Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft
File:                     KOoVV7meKxJ1Uc00DDqvTAphAGs.mft (raw, json)
Hash identifier:          txsJDsMA9Goz9UOU2X+ul1E1Yyz+6bxQLs2V+3Pg53k=
Subject key identifier:   61:DF:54:65:CF:5A:31:50:00:D9:80:70:BE:F4:DE:FC:B4:B8:1B:83
Authority key identifier: 28:EA:15:57:B9:9E:2B:12:75:51:CD:34:0C:3A:AF:4C:0A:61:00:6B
Certificate issuer:       /CN=A91900BF/serialNumber=28EA1557B99E2B127551CD340C3AAF4C0A61006B
Certificate serial:       0334
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOoVV7meKxJ1Uc00DDqvTAphAGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft
Manifest number:          0327
Signing time:             Fri 31 Jan 2025 01:16:08 +0000
Manifest this update:     Fri 31 Jan 2025 01:16:07 +0000
Manifest next update:     Fri 07 Feb 2025 01:16:07 +0000
Files and hashes:         1: KOoVV7meKxJ1Uc00DDqvTAphAGs.crl (hash: p3Y6JO+DkZR6/BnvSU31QnhYbPl7UkY7AHtrquszjRk=)
                          2: BFFAF880912711EE92065180C4F9AE02.roa (hash: +cOVT6IUlf5AF9Iwe8S2ZR7C+kK58G6HwMNDUoEK6dU=)
                          3: F505DCE605AB11EEAAC9A54DC4F9AE02.roa (hash: TgaszdDD0RtD3WBLop2xKd2Re72k68i95Zea6tpoI9M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820 (0x334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91900BF/serialNumber=28EA1557B99E2B127551CD340C3AAF4C0A61006B
        Validity
            Not Before: Jan 31 01:16:07 2025 GMT
            Not After : Feb  7 01:16:07 2025 GMT
        Subject: CN=679c2457-448a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8e:82:06:01:e0:a3:16:a6:ce:59:6e:dc:29:
                    02:30:33:ba:25:5d:86:a2:7d:3a:0d:92:7e:7d:0f:
                    0d:9f:fb:f8:9d:2c:38:12:3d:79:40:61:53:b2:0e:
                    18:2e:a3:5e:39:da:87:f0:b0:36:d2:30:ce:37:ff:
                    08:f1:7a:74:b8:30:f2:de:6d:23:d0:55:fa:1c:f9:
                    8f:bb:c8:6a:91:50:69:21:b0:9b:5c:6d:5f:18:bc:
                    b8:fa:25:32:14:a4:80:5c:94:6b:a5:5e:a9:3d:50:
                    dc:11:68:9c:50:3e:74:08:d7:60:5c:89:54:8b:0c:
                    c8:36:7d:d0:a5:6a:e3:ef:73:b3:61:34:86:a6:f1:
                    4b:32:68:3a:36:41:96:92:e0:4a:27:3d:ac:93:c3:
                    94:e2:f4:db:cc:d6:42:10:2c:95:5d:ae:ca:71:7c:
                    b5:cc:d5:83:7c:e9:76:6d:16:f8:1c:35:c5:22:24:
                    2d:5a:1c:39:36:57:f3:16:9c:c4:c9:50:f8:0b:6c:
                    d7:64:71:dc:53:92:79:09:96:d1:be:4d:36:90:2f:
                    d8:0d:d0:7e:39:67:ee:17:ff:87:b7:38:12:ef:aa:
                    c0:98:8d:17:b2:e0:b3:0d:49:8a:ee:7e:80:85:9f:
                    69:de:c4:d5:67:82:c4:56:f6:be:63:78:fe:4b:43:
                    ee:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DF:54:65:CF:5A:31:50:00:D9:80:70:BE:F4:DE:FC:B4:B8:1B:83
            X509v3 Authority Key Identifier:
                keyid:28:EA:15:57:B9:9E:2B:12:75:51:CD:34:0C:3A:AF:4C:0A:61:00:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOoVV7meKxJ1Uc00DDqvTAphAGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:1c:5f:d8:87:c0:d1:ef:23:c7:72:30:33:ef:dd:a0:69:41:
         46:10:c9:e7:3b:d4:db:82:2b:9b:6a:aa:bb:1e:25:61:90:ce:
         73:6b:80:49:46:ee:32:49:0e:51:98:e6:96:48:f3:e1:7a:40:
         a5:60:af:69:21:ab:cf:f9:1e:8e:d4:8a:24:12:2c:88:7b:c4:
         b5:be:50:70:61:d0:01:52:12:6d:80:0d:9b:21:cd:9b:3d:22:
         57:b8:56:8a:82:af:28:24:8b:30:d8:eb:c1:44:05:41:96:39:
         36:81:45:e9:8a:7b:cc:11:77:4a:5c:c7:08:0b:43:80:a2:3a:
         5e:1b:45:5c:d5:d7:da:25:06:8d:37:24:8a:d0:33:e4:82:49:
         99:a6:a2:a1:d7:7b:b7:b9:10:a7:7f:b7:b8:d3:19:c4:8b:d9:
         18:aa:9f:6a:f1:4f:d5:b9:1e:dc:fb:b7:d3:32:d6:bf:db:e6:
         0a:16:d7:3e:05:3c:00:fe:44:52:5f:a7:7b:77:82:8e:79:51:
         39:6a:05:bf:86:39:4d:27:b5:62:cc:ea:59:0e:df:79:c3:37:
         7d:79:f8:51:40:3d:f8:2f:cf:36:df:26:45:fb:c0:c2:70:b8:
         b7:1d:19:87:2a:95:34:9e:7d:5d:97:90:6d:57:e3:fa:c3:7b:
         19:08:55:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:27 2025 by rpki-client