Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
File:                     _UnAZPyj6S3swYqPUElLIfwB8lY.mft (raw, json)
Hash identifier:          hgm+zWeVbZfn1JQac9IsQAbRdqm/x6MRnm0wdmFOFDs=
Subject key identifier:   A4:92:35:11:9E:AF:F0:C0:12:A6:8E:75:8F:DD:1E:1C:4B:1C:A9:7E
Authority key identifier: FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56
Certificate issuer:       /CN=A91934DE/serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
Manifest number:          015A
Signing time:             Fri 31 Jan 2025 03:23:26 +0000
Manifest this update:     Fri 31 Jan 2025 03:23:26 +0000
Manifest next update:     Fri 07 Feb 2025 03:23:26 +0000
Files and hashes:         1: _UnAZPyj6S3swYqPUElLIfwB8lY.crl (hash: dNqpe5dZvNmUNGpK9bq+jHr++/FH4hOn25gmgFa/Csw=)
                          2: 358556D2D98F11EDA9A38028C4F9AE02.roa (hash: mj8BZaD2prJGm8LGJCj6rtZxHkzEu6R89n+rZKAZIEg=)
                          3: 05F11BACDF4A11EDA4190947C4F9AE02.roa (hash: bewV6KFz5UfLmXyQpYAW/eskr2prQjBvAcy6H5aMFUU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91934DE/serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256
        Validity
            Not Before: Jan 31 03:23:26 2025 GMT
            Not After : Feb  7 03:23:26 2025 GMT
        Subject: CN=679c422e-4c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:26:52:c3:2a:51:a1:bf:bf:b5:2d:49:e0:
                    73:be:fa:97:53:6c:4d:d2:df:31:42:be:44:7f:cf:
                    2b:87:bd:13:d1:db:78:0d:d8:b5:23:a8:f9:75:30:
                    cf:c3:c7:e3:02:b7:60:f7:18:1e:f0:a1:d9:46:27:
                    cc:af:0e:51:c3:d5:5c:48:78:0f:37:51:16:82:79:
                    f7:44:ee:b7:e0:e2:2d:b5:69:b7:8d:1c:55:bb:ce:
                    5e:7b:4a:54:cc:e8:ca:b2:30:1a:d9:85:1b:6b:19:
                    69:2f:98:36:6d:b7:14:aa:33:47:d4:15:fd:48:cd:
                    15:0b:0a:f9:0d:ec:d8:b1:ce:62:3c:ed:3d:fa:ce:
                    43:fa:33:ff:24:ee:97:25:52:0d:9e:33:97:5b:6b:
                    dc:a8:4a:92:d2:b2:53:50:60:97:68:36:e6:0b:a2:
                    a5:9e:1c:87:76:3e:5d:00:ce:c0:c5:3e:43:d4:e2:
                    5c:6d:24:12:e8:ad:dd:13:f1:69:cd:28:5b:fe:09:
                    9f:8f:67:f5:62:db:21:83:5b:97:c6:fe:bb:55:93:
                    08:4f:c1:b6:a2:ad:b9:ef:6c:83:30:ba:83:d9:79:
                    14:ff:b4:91:53:bd:12:83:c3:60:df:17:8c:de:0a:
                    0f:b0:f1:5b:de:af:98:19:38:49:f4:24:28:10:0f:
                    8f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:92:35:11:9E:AF:F0:C0:12:A6:8E:75:8F:DD:1E:1C:4B:1C:A9:7E
            X509v3 Authority Key Identifier:
                keyid:FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:23:da:56:eb:bf:09:02:06:22:b6:57:4c:f1:4b:13:cd:c4:
         99:f5:84:5b:eb:15:79:ce:af:5e:b5:b6:a5:2f:94:ed:51:9d:
         55:54:a8:9b:41:66:d2:78:3e:88:4d:19:f4:a3:52:14:87:08:
         c6:7d:c0:46:db:3f:6d:96:cd:24:a0:c8:00:23:19:0a:59:00:
         5b:63:ca:3a:83:50:23:4d:6c:02:48:39:7e:31:82:08:b6:13:
         96:cb:bb:70:28:3a:84:7d:f1:b0:b8:f8:76:65:9e:ad:e7:5b:
         dd:76:3e:c8:af:c6:a4:d5:cc:da:b5:87:2c:60:c9:81:43:85:
         c1:1c:7e:ac:d1:f6:b1:ad:49:70:de:ac:c9:6e:a3:fe:1c:32:
         f7:73:fe:19:84:f0:f2:4f:cf:4c:78:e7:38:10:c9:26:b5:51:
         7a:cc:21:3e:f3:00:53:2a:c2:04:01:cd:49:d1:2e:cb:86:1d:
         a2:56:77:a8:25:24:2a:2d:19:00:64:ad:73:35:3a:f3:1e:ac:
         6c:df:20:d7:c6:23:dc:95:74:3e:6e:be:03:c5:21:f1:0b:a7:
         2f:7f:57:4b:23:ba:64:f3:f9:47:26:e7:69:3b:a9:3f:76:59:
         6f:00:df:a9:20:02:0e:0e:27:98:68:00:85:fc:5d:39:6f:47:
         14:ee:7a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:37:57 2025 by rpki-client