Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
File:                     Th_fBBxL3f1RF0jkuYPctGJbmoA.mft (raw, json)
Hash identifier:          VdNOtYgu/yBPQTJOSE0aa5bcRAVdssn448UoUT7wmI0=
Subject key identifier:   A7:4F:C4:F6:26:7E:33:BD:8D:4B:B4:48:4F:22:CB:87:F6:96:BF:B0
Authority key identifier: 4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80
Certificate issuer:       /CN=A91827F2/serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
Manifest number:          01AE
Signing time:             Fri 31 Jan 2025 02:27:46 +0000
Manifest this update:     Fri 31 Jan 2025 02:27:45 +0000
Manifest next update:     Fri 07 Feb 2025 02:27:45 +0000
Files and hashes:         1: Th_fBBxL3f1RF0jkuYPctGJbmoA.crl (hash: 5vSiRF8EipP9aBEEsxjB3reYfqbUjWriCJzpATH8org=)
                          2: 3CCE23342EF211EE8BE1AB1DC4F9AE02.roa (hash: SpdJdr/6VGGqS7iqp8sOU+UWcnaMd8YGOWCMqOpdTjI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91827F2/serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80
        Validity
            Not Before: Jan 31 02:27:45 2025 GMT
            Not After : Feb  7 02:27:45 2025 GMT
        Subject: CN=679c3522-f9a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5b:12:41:ab:f9:a1:ac:04:00:fd:44:c8:f5:
                    72:55:19:f0:13:7d:90:a1:ec:53:b4:9e:3c:cf:37:
                    83:8a:25:ee:9f:b8:27:f2:c5:ea:73:1b:25:54:f1:
                    b1:9f:4a:a1:30:97:a7:fd:4e:95:86:d2:72:8d:08:
                    bc:c2:0d:dd:93:41:c5:74:b4:20:97:10:fd:70:38:
                    35:46:66:ad:5f:c3:e1:bd:c2:d5:29:92:47:8a:b1:
                    3e:94:cf:32:8a:48:53:53:83:b7:35:ab:d3:94:a6:
                    bb:36:96:18:09:c1:a5:65:d2:13:bc:3b:d1:c5:f1:
                    0e:f1:1d:93:2f:ea:b8:95:43:a5:93:53:89:9b:56:
                    e0:45:85:54:41:2c:4c:a1:ca:3b:9f:fe:28:35:e6:
                    56:e6:1e:66:af:62:f0:80:a4:13:9c:4e:8e:63:ac:
                    1e:b3:86:b9:e4:41:2b:21:51:5e:e3:2e:b3:43:6a:
                    4f:25:9a:a8:88:53:48:4e:73:05:b6:8e:0a:cf:57:
                    cd:55:81:c2:38:3f:42:60:3a:ba:6f:c2:1f:4f:04:
                    09:69:62:d0:3a:51:fe:37:6c:55:89:61:bd:99:93:
                    03:8e:aa:dc:e3:c6:51:ec:1c:b2:54:c9:24:ad:a9:
                    94:ce:e9:dc:01:70:44:47:d8:dd:19:3c:80:58:7e:
                    a8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4F:C4:F6:26:7E:33:BD:8D:4B:B4:48:4F:22:CB:87:F6:96:BF:B0
            X509v3 Authority Key Identifier:
                keyid:4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b9:12:1e:b5:85:a1:6a:ee:d0:e5:d6:6f:87:df:c7:f5:23:
         cc:dc:21:08:78:d3:c3:d4:8a:5f:5a:54:8b:27:de:b5:89:1c:
         e3:f9:02:03:6b:f9:bf:93:cd:b3:ad:52:71:fb:9e:ea:58:8c:
         69:68:aa:49:24:b0:32:53:e2:cf:2f:bb:6a:54:a8:3e:f1:fe:
         2f:7d:7c:19:ef:f2:43:05:58:76:05:bd:2e:3f:62:17:8e:b4:
         af:95:b2:48:b2:44:40:de:c0:55:44:d3:c1:93:9e:7b:34:41:
         33:75:68:8e:48:0e:0a:d2:64:dd:82:a0:48:e7:58:db:fe:07:
         39:7d:76:e2:92:f4:16:33:86:a9:99:eb:a8:87:e4:7b:73:d0:
         56:10:c4:79:bb:73:a4:89:57:b7:ed:1b:88:38:c0:83:10:57:
         6a:58:40:55:6e:be:87:3f:50:d9:bd:09:94:91:54:9b:99:ed:
         3c:19:bf:91:4e:a3:0d:28:49:70:c8:76:54:bd:ad:c1:f4:b5:
         d9:c1:58:f6:a2:0c:35:03:80:42:0d:26:66:0b:4a:9a:ba:da:
         c7:68:18:7b:a3:07:44:ac:67:56:91:ee:fe:82:a4:2e:39:da:
         eb:7b:d6:d1:5d:e7:22:66:c7:07:7d:5e:8b:86:27:a6:1b:9a:
         74:04:39:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:28 2025 by rpki-client