Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
File:                     Tky0uRUee64RK-xTWcMclVgO4DE.mft (raw, json)
Hash identifier:          ULGKoVDOB4+2KHD/ZdAWvH1Ymefxr7Cw5vV0by7Fk9Y=
Subject key identifier:   65:87:FF:83:B1:75:A1:E0:78:B1:89:73:15:28:37:44:66:C2:BD:56
Authority key identifier: 4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31
Certificate issuer:       /CN=A91609E6/serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031
Certificate serial:       0425
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
Manifest number:          0421
Signing time:             Fri 31 Jan 2025 00:25:13 +0000
Manifest this update:     Fri 31 Jan 2025 00:25:13 +0000
Manifest next update:     Fri 07 Feb 2025 00:25:13 +0000
Files and hashes:         1: Tky0uRUee64RK-xTWcMclVgO4DE.crl (hash: D9PFcFIWLCiZEmpFL/chlFJDPUrPzxd8ES3qp6yME3E=)
                          2: C36AEA764F7911ECAA7C6A6FC4F9AE02.roa (hash: 6pwSl/tH7jpCf2nCpLbxQOYWHD+R7qNFnABfqWkqa5o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061 (0x425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609E6/serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031
        Validity
            Not Before: Jan 31 00:25:13 2025 GMT
            Not After : Feb  7 00:25:13 2025 GMT
        Subject: CN=679c1869-9fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:30:d4:6d:04:bf:c0:36:00:6a:49:c2:e7:4e:
                    bd:a2:26:61:b2:94:60:59:cb:3f:7e:0b:e8:e1:ad:
                    d8:bd:87:f9:43:78:44:2e:97:a8:83:03:75:9c:42:
                    56:05:5a:51:ff:58:4b:35:82:cd:db:69:f8:5c:61:
                    31:c8:64:99:f0:6c:78:ce:a8:7c:4e:ea:9a:34:13:
                    26:c0:43:a6:6c:3c:31:94:8c:32:85:bd:8a:2a:4d:
                    6f:6b:ce:1a:bc:3c:78:31:75:99:5c:53:eb:54:e2:
                    93:84:a8:1b:da:f9:d9:3a:ed:29:0e:7d:c6:8c:aa:
                    5d:7f:7e:59:d9:b6:c9:f0:47:79:bd:3f:02:25:6b:
                    4d:2b:4c:8a:ef:c6:c3:11:20:c6:a4:d5:f8:10:8d:
                    14:a6:42:a7:2d:9c:42:ec:a0:c1:41:69:28:12:bf:
                    0b:7e:80:4d:f8:fa:e0:d6:9a:49:1d:f7:4b:0c:7e:
                    ca:de:81:6a:32:34:83:b0:18:95:76:5b:39:da:95:
                    a5:68:96:5d:44:b0:e3:47:d7:69:1d:b3:f2:98:c2:
                    4f:a3:23:d2:0f:71:53:79:f7:11:4a:f2:7c:fb:b6:
                    80:38:b4:0e:b5:03:77:6e:2d:49:44:61:c6:42:34:
                    e0:9f:b0:32:73:e0:ff:ac:9e:c6:20:28:9f:13:26:
                    40:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:87:FF:83:B1:75:A1:E0:78:B1:89:73:15:28:37:44:66:C2:BD:56
            X509v3 Authority Key Identifier:
                keyid:4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:14:22:9b:c5:13:f9:35:36:db:c9:82:9b:34:24:ed:27:ca:
         5b:2d:7d:cc:f3:e1:df:db:00:67:03:7b:4f:a2:d9:09:7a:ad:
         91:c3:a3:25:11:24:6e:66:12:65:88:59:47:f3:b2:8e:fa:f2:
         de:a5:8f:6c:d8:c3:48:fa:5d:4e:50:67:dc:03:ec:ae:6a:1f:
         e9:49:82:d9:19:67:09:49:67:d8:30:60:3a:83:55:5f:41:5b:
         f3:af:d2:14:2b:43:4d:a7:0b:33:36:c7:4a:a7:28:6d:e6:6f:
         65:8f:b8:98:17:82:2b:87:ca:89:c7:90:88:16:cf:85:a0:e3:
         fd:cc:1d:43:9e:54:02:d1:8a:45:e9:97:56:7c:ab:ac:26:52:
         7c:f3:49:c5:8e:e4:2a:e1:a5:5f:8b:2f:47:b0:2a:b7:af:44:
         77:0b:a3:2e:59:d0:93:78:0f:c8:5b:ca:40:b9:b1:68:e8:24:
         27:e2:11:8d:83:1f:79:4b:0f:fa:57:9e:0a:1f:56:2f:9b:47:
         e1:cc:ec:e9:d1:89:0f:5a:22:c4:15:84:09:b9:d5:f6:7a:61:
         4b:33:4d:fa:25:86:c0:88:d7:74:b7:3a:54:f5:d2:c2:04:94:
         f2:43:34:b2:bb:31:d0:fa:35:30:db:4b:9a:c5:b8:c6:73:2f:
         da:5e:bf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:34:11 2025 by rpki-client