Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
File:                     Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft (raw, json)
Hash identifier:          HVczsgZmXUn09JZDeOLZQa8l1Gjo+qSrv+aog3QUa4A=
Subject key identifier:   8F:FF:06:E9:C3:9A:35:2E:D3:A5:89:A5:BA:AA:81:DB:EC:F5:16:2A
Authority key identifier: 49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF
Certificate issuer:       /CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
Manifest number:          FD
Signing time:             Fri 31 Jan 2025 04:19:05 +0000
Manifest this update:     Fri 31 Jan 2025 04:19:04 +0000
Manifest next update:     Fri 07 Feb 2025 04:19:04 +0000
Files and hashes:         1: Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl (hash: sp1Rx5AjamDepPttuuAYvCZ+Ll6XN4Py5akKbUAjVGk=)
                          2: 08181C0C646D11EE82448758C4F9AE02.roa (hash: aw8y769dbHtoKJEd8vQWlpw8CKdXEBliY+eMjR7xPWk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF
        Validity
            Not Before: Jan 31 04:19:04 2025 GMT
            Not After : Feb  7 04:19:04 2025 GMT
        Subject: CN=679c4f38-26cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5c:24:e0:73:98:fc:c8:d5:97:4d:87:cb:1b:
                    1f:77:4d:56:41:8e:d3:a0:89:d3:22:27:cd:bc:3e:
                    ff:f9:48:01:ff:65:be:c8:0a:37:f2:d9:13:ad:fe:
                    b5:7a:ab:21:0b:16:cd:9a:98:e4:bb:0d:0b:1b:04:
                    be:11:2b:05:af:79:97:7f:2c:90:4a:6f:36:f6:a3:
                    78:82:a5:90:31:ce:c1:84:86:20:2b:db:27:ad:d5:
                    07:49:d3:cb:9e:f4:af:2c:58:92:97:e1:3a:4a:a9:
                    53:92:d9:f1:69:c5:f8:ab:97:ee:f2:a3:34:ad:08:
                    ee:f6:d9:26:9c:2a:cc:69:4d:3b:cd:56:fe:86:d7:
                    4d:dd:10:b0:fe:52:90:fb:76:6d:87:a6:cd:72:2a:
                    2b:78:2d:e2:f5:5d:ed:03:6c:cd:77:d1:3c:9a:4d:
                    ab:47:69:1e:2d:eb:a3:0d:a5:bf:dc:bc:3c:4a:0d:
                    17:09:ea:b0:ed:be:aa:41:84:3c:c3:69:24:ff:3d:
                    55:ab:7b:7c:9f:fd:20:d4:d3:c8:92:9a:56:db:04:
                    19:04:0e:e3:3a:02:61:5d:d1:b1:91:2a:43:f7:c5:
                    4c:43:06:d1:1a:89:c0:50:ef:0d:ec:13:ba:2b:8c:
                    80:82:f4:01:d1:0d:51:f4:74:8c:ba:1d:c6:e9:a1:
                    be:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FF:06:E9:C3:9A:35:2E:D3:A5:89:A5:BA:AA:81:DB:EC:F5:16:2A
            X509v3 Authority Key Identifier:
                keyid:49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:1b:b4:47:66:e5:2a:d4:2e:0e:c9:f0:c1:9c:64:01:83:85:
         e0:0b:2e:11:30:f3:69:2e:9d:2b:66:ce:26:36:67:a6:ea:2b:
         3b:24:25:e0:d9:67:34:84:dd:ba:a6:d5:5b:01:98:9e:92:cd:
         56:70:23:e5:01:08:7b:a6:fe:62:c8:b3:4e:2f:32:bd:77:ab:
         6c:ce:89:c7:fb:77:a5:6a:f0:a0:50:6f:7c:30:e8:f8:23:90:
         c4:e0:9b:2b:48:10:e7:36:f7:31:3f:6f:82:6c:26:4e:b3:d5:
         21:71:c7:98:2f:cc:26:2e:92:e1:b3:80:d9:2a:63:2b:f4:ad:
         ed:04:2f:03:20:ef:77:3c:d9:2b:95:e1:4c:d9:90:4e:f8:a5:
         ee:07:ea:fd:2b:81:79:55:26:ae:be:ec:9d:5f:45:6a:fb:7b:
         7a:79:34:18:9e:1c:82:32:eb:c7:47:d4:8b:fe:72:6a:e6:f5:
         f8:e6:a7:5f:b3:c2:72:3a:fd:d3:ee:e7:bb:d6:76:e9:76:f2:
         0c:e9:4c:db:69:26:cf:52:4d:d3:78:83:c3:37:37:3c:b7:ca:
         6b:45:80:a9:57:ab:b3:d0:7b:f1:56:7c:df:60:fb:94:54:94:
         f0:69:c6:32:9d:f0:aa:00:93:b2:4c:17:55:86:2f:47:41:3f:
         e1:31:fa:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:09:37 2025 by rpki-client