Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
File:                     FZbEu-cy2oXLg-incIc-o0E3AaU.mft (raw, json)
Hash identifier:          qfo6mFbuEv9kamBfD84141QKV0Axct24pqR/9vgikq4=
Subject key identifier:   A7:31:E2:18:74:19:DC:23:62:87:C0:54:0B:54:BC:96:0B:EF:93:07
Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5
Certificate issuer:       /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
Certificate serial:       131E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
Manifest number:          12F5
Signing time:             Fri 31 Jan 2025 17:03:25 +0000
Manifest this update:     Fri 31 Jan 2025 17:03:24 +0000
Manifest next update:     Fri 07 Feb 2025 17:03:24 +0000
Files and hashes:         1: FZbEu-cy2oXLg-incIc-o0E3AaU.crl (hash: ByWtuyjiia79wJM3RZkaucyXOrZ4iUttyommlAPY4DQ=)
                          2: 56094384320611EA84C94231C4F9AE02.roa (hash: mZoT1sj2WR9PydzJ0T/LJHzRsHoob8BeC9+MkrsPnys=)
                          3: 443241A0321B11EA83044473C4F9AE02.roa (hash: n0sRanfJ+3KhBJUHh6jH9cwbJaaTZCbfJ+87aODuzgM=)
                          4: 4B18BBA8A9F811EEB85DBD24C4F9AE02.roa (hash: sd3UhNYbHggo+XcciVWTFZxv/tGVhGFf2hY/GpsuhSs=)
                          5: 1FD07ED231FB11EAA335E10FC4F9AE02.roa (hash: y17aQP9C+LDn4Yph2n6mf2nnVwvpkbeV6pXqgmt1qVQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4894 (0x131e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
        Validity
            Not Before: Jan 31 17:03:24 2025 GMT
            Not After : Feb  7 17:03:24 2025 GMT
        Subject: CN=679d025d-c44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:76:d8:83:cd:27:95:73:8e:f9:6e:39:ab:bf:
                    48:1d:85:6c:f2:45:4a:f0:f9:66:2e:be:9e:35:e2:
                    21:a7:ef:85:a9:80:27:32:c8:95:87:dd:1d:bf:00:
                    85:4d:3f:1b:ba:58:82:7c:7f:86:01:e5:a5:09:3c:
                    9c:70:ad:eb:b0:7e:c7:9d:bb:98:03:41:c6:96:00:
                    c3:5a:7d:cb:cf:4b:12:c4:11:c0:a5:92:ec:1d:bf:
                    91:e2:8c:2b:8b:97:66:99:ca:38:fc:cc:2d:7c:9a:
                    c7:31:0d:4d:f2:7b:4e:15:88:15:fe:f5:b1:a0:a4:
                    ec:97:29:cd:0c:ee:b4:d8:5b:38:d5:b3:2f:ab:d9:
                    80:74:5f:f0:4c:ba:45:53:c2:45:8b:c4:c2:3d:5d:
                    cd:c5:a6:25:9e:c1:c8:c2:3e:68:73:86:e3:79:51:
                    9e:05:48:5f:b5:91:92:fb:5f:d8:d0:bc:6e:ed:d4:
                    4d:29:09:60:51:17:81:e2:1c:e5:7d:b0:2e:a7:a8:
                    f3:84:d4:e7:98:98:7f:39:43:21:1d:0c:48:55:77:
                    a9:81:99:c0:9f:b0:02:d3:74:51:68:b3:b7:54:df:
                    eb:da:26:d3:c8:25:81:b2:dd:34:20:c5:58:fe:30:
                    38:08:15:3f:ea:70:33:08:31:29:b9:ca:42:93:da:
                    85:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:31:E2:18:74:19:DC:23:62:87:C0:54:0B:54:BC:96:0B:EF:93:07
            X509v3 Authority Key Identifier:
                keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:75:ad:e8:dd:60:a7:21:8a:2c:82:03:98:0a:9e:cd:13:6f:
         d5:89:ba:f9:9b:e9:bc:c0:23:0c:fc:26:dc:3e:3c:ef:12:00:
         2f:a2:aa:af:fa:f2:02:24:6a:a1:e3:36:89:74:aa:f9:15:2e:
         23:4d:7f:62:23:6c:54:e2:82:3f:de:81:3c:9e:b8:dc:86:25:
         af:30:c2:8c:16:fa:3d:8b:7d:bf:4f:1e:f2:6b:ae:93:48:9e:
         b9:cf:36:2a:9a:ca:d5:be:53:26:74:90:40:a1:64:ca:0a:9e:
         51:2a:ae:e1:e3:72:e7:19:b9:0c:f2:d1:5e:57:c2:d6:0f:8a:
         be:44:97:8f:a7:d4:71:44:9e:a9:fe:ea:3a:88:15:08:07:86:
         d8:e3:06:84:2e:02:af:1c:73:bd:40:97:b2:38:45:a5:85:47:
         fb:fc:06:92:4e:27:db:44:0b:89:cf:c4:33:3c:05:bb:39:aa:
         06:88:14:cd:d2:5b:78:39:6a:95:0e:a7:f9:6c:6c:94:ef:f5:
         0c:25:11:89:f5:1d:ec:e6:ab:04:10:c5:ce:1f:2c:e2:84:42:
         de:a5:4c:5e:ef:02:1f:ed:bd:dc:be:5f:03:39:f3:db:09:55:
         f9:91:14:20:e4:38:37:24:29:1e:3a:48:a2:04:18:98:91:46:
         50:fe:91:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:42:33 2025 by rpki-client