Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
File:                     u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft (raw, json)
Hash identifier:          6pUd4VGIiK9+Wim+cQfdnWbFExmywrSqJDWnsk2BnCM=
Subject key identifier:   12:99:B8:10:1A:A2:A8:8E:22:81:2D:7B:F4:A4:7A:41:24:D7:9B:26
Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32
Certificate issuer:       /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
Certificate serial:       0108
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
Manifest number:          0104
Signing time:             Fri 31 Jan 2025 04:08:04 +0000
Manifest this update:     Fri 31 Jan 2025 04:08:04 +0000
Manifest next update:     Fri 07 Feb 2025 04:08:04 +0000
Files and hashes:         1: u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl (hash: dt2ttUEpfEDUikxOsokac/PtLUZZDSjbg2IEkXV4maM=)
                          2: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (hash: aCNtxlW0MshwMMlV+N563xkNmlCQdXbxR/lNk+drIlA=)
                          3: FD57EA90508511EEBA4C0E2BC4F9AE02.roa (hash: rOkP4Vb8B8/6UrNv3XnkLOomlf0wseQaO6Jnqbw75S0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
        Validity
            Not Before: Jan 31 04:08:04 2025 GMT
            Not After : Feb  7 04:08:04 2025 GMT
        Subject: CN=679c4ca4-cb16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:84:3d:12:ab:b8:74:e3:5f:a3:18:87:03:c9:
                    63:e4:09:b3:63:4d:4f:54:df:b4:e6:47:a9:2b:70:
                    43:c5:7d:48:a5:fa:b9:af:11:78:52:52:77:1e:62:
                    fb:da:df:11:33:ba:21:9d:a5:59:ee:87:21:a8:f1:
                    07:6d:15:b6:96:27:46:ae:b7:23:06:05:98:5e:5b:
                    68:54:76:e9:30:25:e3:89:1c:02:71:87:50:45:16:
                    56:30:9b:aa:25:ed:59:03:5c:13:c8:b2:f2:84:f8:
                    b1:8e:69:4d:1f:72:28:89:80:75:50:63:b4:c2:dc:
                    14:05:0d:41:0d:a2:11:0f:cb:15:14:7e:e9:dc:f6:
                    88:99:de:9f:97:a6:9c:67:ff:59:8c:e3:28:a5:f1:
                    71:d0:01:11:fe:b2:2d:95:26:ae:56:af:a1:a4:17:
                    45:90:a6:15:32:8a:e4:e7:e5:3e:23:fa:79:ec:d1:
                    1e:f1:af:89:80:15:cc:10:04:00:47:ff:c9:c5:cb:
                    42:b6:61:32:fe:a0:af:d3:d5:f9:1e:04:0d:b1:07:
                    84:26:f2:8e:cd:bf:ee:50:ec:87:69:0f:fc:ff:2b:
                    bf:ee:f2:27:f3:d4:01:94:cc:20:1e:98:d2:90:3c:
                    3b:37:63:6e:c0:65:33:e0:42:46:6e:ac:3f:9a:f5:
                    2e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:99:B8:10:1A:A2:A8:8E:22:81:2D:7B:F4:A4:7A:41:24:D7:9B:26
            X509v3 Authority Key Identifier:
                keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a2:cb:aa:5a:1c:1e:92:71:9e:a8:87:3e:0a:99:29:f3:d2:
         e4:c4:fe:8c:ad:d2:57:e0:f7:54:a9:95:c9:6d:55:c7:ab:dc:
         87:9a:e6:57:5c:03:64:23:e5:eb:33:1b:1d:11:3e:12:e4:41:
         58:46:57:6b:d0:07:e0:51:91:7d:55:74:12:77:97:fa:60:2f:
         02:f2:a7:3e:21:23:36:88:30:5b:3f:1a:ca:5e:45:4a:89:08:
         c0:bc:d9:68:8a:29:e8:de:28:0a:6a:19:ec:c6:5e:e0:54:9d:
         69:8e:11:d3:88:c0:13:95:85:07:ac:eb:1b:1e:ee:ad:d4:7b:
         4f:76:6d:41:a0:e7:03:04:24:21:cc:8d:9c:d0:fd:b6:c9:05:
         66:c5:a7:c7:00:d7:c4:2a:23:cf:86:40:2c:2e:40:2b:21:7f:
         f9:8a:27:a0:93:13:fe:61:d1:0f:1e:87:4a:00:6d:25:1d:cf:
         bf:05:16:a3:67:68:fd:ce:b1:bc:7a:0a:20:58:af:ec:67:9d:
         6f:37:1b:ba:1a:8b:9c:f1:48:a7:bb:b2:ee:c3:7c:88:2c:6d:
         4c:d0:ef:86:86:53:db:c9:3d:c4:d4:98:b2:68:f8:67:c2:16:
         07:a4:8f:1b:2f:ba:e1:2c:11:f1:ec:62:d2:82:7d:8e:5d:9c:
         62:b3:93:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:24 2025 by rpki-client