Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
File:                     aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft (raw, json)
Hash identifier:          XLkytRad9oEEIwwyfaafpo+bUQzDp2Zbm6BWp48DK2U=
Subject key identifier:   30:C8:41:A7:5C:7B:D8:F1:95:C8:D1:7A:33:65:12:AE:D6:93:76:CD
Authority key identifier: 68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F
Certificate issuer:       /CN=A91549ED/serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F
Certificate serial:       0765
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
Manifest number:          075D
Signing time:             Thu 30 Jan 2025 21:28:27 +0000
Manifest this update:     Thu 30 Jan 2025 21:28:26 +0000
Manifest next update:     Thu 06 Feb 2025 21:28:26 +0000
Files and hashes:         1: aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl (hash: LxjrdnBO5lTYS6wxJRu2qDR/QxC6wh/U6IltWcTIfHc=)
                          2: 89B3D06E0F9111EBA9B90727C4F9AE02.roa (hash: nNeDg/wlklIxGFoighizLl95GENL1V1dEvF0FUrVfns=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1893 (0x765)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91549ED/serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F
        Validity
            Not Before: Jan 30 21:28:26 2025 GMT
            Not After : Feb  6 21:28:26 2025 GMT
        Subject: CN=679beefb-a766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d7:b0:61:3a:52:d5:65:89:d7:e2:b5:63:39:
                    37:eb:3b:13:e1:ee:9f:61:4a:1b:57:cb:f3:db:17:
                    46:34:89:e3:b2:cf:55:64:39:45:2d:90:e5:7d:93:
                    3e:e2:d9:4d:f1:19:32:b6:a7:e7:bf:77:e7:b5:e4:
                    70:c7:6b:be:dc:17:52:0d:25:7a:bf:1d:2c:97:46:
                    49:c4:cd:32:da:21:c9:d9:a7:52:e3:68:14:d9:d3:
                    9c:d2:3f:e4:8f:b9:ae:a1:af:ec:38:71:5f:b6:11:
                    93:0a:ca:f7:66:92:42:74:29:4b:ec:54:96:4e:ce:
                    00:65:a7:9e:4f:7b:01:12:c9:ca:ab:d4:bc:0e:8a:
                    ad:40:55:ed:8a:df:ba:45:bb:bd:28:f5:81:2d:8c:
                    25:2a:bb:80:93:0e:2a:f0:75:5d:af:81:16:1d:d1:
                    37:0c:66:71:51:45:df:be:4a:01:d2:3e:4a:3e:8e:
                    1b:cd:9a:14:2a:b5:c6:af:14:94:54:5b:dc:60:62:
                    5b:6d:54:8f:bf:33:14:de:38:ad:2d:f2:7f:24:54:
                    17:3b:f2:ea:7d:26:c1:4f:e4:0f:6d:dc:05:68:49:
                    07:71:75:45:e9:bd:67:9f:51:21:10:f2:e4:94:7a:
                    40:45:7f:42:5e:a4:33:e1:fb:0d:aa:90:de:16:de:
                    7d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C8:41:A7:5C:7B:D8:F1:95:C8:D1:7A:33:65:12:AE:D6:93:76:CD
            X509v3 Authority Key Identifier:
                keyid:68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:51:ae:82:e9:54:bd:3a:29:07:c5:ad:2f:f4:ab:80:e3:5d:
         67:53:54:27:08:c4:09:6f:55:b7:15:a1:7a:e0:31:3a:3b:8a:
         41:0d:8e:ba:03:2f:89:75:b6:1e:d3:ab:79:fd:4e:66:5f:c1:
         47:1a:12:73:70:64:f9:ba:02:c7:84:2d:67:66:38:ad:cf:23:
         8b:7b:d4:8c:2c:15:3f:af:cc:67:e3:22:8e:00:c8:79:4d:89:
         d8:6c:df:19:be:21:3b:b5:b5:5c:b6:67:e0:36:79:d0:46:3a:
         89:df:08:d9:54:fa:d7:ef:f9:ca:21:4e:78:f4:0a:14:16:d5:
         16:cd:68:fb:50:d0:02:18:ec:f3:f9:1c:a4:4b:b0:d3:aa:60:
         2f:16:68:0b:1c:30:c7:f8:80:a5:7f:24:bc:02:3b:f7:79:ca:
         ac:ec:58:08:36:b3:af:4c:ea:d4:9d:57:2f:1e:1a:2b:cf:61:
         58:07:03:cf:6f:c1:93:07:8d:9c:b3:bd:38:2b:b1:03:ca:22:
         c5:14:ab:1d:e8:f5:ae:24:68:68:5b:da:bb:97:4c:8d:3b:1c:
         89:6a:de:10:ea:d8:f9:d8:bc:26:9b:b3:63:b7:7b:07:9a:b6:
         3d:17:50:c0:1f:13:ce:3a:31:9f:41:e0:5c:43:36:61:48:e0:
         20:8b:f3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:38 2025 by rpki-client