Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
File:                     RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft (raw, json)
Hash identifier:          /+dJu7p1YtS7Ekdk+H1A21FSLNuRHC3j9vegZppUmqA=
Subject key identifier:   17:EA:F4:F0:13:E0:9D:30:20:9B:37:AA:65:5F:54:20:43:9E:75:44
Authority key identifier: 46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B
Certificate issuer:       /CN=A91982FB/serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B
Certificate serial:       04F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
Manifest number:          04EC
Signing time:             Thu 30 Jan 2025 23:45:44 +0000
Manifest this update:     Thu 30 Jan 2025 23:45:44 +0000
Manifest next update:     Thu 06 Feb 2025 23:45:44 +0000
Files and hashes:         1: RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl (hash: ryCI6cAZs+dcgwYyZ7kFfJYRW67+yRHNlHZOv24Igq4=)
                          2: 0006ED8263DD11EC9A50031BC4F9AE02.roa (hash: wRribXkCp4s0JF1oTM02hSLF0pchc7JmKUBHKJxUnUY=)
                          3: D249CE5EFE8911EBA7BEB564C4F9AE02.roa (hash: Kl/jYxUXqCil/0G6LuLn2peWneSNh/bHX1vc6KhRG0E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1269 (0x4f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982FB/serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B
        Validity
            Not Before: Jan 30 23:45:44 2025 GMT
            Not After : Feb  6 23:45:44 2025 GMT
        Subject: CN=679c0f28-42b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:09:49:ab:bd:97:a5:bc:c2:41:76:a0:9b:8f:
                    a6:e7:c8:77:20:5f:b5:5a:9a:8c:6b:4d:fe:af:43:
                    05:c3:43:be:c1:a9:41:f6:61:70:1d:92:f8:3f:5b:
                    17:14:bf:d3:1a:c0:cf:b3:08:7c:c8:26:c8:f0:ed:
                    9c:16:7c:87:1b:3e:4b:3b:f0:a3:28:d0:42:ba:28:
                    0c:87:d1:15:00:92:95:da:dd:47:63:a6:3d:15:2e:
                    2b:45:fc:82:95:bd:f5:f0:5a:de:9e:db:87:8b:02:
                    df:0c:14:d4:6e:8c:7d:3b:f6:d7:fa:e1:51:fc:ab:
                    b9:09:46:95:40:20:ec:ed:eb:1a:dc:bf:49:bd:85:
                    5b:22:a5:ab:50:d3:a8:a8:f9:a0:bb:fe:4b:fc:41:
                    88:40:c1:12:dd:4a:6a:4c:a9:fe:1c:f1:be:e0:46:
                    87:58:5e:81:81:7e:e4:c6:d4:a3:33:80:d7:58:87:
                    11:17:78:ee:24:de:c1:49:da:4d:94:68:56:b9:6d:
                    33:16:fb:c0:cf:70:da:ec:73:3e:b4:2e:a9:25:62:
                    fa:f1:aa:59:99:98:f2:eb:bb:c3:8f:f0:64:2c:2f:
                    33:91:27:31:4b:48:08:d8:37:a6:ef:fc:9d:df:d6:
                    51:ea:5d:ef:1e:52:a0:b5:4c:5c:e0:95:64:7d:12:
                    ef:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EA:F4:F0:13:E0:9D:30:20:9B:37:AA:65:5F:54:20:43:9E:75:44
            X509v3 Authority Key Identifier:
                keyid:46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:45:65:62:f7:27:97:f4:45:12:22:c1:64:52:b3:fb:31:dc:
         41:c0:4d:ff:9c:87:c5:03:9a:71:2a:e1:0b:3e:48:e4:7b:18:
         5c:91:b8:0f:5e:4b:f9:a2:65:70:4a:e8:b2:21:67:ca:9c:b3:
         07:a3:2b:b0:dc:35:de:f2:b1:bf:aa:df:3d:5c:64:fc:6d:15:
         40:ba:a0:a2:b9:3d:ca:95:e9:9c:94:05:20:77:c7:f2:cc:ea:
         fd:60:50:f8:4d:1f:69:b8:1e:3a:4b:2c:83:19:b1:92:d4:fd:
         1f:49:03:45:8b:81:44:c2:50:cd:87:5c:5f:69:07:b4:71:22:
         e7:b3:96:65:1b:a9:59:8a:54:a2:96:15:ab:7f:e0:c8:2b:47:
         39:e4:82:40:05:18:73:0c:04:c2:9e:95:09:de:2c:6a:58:86:
         19:57:1d:12:91:e1:b9:28:db:1d:51:8c:6f:8e:84:8f:c4:af:
         a9:6f:ac:2b:c8:4b:88:c3:32:80:89:66:22:b2:20:ae:c0:a9:
         aa:cb:44:bf:66:b4:90:61:34:dc:2c:11:a3:3a:d8:30:10:6f:
         dd:70:b6:23:f7:79:01:ce:89:af:e9:da:f0:94:e5:f6:a4:8a:
         3d:ff:71:87:11:aa:e0:af:51:cd:e0:00:60:3a:bd:4e:63:5e:
         82:38:54:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:28 2025 by rpki-client