Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft
File:                     bbZgfaaV3QngKYA6L_JiWtiDguM.mft (raw, json)
Hash identifier:          tAxrCfYD/eYcxY42DZlMW0dYb1QW/DZKGJinXqSjeQY=
Subject key identifier:   D8:EA:E4:BF:0D:77:B5:EC:B2:26:1B:F1:49:15:01:C1:37:84:1B:05
Authority key identifier: 6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3
Certificate issuer:       /CN=A91643F8/serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft
Manifest number:          45
Signing time:             Fri 31 Jan 2025 06:28:31 +0000
Manifest this update:     Fri 31 Jan 2025 06:28:30 +0000
Manifest next update:     Fri 07 Feb 2025 06:28:30 +0000
Files and hashes:         1: bbZgfaaV3QngKYA6L_JiWtiDguM.crl (hash: o1RPTuBPhaLGG8mfjSWirDjKVovUxCUcyIa8sXXwRZk=)
                          2: F2F0E3FE882E11EFB58CD069C4F9AE02.roa (hash: xhTjRYAmVfOwQQSsGsr7HfgpLZrnPmaYeWIc+EpYBdU=)
                          3: 50A6B6427C6B11EFAB9AB658C4F9AE02.roa (hash: xeZt84UMp+B7UEH+ve0Je8d8/kwmPLcBVN2BEDa+kr8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91643F8/serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3
        Validity
            Not Before: Jan 31 06:28:30 2025 GMT
            Not After : Feb  7 06:28:30 2025 GMT
        Subject: CN=679c6d8e-4337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fe:29:ff:1c:f5:51:5b:a7:3e:d4:e0:73:13:
                    2a:1b:27:d7:77:76:d1:d9:27:f4:a3:ea:05:c6:9d:
                    13:7c:a9:1a:a9:fb:d1:97:fd:6b:bf:9f:0b:2c:da:
                    31:60:1e:f0:86:c0:91:d8:f3:f8:0c:98:83:59:3c:
                    19:ac:8a:0e:a8:ea:28:93:22:75:0f:dc:b6:22:76:
                    85:de:77:46:9f:0f:92:f8:31:50:a2:cd:24:c6:e2:
                    8e:2f:3a:86:6f:72:bf:e7:55:30:49:8d:d9:f2:5a:
                    ef:3a:f3:bf:4e:13:3b:f7:77:5a:21:0d:21:3b:89:
                    63:c9:05:47:7c:15:3d:c4:2d:ec:78:9f:c0:0d:bf:
                    d0:61:02:21:50:53:3a:88:b8:5f:12:8f:01:97:11:
                    17:f4:50:cc:39:64:1b:51:1d:11:71:b9:24:4d:16:
                    61:53:ca:8a:f0:dc:7d:46:56:64:5b:ae:ec:8e:f1:
                    38:6b:dd:82:e6:17:95:c5:ac:ba:bc:02:51:c3:3c:
                    6e:96:ea:59:6b:7f:f0:f3:f1:cc:52:bd:dc:05:43:
                    ca:97:81:34:71:73:00:09:ca:e3:bf:c0:20:33:e2:
                    70:6e:b4:e2:a6:5b:ef:3f:96:1a:21:3c:cb:57:5f:
                    e0:81:0b:ba:37:3d:66:54:83:85:fb:ce:48:4b:43:
                    76:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EA:E4:BF:0D:77:B5:EC:B2:26:1B:F1:49:15:01:C1:37:84:1B:05
            X509v3 Authority Key Identifier:
                keyid:6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:be:43:28:00:61:12:18:95:36:ed:a2:81:bf:83:07:2a:21:
         04:36:b7:9a:4b:9c:2b:54:05:0e:62:3e:04:43:ae:c5:f9:76:
         e5:1c:22:06:d1:5d:d8:4c:8e:16:16:9f:57:e4:2a:a6:6b:40:
         24:f0:e1:eb:89:2c:39:9b:af:1e:85:81:a6:50:2f:32:a1:82:
         12:13:c5:c1:48:93:12:1a:fa:8b:ef:6e:3d:1e:f2:24:67:53:
         07:47:d7:05:2c:e7:7d:b9:0c:33:8a:a5:8d:5e:5a:e7:fa:9a:
         72:c8:ee:32:65:f1:ed:29:25:ff:6f:f4:55:76:a7:e4:50:dc:
         64:3b:b1:6c:1c:a2:db:31:e4:7b:2d:8e:56:47:7b:09:38:a3:
         08:8a:f2:45:9c:7d:fb:4d:62:b1:e6:20:6c:e2:16:54:9f:3f:
         97:1a:32:83:68:2a:b6:ee:9f:0d:65:be:ff:cb:e6:53:36:9c:
         9a:a9:9d:84:31:7f:ae:bf:92:31:48:ef:ce:d2:0c:be:94:29:
         e9:16:6f:23:43:6f:8e:b2:fb:86:ba:fd:5b:0d:4c:d6:d0:77:
         00:55:83:f2:2f:60:72:99:d8:a4:cc:94:11:18:c3:94:fb:91:
         17:59:74:df:88:7e:b3:22:7b:bf:c8:19:db:28:d9:3e:d5:97:
         59:c1:3a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:15:57 2025 by rpki-client