Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
File:                     ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json)
Hash identifier:          TSKEtGrbcTNVwSHuBKeX/1krfeaUwQX1YYX/S7Juiqg=
Subject key identifier:   14:43:50:F6:9B:69:6C:D7:BF:58:4C:6D:69:AE:67:9C:1A:C2:95:C8
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       0338
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
Manifest number:          0305
Signing time:             Fri 31 Jan 2025 01:25:45 +0000
Manifest this update:     Fri 31 Jan 2025 01:25:45 +0000
Manifest next update:     Fri 07 Feb 2025 01:25:45 +0000
Files and hashes:         1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: oTl5BM4rRNyWv+k21KYlUDAYFVtZQMPSoSLPDt02TWk=)
                          2: A3144CBC2EE911EE9A805D4FC4F9AE02.roa (hash: pEdiw2TJUsfSqs5fnGmN59a6QGJIm2E/I2cp7lE+icw=)
                          3: BA8A60AEFB8911EDBF95D70FC4F9AE02.roa (hash: 1t9FETJTETRlAHZpa8n2/ay9wrVew58uqgqaUh48oRg=)
                          4: B9B89A10FB8911EDBF95D70FC4F9AE02.roa (hash: lRoYypbAmsJgYJlB5XMojg3ocpM7AoHA8Yth0HJ+218=)
                          5: B59E671A5F9911EE8FA1D64AC4F9AE02.roa (hash: Qc+nYdvwH1914ikzLOp7YV49vDPfD537XTFdFqd0rqw=)
                          6: BB1C8984FB8911EDBF95D70FC4F9AE02.roa (hash: jIktAw7xdxh49sNtuOin/casa/xFBLPKhkTmvY3abDk=)
                          7: A80B40921A4211EE83C49C1CC4F9AE02.roa (hash: WfFbSIs229LsheBXvRJJsQtKrDoyp4qPEJeE0KfuasM=)
                          8: A33FF4940B4311EE8ABEE820C4F9AE02.roa (hash: aFuyNLKTnPjsGK4AhrTZDdaMamtlTLjYSXstxky6Hbw=)
                          9: B5296BB85F9911EE8FA1D64AC4F9AE02.roa (hash: RUJdP1hsyr0ivWvTIhtzhcsRjAGFrA8gBxvUD5C7BL4=)
                          10: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: 0hqNC68Q8zqYwoRg/Kx140Gbd6mN/05/DI1IZiJnQGU=)
                          11: 7206F1B05A1711EF95CB811DC4F9AE02.roa (hash: xgIs9fKOINg78o2mjzzJNpjb0DPInUx+H9AXfLjuptM=)
                          12: B4961A7A5F9911EE8FA1D64AC4F9AE02.roa (hash: IYNo7n7duMkkS2cUgGEYYc8/JhVxgYOXYktaY4z2PJ8=)
                          13: BBD5B634FB8911EDBF95D70FC4F9AE02.roa (hash: LYWs6ybxq0oj3+RkxbDRIC+4v5nQzkZGJ70o2ztbIms=)
                          14: 4CF7B6F834CE11EEB44B835DC4F9AE02.roa (hash: nWLH6kwiVegk08h4yc7fneStdHCesY0iUBf1w4csxXs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 824 (0x338)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: Jan 31 01:25:45 2025 GMT
            Not After : Feb  7 01:25:45 2025 GMT
        Subject: CN=679c2699-f4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:aa:71:73:7e:78:eb:93:71:a9:ea:d8:42:80:
                    d0:1f:1d:55:2f:78:b8:7c:fa:3f:10:cd:b1:e2:e8:
                    b7:07:6a:d6:51:d9:69:2c:9c:ee:a4:99:6c:57:1d:
                    17:4d:d4:f1:24:79:88:46:52:c2:d9:05:b7:64:34:
                    64:6d:5d:3d:85:f6:ea:06:cc:31:fa:99:8c:a9:b5:
                    a3:98:25:8a:7f:dc:ad:b2:93:19:a1:e2:58:5d:30:
                    ac:3f:6f:22:02:03:60:9c:6e:85:08:94:de:bf:f0:
                    b8:6b:62:b9:51:41:27:b1:e3:ac:9c:c6:50:19:ac:
                    df:fa:21:93:9a:71:3f:50:07:e2:6c:16:10:d4:f5:
                    af:18:67:4f:a9:af:62:ca:18:ca:5d:19:e3:2c:ec:
                    23:7d:17:27:ba:e7:34:40:c9:ef:b2:25:23:a2:64:
                    cd:26:f1:83:05:8d:7f:4f:d8:07:06:56:f0:bb:a5:
                    e1:af:af:c0:70:39:fb:a7:12:01:19:8c:77:07:c2:
                    d3:85:84:b2:4e:b7:8c:3e:1e:c5:3d:ef:80:0e:cb:
                    42:af:2b:32:9f:51:df:be:35:c5:5e:85:ae:81:c7:
                    0c:8c:f7:9b:56:98:47:87:6f:67:db:97:ad:91:00:
                    2b:52:91:8a:2f:ce:f2:a7:88:eb:be:03:4f:d9:7e:
                    94:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:43:50:F6:9B:69:6C:D7:BF:58:4C:6D:69:AE:67:9C:1A:C2:95:C8
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a7:72:dc:22:a3:01:14:34:ea:64:74:11:f5:bd:1f:69:c8:
         c7:39:df:1e:46:8c:df:fc:8d:4e:89:1b:52:ba:c2:9b:a0:41:
         c6:f1:71:c3:3f:98:ca:cd:e6:ec:3d:05:a1:ce:7c:88:5a:1f:
         2c:1b:3b:95:8c:46:b7:05:2e:6a:87:de:9c:a7:80:4d:d4:07:
         17:bc:18:90:36:fd:73:93:73:09:fa:26:be:c6:e0:2c:de:87:
         91:79:1c:55:8e:23:2e:43:fc:97:c9:e2:47:77:fd:a5:83:8d:
         f8:2e:7e:92:79:b3:59:f9:b5:0f:3d:22:16:12:30:0a:9c:d0:
         d1:93:a9:9b:c1:eb:46:cf:8a:45:b4:19:11:1e:40:47:6c:78:
         56:22:cc:ce:fe:71:11:bf:f4:66:67:2a:f5:bc:12:98:51:1c:
         39:54:e3:34:46:94:3d:23:8a:28:c0:0b:85:ff:2d:13:0e:bd:
         32:06:d8:8e:21:5e:65:41:5e:b8:df:36:92:40:1d:4b:63:45:
         83:69:77:1d:a4:9d:8a:07:28:a7:61:69:ee:f9:11:b7:18:f8:
         60:c8:93:f3:7a:d9:f5:3d:2e:fb:1f:61:d2:1e:e2:c0:85:69:
         11:9e:3a:83:4c:49:64:73:c6:ab:ab:fa:2c:64:96:3d:d6:62:
         75:1b:d7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:01 2025 by rpki-client