Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft
File:                     fDPCHh829n5MagTrI5AZrXcryyo.mft (raw, json)
Hash identifier:          xHuNgSydaOOc9ro8VdCj5lo3QUNHbYjFjiNLBcxX4Xo=
Subject key identifier:   B8:A8:24:DC:FC:9A:52:94:24:31:AC:CD:92:84:A4:7B:A1:F3:53:54
Authority key identifier: 7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A
Certificate issuer:       /CN=A91836C4/serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A
Certificate serial:       0184
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft
Manifest number:          0181
Signing time:             Fri 31 Jan 2025 02:55:48 +0000
Manifest this update:     Fri 31 Jan 2025 02:55:48 +0000
Manifest next update:     Fri 07 Feb 2025 02:55:48 +0000
Files and hashes:         1: fDPCHh829n5MagTrI5AZrXcryyo.crl (hash: 9DW2m2/SgOzxapDA/l1cg90rLn4VONW/tQ+t+/T7Km4=)
                          2: 37A0ACFC8FCD11EDB4772D55C4F9AE02.roa (hash: OVe6KSw+7kYYiHPF4YI7Y6sSZ8QGj8mE1P0YOqWt/tI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91836C4/serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A
        Validity
            Not Before: Jan 31 02:55:48 2025 GMT
            Not After : Feb  7 02:55:48 2025 GMT
        Subject: CN=679c3bb4-aabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7b:80:9e:a5:c2:c7:00:d0:51:fb:6a:b0:f1:
                    b4:c2:26:ab:d0:6a:8e:b8:52:ab:84:32:62:ad:35:
                    6a:94:fa:9a:54:bf:18:9a:20:9c:78:09:91:1f:d8:
                    9a:1a:bb:d5:ae:10:fb:00:c7:26:5c:d6:87:8a:c2:
                    89:29:e6:39:f9:2f:b7:aa:1e:9c:8e:e7:ec:66:3c:
                    76:90:db:7d:6b:63:db:6c:58:a0:ed:39:e3:22:1f:
                    ff:9d:d5:6d:0d:65:84:d0:25:80:0b:5a:e4:be:aa:
                    48:28:a6:b4:e0:2b:3d:1f:8d:41:12:9e:e5:01:40:
                    de:08:a8:d7:ea:96:b7:54:6f:a4:ca:22:a4:87:c6:
                    59:62:44:38:6c:a0:5c:c6:7a:97:19:73:e9:42:7e:
                    af:e5:d8:dc:79:84:6a:90:91:98:d2:e0:f1:0e:2f:
                    e3:43:53:c2:67:21:e1:75:3f:35:cf:71:65:35:b5:
                    33:c0:55:13:9d:0d:a6:3b:da:0a:b9:b6:60:9c:00:
                    0a:a1:84:b7:47:60:eb:ce:32:90:86:da:aa:8b:78:
                    aa:19:4b:2a:e7:8f:08:80:f6:9a:44:ac:0e:81:7c:
                    a8:12:33:69:70:fd:40:8d:c8:c1:a5:05:7a:2b:68:
                    3e:6b:1d:6d:3d:b1:47:b8:f4:e5:dd:db:5d:9f:45:
                    db:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A8:24:DC:FC:9A:52:94:24:31:AC:CD:92:84:A4:7B:A1:F3:53:54
            X509v3 Authority Key Identifier:
                keyid:7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:34:e2:8f:20:cf:39:ea:8b:11:1e:7f:14:b9:b2:4b:9e:6b:
         f5:5b:25:88:95:8d:64:da:36:7e:22:7f:66:0e:47:ff:51:80:
         6c:6b:f3:38:22:b2:1e:1a:d2:b9:b3:e7:bc:60:be:f7:f7:e6:
         30:d3:3b:30:ef:ad:5b:69:62:83:a3:e3:9e:3e:0a:30:b2:0e:
         49:03:7e:3f:00:40:6f:c8:fe:35:a7:48:7c:c1:a5:56:24:f7:
         87:8a:8e:5d:66:56:a4:52:bc:49:00:c2:a5:be:b0:02:5a:35:
         3d:ab:10:79:11:42:89:65:9d:21:70:8b:bd:4c:14:40:fa:5d:
         db:16:24:b5:f0:6b:9b:ff:63:f3:f8:c2:55:88:dc:6b:02:db:
         6c:ff:74:de:89:20:75:2c:26:42:05:a4:0d:58:b7:e5:f2:41:
         90:6d:94:bf:36:55:57:bd:fb:4a:3f:b2:c2:cb:85:63:c6:c0:
         b6:4b:63:e6:60:d1:e5:82:86:c3:f8:f3:66:e5:c8:b1:91:70:
         f5:15:08:4a:31:9a:23:6f:bf:4f:f9:7b:3c:24:41:a4:ec:5f:
         dd:1d:83:9f:1c:03:bc:66:8c:ed:7c:6a:6a:8e:9e:8f:1a:ee:
         16:ae:dd:cd:a5:f1:9e:dd:48:db:fd:08:25:e7:4c:f1:7a:48:
         48:1b:ba:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:26 2025 by rpki-client