Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
File:                     0nYmctKXWA5IQijBceWokHMMF28.mft (raw, json)
Hash identifier:          enGE4u55r4OoEymQpHjkihPO5drODj1V8NeJ14Dg3aQ=
Subject key identifier:   E4:31:41:26:05:1B:27:42:34:56:4D:B4:FD:FE:88:62:5E:F5:A7:42
Authority key identifier: D2:76:26:72:D2:97:58:0E:48:42:28:C1:71:E5:A8:90:73:0C:17:6F
Certificate issuer:       /CN=A91724A6/serialNumber=D2762672D297580E484228C171E5A890730C176F
Certificate serial:       016A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0nYmctKXWA5IQijBceWokHMMF28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
Manifest number:          0166
Signing time:             Fri 31 Jan 2025 03:14:23 +0000
Manifest this update:     Fri 31 Jan 2025 03:14:22 +0000
Manifest next update:     Fri 07 Feb 2025 03:14:22 +0000
Files and hashes:         1: 0nYmctKXWA5IQijBceWokHMMF28.crl (hash: 5XRWVVAU/YtAoaSIUrfOUqevswgWL3RJiM/KT1F04sA=)
                          2: 950A55CCC3C711ED8419AA64C4F9AE02.roa (hash: GrQm9NlurYpVLIwLedH2/MNa+h8258HeOnrxmNS0v54=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91724A6/serialNumber=D2762672D297580E484228C171E5A890730C176F
        Validity
            Not Before: Jan 31 03:14:22 2025 GMT
            Not After : Feb  7 03:14:22 2025 GMT
        Subject: CN=679c400f-b5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:6d:43:88:45:1a:14:0d:98:a7:ff:fe:28:
                    b2:29:43:20:c7:75:58:72:d2:31:8b:e3:dc:80:86:
                    df:cc:5a:f7:86:35:dc:0e:85:94:98:61:05:c8:91:
                    49:68:8a:f1:33:c3:e8:4c:44:30:14:82:c2:05:00:
                    83:30:37:09:fa:dd:64:f9:51:a1:5f:08:5d:62:3b:
                    11:c0:c9:5b:2b:98:98:3a:43:f7:68:fb:b5:0f:f5:
                    11:61:b5:71:de:f9:56:f0:18:18:a5:91:c1:d6:42:
                    9d:04:a6:31:79:60:81:8c:75:c5:f7:9b:84:57:88:
                    6f:f4:72:b9:8b:5d:2b:2a:a9:9e:6a:38:f9:79:47:
                    e7:6c:33:ac:3a:05:70:e1:a1:72:e1:7e:22:28:2c:
                    de:30:db:ad:68:92:69:07:5a:52:68:ff:3f:41:f7:
                    d3:45:2c:ce:e6:e4:71:2e:75:96:8f:39:62:1a:c6:
                    7e:a5:9e:7f:e4:b7:e4:0e:76:f3:e1:34:59:9f:30:
                    77:f4:1d:7c:42:0e:a6:93:84:97:3f:fd:96:6b:c5:
                    7f:58:59:cb:0d:59:58:b6:42:70:c9:6a:9a:08:28:
                    74:4a:8e:53:4c:bf:d3:01:56:ec:d1:aa:af:cb:47:
                    db:11:df:54:cb:f6:17:29:b0:f8:e8:0b:34:51:ed:
                    ac:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:31:41:26:05:1B:27:42:34:56:4D:B4:FD:FE:88:62:5E:F5:A7:42
            X509v3 Authority Key Identifier:
                keyid:D2:76:26:72:D2:97:58:0E:48:42:28:C1:71:E5:A8:90:73:0C:17:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0nYmctKXWA5IQijBceWokHMMF28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:8e:8f:67:eb:1e:9f:21:eb:41:06:91:94:a7:7f:d6:9c:19:
         d2:f4:bc:5b:ff:9d:1a:90:30:74:2d:3c:e7:01:ff:29:aa:57:
         7d:3c:38:99:05:16:45:ec:6d:f4:71:d3:d3:a0:80:b4:48:61:
         c4:93:2a:9f:b6:69:80:88:9e:65:8e:8c:6b:0b:59:26:2f:6d:
         6b:f5:8c:34:d7:4f:1d:8c:09:01:2b:b5:43:20:bb:16:60:1f:
         1e:4a:2b:3b:8c:ab:6c:a9:ab:4f:4b:b8:f5:58:4c:9e:ba:9b:
         a0:fc:96:ac:d1:da:f0:7d:6f:2f:88:63:0f:86:57:4e:42:3a:
         ae:7a:de:af:e7:50:09:a7:30:71:9a:4a:cd:c1:95:03:c6:a3:
         fe:17:e6:65:dc:d7:ea:ee:30:f4:d3:ee:a6:1b:72:2e:90:60:
         8e:26:4f:f7:c4:a0:8d:47:79:a2:0e:e5:f3:50:a7:52:0f:ba:
         96:83:75:0e:3e:4a:2f:20:f8:9f:64:04:32:e9:dd:53:39:f5:
         34:6a:80:68:87:d3:36:ba:f3:d6:e3:f4:fa:32:9b:3d:5f:1e:
         0a:9f:67:bb:dc:49:1f:ea:77:3e:7f:4d:9b:76:87:f8:09:31:
         e1:52:ef:1f:06:f4:55:b8:61:e3:b8:fc:52:68:18:14:f8:24:
         c6:b1:bc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:17:45 2025 by rpki-client