Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
File:                     5VbchrlOkc-bLilEqF9xaS2glNI.mft (raw, json)
Hash identifier:          NbXZvexp4kSS32u5u+NyL93UzA/vqiWYBnVRR0rewsw=
Subject key identifier:   F9:83:1F:34:7E:97:05:CF:6B:F1:59:89:37:81:65:66:1D:83:6B:D1
Authority key identifier: E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2
Certificate issuer:       /CN=A919B20D/serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
Manifest number:          DB
Signing time:             Fri 31 Jan 2025 04:43:36 +0000
Manifest this update:     Fri 31 Jan 2025 04:43:36 +0000
Manifest next update:     Fri 07 Feb 2025 04:43:36 +0000
Files and hashes:         1: 5VbchrlOkc-bLilEqF9xaS2glNI.crl (hash: D+jMwHqXDhh92A3w7Gu0uPF3SQHqaUaYsuEbFdWIVhI=)
                          2: 4B3E4A0693DE11EE81D1045FC4F9AE02.roa (hash: 4Cz/oqpVomdj5KjMuMHHcnulXM/0E2/i4QAzsSN/Y08=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B20D/serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2
        Validity
            Not Before: Jan 31 04:43:36 2025 GMT
            Not After : Feb  7 04:43:36 2025 GMT
        Subject: CN=679c54f8-f8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5e:0e:c3:ef:87:f8:e1:8f:15:d9:21:1f:69:
                    9e:0d:b8:52:d9:aa:c3:ae:61:9f:e4:04:af:a7:3a:
                    a3:a7:b2:ca:27:47:ab:62:00:3b:c2:a2:2d:1c:09:
                    94:7f:dd:d9:bf:cf:4a:0a:08:17:4f:c7:38:e4:c7:
                    a6:e1:6b:10:a8:73:2e:5e:ce:e3:2c:c7:77:02:30:
                    64:de:22:70:c5:96:d0:42:68:f6:ae:a7:e2:32:5f:
                    cc:29:f4:40:f0:b1:98:69:59:12:db:c0:fe:82:65:
                    d7:96:97:86:cb:bd:7c:83:47:4b:3e:2a:79:7b:e0:
                    3a:46:8c:86:9e:58:d3:c9:e1:16:23:cf:20:b5:04:
                    70:37:c8:a9:a0:6c:31:3e:28:02:4a:29:14:ec:9c:
                    33:1b:8c:d2:41:b0:1f:12:d2:24:b0:b9:c4:3b:46:
                    a7:91:57:ee:99:34:5d:e3:7e:e5:31:03:45:1c:f5:
                    ca:29:18:7f:27:1d:0f:d9:c7:29:43:ff:b4:12:45:
                    2b:fc:fe:1b:d5:e5:70:29:80:28:c2:ef:0a:c9:6e:
                    a8:ad:fc:1b:c2:25:ec:5a:0b:dc:90:ce:11:21:c6:
                    37:3b:66:d6:16:f5:eb:c8:2d:a6:65:a2:4f:5f:e2:
                    f9:a1:16:3f:33:67:76:fe:85:e6:27:94:77:07:9e:
                    d3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:83:1F:34:7E:97:05:CF:6B:F1:59:89:37:81:65:66:1D:83:6B:D1
            X509v3 Authority Key Identifier:
                keyid:E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:22:22:e2:35:7f:31:65:3e:1b:86:c4:e3:c4:8b:e2:68:53:
         a1:30:57:4f:15:e4:1f:02:0c:aa:d6:d6:c3:b1:64:5a:d2:0c:
         a4:5c:dd:e7:e1:2f:ce:d8:21:4e:ea:21:4c:fe:26:7a:2a:0d:
         e0:67:11:2f:74:7d:ec:0a:84:82:05:61:8a:57:a0:0b:f7:21:
         b8:5f:5b:af:21:75:0f:95:5d:9f:a1:b8:ab:9d:c8:b1:e5:9d:
         9b:ae:a4:60:d5:98:9e:ca:53:2f:3f:59:7f:d6:78:a6:44:b9:
         9c:f2:d7:d7:01:5c:7d:24:58:55:ea:28:59:cb:53:38:46:a4:
         5a:42:58:02:e7:58:78:ca:fa:4d:f1:2d:cd:3b:f5:b1:5c:36:
         f1:ff:91:fc:f3:19:a1:7a:76:d8:d3:57:c5:f9:67:7c:03:6c:
         0b:7d:b1:bd:d8:5b:39:d3:7d:82:ca:a5:0c:28:a0:4f:fc:a0:
         18:4b:93:94:8f:05:c7:57:5f:c0:d4:02:cf:d2:00:ff:b7:dd:
         9e:df:6e:05:aa:d6:29:a5:b6:ec:25:2e:c2:64:57:4b:2b:7f:
         27:cf:56:0b:72:7f:24:ed:fa:7f:c6:9c:59:63:dd:c8:3a:47:
         cd:7e:04:6b:a0:0d:6d:e7:74:12:7b:3e:b9:67:3d:da:15:df:
         e9:bf:36:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:20:25 2025 by rpki-client