Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft
File:                     apjAwIy9NBmpCCuGDSm_qXL98qc.mft (raw, json)
Hash identifier:          sqF58QXR2fwEx868cbsg+J5rFGBxX3B5D0yrNW9JJ3w=
Subject key identifier:   7E:D6:28:FA:32:80:1F:53:77:38:1F:20:C7:60:BE:86:9A:7E:21:84
Authority key identifier: 6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7
Certificate issuer:       /CN=A91A2BD6/serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7
Certificate serial:       03F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft
Manifest number:          03EE
Signing time:             Fri 31 Jan 2025 00:37:14 +0000
Manifest this update:     Fri 31 Jan 2025 00:37:13 +0000
Manifest next update:     Fri 07 Feb 2025 00:37:13 +0000
Files and hashes:         1: apjAwIy9NBmpCCuGDSm_qXL98qc.crl (hash: c3zGFLh4zEXmWxDglUIvM2k+kPDvv5rmxZnFcThWW0g=)
                          2: 61B3CBDC631911ECAE6AA33DC4F9AE02.roa (hash: /+PqdcGfeQGq1JSsbPZ7utBGw8SAzSRzzxhLFAim1J0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1010 (0x3f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2BD6/serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7
        Validity
            Not Before: Jan 31 00:37:13 2025 GMT
            Not After : Feb  7 00:37:13 2025 GMT
        Subject: CN=679c1b39-933e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:83:66:5c:ab:2a:1b:c1:55:2c:95:a1:5a:41:
                    9a:14:f4:38:09:c9:a2:bb:fa:62:01:5b:17:c8:1a:
                    1b:44:51:76:9f:80:dc:e3:c9:f2:de:1b:ed:30:50:
                    92:ce:54:fe:b3:2a:e6:cf:d1:19:68:70:11:39:a6:
                    d8:7d:72:d5:c3:39:7e:dc:2b:b8:39:a2:a7:f3:6a:
                    21:cc:7a:d3:2f:94:96:04:01:ac:80:20:ad:91:f0:
                    a8:94:31:68:a7:8f:34:81:66:d8:2e:20:f4:dc:37:
                    25:84:f3:2d:a4:2e:a7:72:c9:f1:be:9c:09:be:82:
                    01:34:62:3b:9f:fa:1e:9e:1e:5a:4a:42:11:c7:92:
                    83:f7:ac:f9:71:d6:6e:57:d8:3a:0b:03:1a:2d:9d:
                    b2:64:f0:aa:45:f1:e4:5f:2a:4e:9a:30:99:9a:51:
                    2a:80:b1:e9:6c:35:3d:57:08:a4:ed:50:19:95:52:
                    0c:be:13:f4:91:8a:27:31:9c:20:25:00:b2:4d:fc:
                    7c:94:dd:92:f1:58:d6:9d:65:9f:42:8a:18:91:4f:
                    52:b5:82:ab:2f:ed:ae:9a:40:4e:54:7a:52:f0:cf:
                    59:65:8f:5e:26:7d:44:98:56:ee:97:ec:1a:30:ca:
                    31:a5:fd:3c:26:81:d2:20:01:cf:2f:20:80:2f:43:
                    93:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D6:28:FA:32:80:1F:53:77:38:1F:20:C7:60:BE:86:9A:7E:21:84
            X509v3 Authority Key Identifier:
                keyid:6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:61:6c:0b:ba:db:03:2f:da:6c:c0:09:c1:4f:15:fa:ef:6e:
         71:40:06:85:fe:f5:15:60:19:70:c1:f3:6b:29:7b:fb:31:de:
         b4:11:2e:1d:5d:09:9d:ed:12:84:df:aa:7d:84:9b:36:08:e7:
         bb:d3:80:d5:0c:04:c3:0e:6c:0d:96:5e:5d:bc:8a:fa:18:94:
         f5:d9:8a:5b:5a:1e:fc:71:74:96:fb:fb:55:7d:00:e5:c3:f8:
         b3:7f:ed:b3:55:8a:be:9e:b6:de:b2:b7:57:1b:c5:1b:1f:ff:
         cf:65:ef:13:b4:44:5b:9d:32:e6:0e:5b:45:9a:e0:79:ce:2c:
         1b:b7:7a:70:38:75:6f:6e:92:08:77:19:77:7d:40:4a:2e:7d:
         05:62:88:8b:68:48:e3:07:cd:bf:d1:9e:99:7d:36:ab:c0:c9:
         97:9f:dd:a6:98:50:18:52:25:60:0d:b0:c8:8d:44:d4:d2:f8:
         da:d9:5f:f2:fe:23:85:57:bf:8d:98:f3:25:2e:18:41:54:d8:
         2d:58:0d:27:62:64:b2:0f:74:6d:35:29:97:6b:fd:13:09:44:
         06:71:a1:90:5e:79:97:0f:0d:bf:4c:19:63:2e:82:9f:da:73:
         68:ed:db:7a:04:3f:76:6d:fc:54:f0:07:d6:c6:26:1f:87:bb:
         8d:8b:75:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:58 2025 by rpki-client