Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
File:                     e-IwFTz_kAFkLbybJPhdDMKCNk4.mft (raw, json)
Hash identifier:          42txtfA6saf9LVcAdYk1EXnOMGLUqJnKjrOx71HpPhg=
Subject key identifier:   64:F6:EB:93:75:AC:EF:86:8A:D0:99:01:C0:CB:09:D9:82:47:4C:39
Authority key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E
Certificate issuer:       /CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E
Certificate serial:       F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
Manifest number:          E8
Signing time:             Fri 31 Jan 2025 04:40:30 +0000
Manifest this update:     Fri 31 Jan 2025 04:40:30 +0000
Manifest next update:     Fri 07 Feb 2025 04:40:30 +0000
Files and hashes:         1: e-IwFTz_kAFkLbybJPhdDMKCNk4.crl (hash: fJ8ffA8CBUdvv86sQaPlaPQKam1jkwdnSHwu8V2VtAw=)
                          2: 9D3EBEF4921111EE9AD1150CC4F9AE02.roa (hash: H7JonSUtz6tgIVuXpEGUpFZ7fUQBIkEHbO/Cd9DHtNo=)
                          3: C00D9A3C71EE11EFA7DD021EC4F9AE02.roa (hash: j/6dClTGKIF6Y0W3OQ8vmv5qC35aQkMZjQK9N8GGPFU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E
        Validity
            Not Before: Jan 31 04:40:30 2025 GMT
            Not After : Feb  7 04:40:30 2025 GMT
        Subject: CN=679c543e-5045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:90:af:31:40:f1:4c:13:10:9b:7d:d3:e6:32:
                    e6:55:ee:b9:6a:b2:5b:da:75:5b:b8:78:8f:fb:e8:
                    b7:4b:c0:0b:85:8a:15:03:72:88:74:98:b4:37:2f:
                    eb:8f:eb:f2:b1:8d:ff:8d:52:52:e0:0a:1e:a2:8e:
                    19:49:38:75:2e:49:6c:c9:31:44:fc:fe:82:b8:d1:
                    51:72:37:8c:bd:e5:3c:c4:12:21:bf:f8:d3:15:48:
                    38:50:a5:cd:e8:a8:c6:53:da:02:cb:ad:29:49:2e:
                    91:6a:ed:ee:05:96:66:af:c5:f9:cc:8e:81:60:d1:
                    ee:ba:02:4f:ef:67:bf:86:2a:43:de:a2:cd:36:81:
                    a5:a9:66:0f:8f:49:c8:d4:f0:9a:52:09:1b:a5:b1:
                    fc:45:e3:63:cd:47:34:a7:97:6f:bc:ed:a4:ba:9a:
                    41:c8:0b:98:78:c7:63:05:2b:ee:5b:7a:d3:9f:49:
                    31:ff:b9:05:7d:6f:b7:06:d0:9d:ea:4e:79:94:ab:
                    f9:96:36:a3:ec:59:a5:ab:ab:8c:a4:b1:9d:f4:30:
                    2e:5f:96:36:cc:39:ec:98:04:7d:52:cf:ae:ba:eb:
                    c0:a6:a9:6c:e7:e6:57:28:e7:88:06:8d:73:e8:a6:
                    79:f0:83:c2:de:e8:ac:83:2c:bc:b5:59:9f:db:38:
                    6b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F6:EB:93:75:AC:EF:86:8A:D0:99:01:C0:CB:09:D9:82:47:4C:39
            X509v3 Authority Key Identifier:
                keyid:7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b6:72:be:82:f9:84:90:a8:68:ea:67:3d:2f:80:fc:47:e8:
         45:26:57:6f:23:09:5e:d6:d6:9d:f7:6a:03:aa:f5:1c:13:ed:
         e8:f8:db:e9:63:aa:ed:5a:e4:a7:b5:5c:49:d6:c2:5a:b1:9c:
         65:ab:c6:79:48:d5:42:cb:7a:dc:58:7a:73:56:51:bd:fc:27:
         96:35:e1:bd:17:55:f2:7f:a0:62:39:a0:71:52:ee:e5:12:e7:
         0f:9f:de:7d:7a:c6:d3:83:ba:35:ab:df:88:43:e8:e4:cd:82:
         ab:9c:32:04:be:16:57:35:16:52:4f:20:b3:5f:94:74:47:1e:
         62:ae:e9:a7:5f:64:34:b9:11:f8:6c:7e:da:e6:93:c2:49:73:
         3a:dd:9e:e6:65:29:13:e5:63:3d:02:d0:dc:7b:36:0c:24:23:
         e4:d1:18:d4:98:c9:f8:c5:1e:a5:02:cb:0f:54:89:60:b0:fc:
         96:1d:3d:b4:3b:a7:1a:ae:ff:58:15:7e:05:ce:2a:89:12:4c:
         e7:4a:79:d6:16:92:07:e7:ac:01:05:2b:3b:d3:ac:9f:e2:49:
         a8:49:e6:24:61:14:82:c2:6e:e2:13:f0:ee:d8:21:c3:c0:82:
         57:fb:28:35:5f:b3:ff:86:de:09:c0:92:f9:e2:0c:52:a2:59:
         5f:f5:f0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:45:51 2025 by rpki-client