Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft
File:                     vPLIrbwz4n5cdnSmbahlv1qma-U.mft (raw, json)
Hash identifier:          oxYt1GmEKAdo47XKuDYlv/thqkT4sQKLBmUVdFNEUc4=
Subject key identifier:   52:A6:D5:D1:07:D3:A7:D6:C7:E4:FD:9D:92:43:11:31:F5:15:B0:50
Authority key identifier: BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5
Certificate issuer:       /CN=A91619D8/serialNumber=BCF2C8ADBC33E27E5C7674A66DA865BF5AA66BE5
Certificate serial:       055C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft
Manifest number:          0545
Signing time:             Thu 30 Jan 2025 23:33:31 +0000
Manifest this update:     Thu 30 Jan 2025 23:33:30 +0000
Manifest next update:     Thu 06 Feb 2025 23:33:30 +0000
Files and hashes:         1: vPLIrbwz4n5cdnSmbahlv1qma-U.crl (hash: F4j3A2zH6Doeqjg3rNh7+0Qj7HiiL3zokgxI5ta+5PI=)
                          2: E7584B4C86A211EE9791E012C4F9AE02.roa (hash: T5GiWxH5CJSVyfHnlJ00EWYvXgx25uLrmX6jBLWmVrk=)
                          3: 7B40808086A411EE90BD604AC4F9AE02.roa (hash: kPB+7Y3RTie/Oq7MRgPUTEuPgMZheJwSjNt8QuYQwFA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1372 (0x55c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91619D8/serialNumber=BCF2C8ADBC33E27E5C7674A66DA865BF5AA66BE5
        Validity
            Not Before: Jan 30 23:33:30 2025 GMT
            Not After : Feb  6 23:33:30 2025 GMT
        Subject: CN=679c0c4b-ae56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:86:94:06:d5:bd:4b:4a:ab:3a:6c:aa:a3:a3:
                    31:4d:4a:c7:21:a2:f5:6e:14:e2:a9:90:ac:7b:b6:
                    7b:ea:37:a7:d6:dc:e0:bd:27:77:ad:aa:ea:04:8e:
                    3b:c0:0b:f9:57:ba:6f:59:28:70:db:fc:cf:4c:fd:
                    42:77:87:8b:f7:24:71:02:3b:50:8a:b3:1a:9a:41:
                    ba:39:f5:36:a9:f3:1a:6e:10:7d:d5:ad:54:05:ae:
                    42:40:76:a4:d1:17:bf:37:6f:6e:76:d8:0c:ec:3e:
                    a7:80:27:08:61:a7:c4:3f:6f:88:ad:84:b2:99:ae:
                    32:29:1f:51:f7:39:85:8a:34:63:ef:92:12:15:36:
                    3b:25:21:13:31:d5:47:12:4a:a3:0b:e8:1d:9a:04:
                    ef:9f:d7:cd:7b:dd:0b:70:6c:cb:c5:b7:c9:66:f5:
                    cf:97:ea:bf:87:59:43:c9:32:98:3d:b8:b0:d6:d8:
                    a7:0a:c3:62:a5:51:a7:2e:7e:d3:50:09:b1:60:99:
                    a1:c6:79:d6:29:19:d9:ab:ab:86:0a:2d:7a:17:c6:
                    71:15:31:f7:69:b0:33:ae:87:d5:ba:56:61:f4:fd:
                    ac:55:20:b3:02:8c:7f:0a:12:97:92:c8:9a:bd:5b:
                    04:2b:57:8c:fd:3e:36:09:dd:be:cc:a8:3f:8e:b6:
                    1e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A6:D5:D1:07:D3:A7:D6:C7:E4:FD:9D:92:43:11:31:F5:15:B0:50
            X509v3 Authority Key Identifier:
                keyid:BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:49:27:1f:8a:ae:a5:4e:8c:19:e8:78:4e:7d:53:cd:55:19:
         62:e6:4b:0c:e6:6f:e4:03:f7:dc:e5:58:24:23:c6:4e:16:ce:
         b6:36:99:0c:69:1e:ba:7e:e9:1d:0c:ea:85:26:4e:d1:cb:29:
         18:73:6b:a2:89:45:80:ea:de:80:28:42:40:c4:b3:ee:4f:b4:
         44:ca:48:9a:98:61:51:73:32:b9:30:32:fb:a5:20:28:84:0d:
         96:1a:97:7a:2a:d4:b4:f3:71:fa:66:c2:f0:2d:5c:a2:b8:28:
         e8:53:7c:14:28:86:fa:32:e3:00:1f:9a:09:86:81:16:f4:9b:
         e3:7b:2e:01:d4:8d:e5:58:86:17:f8:20:75:3e:17:f0:13:5f:
         82:e4:ef:d7:6b:ec:fa:48:ef:2b:5a:53:5a:c7:cc:71:e8:87:
         11:88:e5:9f:52:53:11:4a:43:78:c7:6e:a7:f1:1d:64:63:17:
         06:55:ce:66:42:2c:85:30:f7:71:82:14:5a:0f:d0:d1:6a:9c:
         ab:a6:b2:d0:c6:68:89:ee:08:28:7f:f0:3f:47:5f:5e:27:89:
         13:17:59:3c:bc:a1:9c:df:c4:71:84:06:c2:89:69:f0:75:1c:
         23:a0:f5:2a:6e:c7:b8:d2:02:1d:dd:a3:a9:7d:45:41:61:e8:
         72:4a:65:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:12 2025 by rpki-client