Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
File:                     Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft (raw, json)
Hash identifier:          ufgW0ptnM+8ndM04Y6LV7U6hlV8Tvlagb8YOP0O2NqA=
Subject key identifier:   40:36:81:0A:FE:DC:DA:E8:A5:B8:06:7D:FE:91:99:E1:CF:7C:B4:A3
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       10E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
Manifest number:          0F89
Signing time:             Fri 31 Jan 2025 17:41:19 +0000
Manifest this update:     Fri 31 Jan 2025 17:41:18 +0000
Manifest next update:     Fri 07 Feb 2025 17:41:18 +0000
Files and hashes:         1: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl (hash: vD4YXZyqdBSyXECDVycyH1C6CZ/Rk+nU8MOsOeBBQrM=)
                          2: A2745BFEC18411ECBE051C5CC4F9AE02.roa (hash: PrswZfri3dHxcodWDLz5zdIU9mo1iJZykEdVfIHeBvM=)
                          3: 4CF19A6EAEDC11EF99753F71C4F9AE02.roa (hash: Qn6g14AUkLu1btr8Er+hiQxzqayU2xntHB3orOLLw9E=)
                          4: ED397A542A1211EFBF48A87FC4F9AE02.roa (hash: tNirD4O5n/APlr4VXtRqMXUQrZa9HBGyAXXcJdhkx8g=)
                          5: 71043990C4D811EA88E6B21FC4F9AE02.roa (hash: 9vj0wFDRg2m924YSQRU+53hKJgFYHI/k3yYJ69FV68c=)
                          6: B969078EB94B11EB8CFABC23C4F9AE02.roa (hash: IEsW3GuxCVGYRu/1hhIjcdekM36PkMj/h8FdT1+soSo=)
                          7: EE0AC1B82A1211EFBF48A87FC4F9AE02.roa (hash: rO7clzQPDfrbQiofxJnNNd8hLM/5/riPsot/0I2BTXI=)
                          8: F3011EAAB88311EBB2078C50C4F9AE02.roa (hash: WDmBDJ69igHtzeCqQyvNDcFOZ8jROHQ7B6krkg7kRGE=)
                          9: C4A85FD48FE811E98B967A66C4F9AE02.roa (hash: aiooAIoivVql5FC+SCyKWbhdV5nV3qmBQRAodXfPFtU=)
                          10: 721709C63F6711EF879C2E11C4F9AE02.roa (hash: OxPA4uUHLc7fRUiKLbuvR0L7g6mPMW1qhFDN6e351sc=)
                          11: BB54CFD0B94411EBA1CDCA45C4F9AE02.roa (hash: JBQ6069Irn+Fo63UGqCMQV8Nmj1Wx+/dKLn5g7bFNNU=)
                          12: 5C4E5A6EB9E511EB9717B256C4F9AE02.roa (hash: b/LbIzPAU9coJXjT3umWz8BMDzmOcTsQApiNrqEbUbM=)
                          13: 49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa (hash: Pqc1nBcb+JFkJlWub2Tew10ajFK81balankJIjxH0u0=)
                          14: C2356A948FE811E98B967A66C4F9AE02.roa (hash: lh6cNUm2NUCxz6vyJ9O8vhiCdo9/t7r94k2HgugqWk4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4327 (0x10e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Jan 31 17:41:18 2025 GMT
            Not After : Feb  7 17:41:18 2025 GMT
        Subject: CN=679d0b3e-11cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:86:ec:64:9e:55:0c:06:30:f6:5b:38:2d:a5:
                    26:05:93:d3:e1:0a:74:89:9e:50:52:5e:99:ae:d0:
                    41:eb:fe:2f:11:94:6c:38:7a:99:b8:27:8f:1a:71:
                    63:db:01:96:86:41:d9:bc:bd:36:c4:7c:14:54:ff:
                    77:d9:c3:26:ff:92:1a:66:15:ba:87:c4:30:65:0a:
                    a0:6b:58:62:c6:ea:cb:42:b1:ab:ab:76:ce:5f:dd:
                    fe:30:31:9d:e1:f6:d8:04:04:e1:62:29:e0:c7:b5:
                    5f:d2:29:25:5e:c2:77:59:1a:2b:55:60:9f:94:33:
                    1c:44:8b:ca:73:21:28:b6:2c:f7:ee:cc:8b:53:47:
                    b8:fe:35:d9:83:f5:a0:e0:34:53:90:d5:22:17:94:
                    7e:4e:c1:66:e9:3f:16:bd:f3:26:13:29:05:26:39:
                    f7:e5:32:d6:2a:c5:78:e5:8b:19:77:60:01:66:b5:
                    c8:b2:6a:78:88:b4:b0:8e:61:b5:d5:67:a4:4d:9f:
                    58:a1:79:91:cd:2b:de:c6:4b:19:36:eb:32:53:79:
                    c3:c4:00:24:18:6a:9e:6a:f4:6b:a7:1c:0a:96:60:
                    76:91:f1:dc:2a:c7:ae:c8:b4:11:36:05:b3:72:51:
                    57:73:17:b5:69:1a:89:46:fa:53:39:27:24:41:b7:
                    10:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:36:81:0A:FE:DC:DA:E8:A5:B8:06:7D:FE:91:99:E1:CF:7C:B4:A3
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:1a:e1:d4:e8:1c:40:6b:aa:ff:42:be:8f:9a:f8:08:cb:2e:
         91:65:b1:ea:72:37:d6:a1:84:11:a6:d5:61:1a:b2:ee:77:c9:
         35:e6:05:9d:b2:75:bd:3b:8e:87:fa:1d:f9:8d:7a:63:c4:b8:
         43:87:f7:b7:a5:dd:0d:52:25:de:98:de:94:18:3a:b3:44:44:
         e3:00:c8:6b:93:a7:03:fb:8c:ac:4b:05:b7:08:1d:d8:0c:8f:
         73:7f:20:ef:7f:3e:5c:04:10:18:68:43:20:b5:a9:3f:32:2e:
         57:aa:c3:67:a2:53:25:9c:5e:c3:f2:80:62:02:6d:77:b6:b9:
         ba:3b:63:bb:33:68:3a:3d:a4:81:03:a5:2b:d6:fd:ad:a8:3e:
         7b:42:5b:cf:a8:7c:23:cb:e2:4a:6b:78:18:be:2b:58:8e:9d:
         79:ad:49:c0:bd:c9:fe:26:03:cf:9a:9a:7b:2f:0e:43:e3:eb:
         ef:07:3e:66:f3:e3:9f:04:f2:8d:53:18:d0:72:a9:7b:1b:56:
         3f:e8:21:16:cc:4c:89:ee:33:51:a5:9a:81:82:37:4c:c9:21:
         27:fb:f6:f7:75:ac:19:32:ed:fa:79:c9:e1:67:aa:46:30:d2:
         f0:f7:94:ac:72:28:a6:53:d7:6a:8a:63:b7:de:5a:24:f5:f7:
         96:bc:cf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:18:44 2025 by rpki-client