Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft
File:                     0dZcikMk4of26pFbOfXTYC0eN6Y.mft (raw, json)
Hash identifier:          3SDPjtHLSw4tEeWzfYl/z46zMsQRmM6Vv7IJWP+FlyM=
Subject key identifier:   E5:A0:7D:05:72:ED:0C:9A:C1:8C:57:E9:C3:01:88:D0:C7:2A:29:3C
Authority key identifier: D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6
Certificate issuer:       /CN=A91743EF/serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6
Certificate serial:       17D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft
Manifest number:          17C0
Signing time:             Fri 31 Jan 2025 16:34:25 +0000
Manifest this update:     Fri 31 Jan 2025 16:34:24 +0000
Manifest next update:     Fri 07 Feb 2025 16:34:24 +0000
Files and hashes:         1: 0dZcikMk4of26pFbOfXTYC0eN6Y.crl (hash: ZwTdctBKnImM+fONLjaGlv2FgEWB3YmBFKq+sQFa7yw=)
                          2: 8B2EE9667A0911EE934F1262C4F9AE02.roa (hash: k9iCQXzhjwfzVaU7vow/nBOXFL+lk5IPY/l7RxNnfPA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6096 (0x17d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91743EF/serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6
        Validity
            Not Before: Jan 31 16:34:24 2025 GMT
            Not After : Feb  7 16:34:24 2025 GMT
        Subject: CN=679cfb90-0aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8e:4a:c5:50:20:c9:7c:a8:87:45:ea:9a:02:
                    82:89:67:d0:df:c4:9f:d8:c3:ba:af:43:7f:23:d4:
                    71:07:e2:35:90:5a:74:96:82:30:45:c5:e0:3b:a8:
                    35:dd:f0:77:d2:f7:24:6d:b3:85:7d:5a:25:20:04:
                    c4:77:08:15:65:f5:2d:94:9d:cd:bd:bb:e7:14:1c:
                    b5:b0:bd:de:b4:de:e8:33:26:d7:c9:c4:da:d4:3e:
                    ff:97:8d:1b:57:c0:6a:5c:7c:df:55:35:03:b0:e2:
                    0c:74:2d:c4:3c:61:b7:84:57:ec:c4:58:8c:33:bc:
                    1a:5f:4d:c6:cf:ee:d5:bf:fe:44:f9:da:1c:32:2d:
                    98:27:9d:5e:cc:17:56:ea:78:25:06:ca:50:3f:89:
                    af:49:b4:9d:d3:c9:79:02:e5:85:17:8a:f3:cd:bc:
                    72:3b:70:02:b6:56:24:42:c9:c8:52:f3:fa:ea:ed:
                    3f:2b:0c:b9:8a:d6:22:65:65:27:71:09:51:90:45:
                    c9:e8:4b:6a:28:0b:8e:39:77:90:1b:cc:f5:2a:09:
                    35:6a:43:53:f1:1b:32:62:7f:f0:f3:7a:50:e9:be:
                    6d:9d:db:eb:97:f9:e0:e1:a3:d3:17:b0:d4:28:06:
                    e4:a9:22:b3:b9:86:44:00:0d:47:0b:ae:de:08:a1:
                    db:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A0:7D:05:72:ED:0C:9A:C1:8C:57:E9:C3:01:88:D0:C7:2A:29:3C
            X509v3 Authority Key Identifier:
                keyid:D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:09:f2:f6:0b:00:b4:5d:db:21:7c:7c:76:4f:e6:cd:18:da:
         c1:50:19:b7:d0:15:8f:74:ff:66:85:68:6e:6d:c0:4c:93:98:
         34:0c:99:7f:11:7a:14:9c:f6:37:8d:d7:c9:66:09:03:8d:77:
         1e:2e:45:69:c6:74:b2:59:1f:89:f8:f8:1d:a1:9d:69:9f:f2:
         ed:50:ac:25:8b:51:af:80:99:64:e7:17:8c:1b:8a:b8:09:b9:
         98:d5:f6:f9:54:8d:f5:49:d2:6c:53:c8:d1:9e:de:bc:93:34:
         01:99:19:a7:37:6d:47:bb:ac:f3:26:fe:d5:57:40:b7:5e:a2:
         05:e5:b5:e8:1b:5c:69:44:e0:20:de:45:4d:06:14:c1:fc:de:
         73:c8:62:27:f3:3d:4a:77:3e:77:12:05:41:94:99:a5:d8:f2:
         4d:59:77:c9:c7:1f:e2:8e:95:69:5d:39:b5:31:a2:b5:09:2c:
         5b:c4:f5:31:08:fd:fb:17:27:2e:a2:a9:6f:fe:b3:8b:53:eb:
         9e:31:79:14:e2:72:ab:c1:6d:85:3d:4b:7e:4b:4f:40:de:a8:
         96:4a:b8:69:a7:e0:7e:24:98:4d:d8:7f:c9:d8:21:78:71:4b:
         cb:87:2f:88:00:6c:01:6b:92:d3:57:b4:8c:86:46:9f:43:c8:
         fa:6f:27:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:37:26 2025 by rpki-client