydmk+hf7HvYQN2E8=
Subject key identifier:   11:D8:BA:50:BE:41:A3:29:7D:37:3F:37:7D:EE:22:86:B3:E5:F8:97
Authority key identifier: 0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA
Certificate issuer:       /CN=A91415AA/serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA
Certificate serial:       30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft
Manifest number:          128A
Signing time:             Thu 30 Jan 2025 19:52:27 +0000
Manifest this update:     Thu 30 Jan 2025 19:52:26 +0000
Manifest next update:     Thu 06 Feb 2025 19:52:26 +0000
Files and hashes:         1: DPzMWYD1fmvITfEbTFcZNdJdrMo.crl (hash: ZpHGtBfpR/G2W00DRYNika7OH8OqOuTjVqR5zcs092I=)
                          2: CB04F4409BE611EF8AFF947CC4F9AE02.roa (hash: xCoGLzXH0o2fU2zmUG8/SFNRjo0IkmsetsLkqXjuT7s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91415AA/serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA
        Validity
            Not Before: Jan 30 19:52:26 2025 GMT
            Not After : Feb  6 19:52:26 2025 GMT
        Subject: CN=679bd87a-5934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f1:49:a5:64:0a:0d:6f:59:1a:66:59:be:5d:
                    d8:40:b0:75:85:e4:92:11:f8:55:97:3c:56:b5:f5:
                    28:b6:77:ef:ed:67:48:e7:8e:c1:4b:df:1b:08:a6:
                    24:c9:e0:83:b1:31:48:f6:02:3e:37:23:2d:c6:12:
                    4c:b9:21:2b:88:50:0e:2a:f0:60:0d:62:c7:b4:03:
                    72:40:8d:db:8b:95:11:a8:09:67:86:f0:41:a3:37:
                    2e:b9:06:18:69:e2:4e:cb:02:c5:99:24:d3:13:3d:
                    8f:99:2c:1d:1c:5b:bb:d2:76:e8:4b:80:95:db:2a:
                    71:d9:bc:2d:97:8e:74:5c:3f:3c:71:1b:48:a7:4d:
                    74:2c:12:b2:a0:7c:1b:bc:b9:e2:6b:ac:af:ef:28:
                    b9:2c:dc:da:ed:76:56:6f:09:cb:78:f5:fa:64:2e:
                    06:ac:cc:64:59:12:9d:b0:8e:c1:1f:e8:5d:00:88:
                    ea:3d:72:40:d0:fd:f4:7e:1c:59:36:06:b1:76:a1:
                    ab:06:a2:1b:a1:27:d8:09:08:d3:8f:c3:b9:d9:94:
                    0f:d6:89:2c:0b:81:64:cf:15:32:a7:4b:48:68:7e:
                    b8:52:0a:2f:10:36:38:7d:63:0c:aa:99:2b:ba:06:
                    2c:77:be:86:ac:5d:98:46:08:60:3d:35:29:b9:04:
                    c8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D8:BA:50:BE:41:A3:29:7D:37:3F:37:7D:EE:22:86:B3:E5:F8:97
            X509v3 Authority Key Identifier:
                keyid:0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:fb:a1:b6:fb:f5:4b:32:82:30:79:8f:6b:72:9e:c3:7a:2a:
         dd:9f:96:07:66:49:ac:67:bf:a1:c3:9c:e2:23:54:99:d3:95:
         ea:c3:e2:88:e2:3f:8b:a3:e8:be:77:9f:aa:e6:2a:05:4c:e8:
         4f:84:64:e0:b8:12:83:e8:7d:c2:5f:b8:d6:0b:5b:5b:43:cf:
         4c:fd:64:2b:18:fd:63:5d:d1:74:27:27:c0:ac:ae:37:80:8f:
         84:de:29:67:80:6a:75:89:52:1b:ab:b6:43:47:b9:d1:34:4a:
         a8:c3:2c:b8:fb:b2:a5:ad:1f:4e:92:69:1c:11:94:64:23:3d:
         61:7f:05:88:41:5b:4f:65:6d:0b:eb:36:95:80:34:49:5c:28:
         3a:be:5b:de:ae:a3:d1:e4:f8:23:bb:16:eb:1e:77:f5:b6:ca:
         a8:8b:c4:4b:11:57:92:61:88:67:91:9e:f8:30:7f:0f:66:6c:
         7a:40:1d:a2:89:c2:07:cc:f9:7c:2b:0d:8c:88:96:6c:78:95:
         76:57:df:64:bb:85:e8:25:07:5c:5c:a3:dc:21:78:bd:70:05:
         67:de:7e:a1:27:2d:2a:d1:04:fd:3e:9a:e2:4a:41:86:43:44:
         d8:3f:a4:10:cd:07:65:bb:3d:0c:09:98:57:0a:f6:fa:36:20:
         c0:07:ae:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:42:56 2025 by rpki-client