Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft
File:                     UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft (raw, json)
Hash identifier:          V6i270U+sCu5taRqHF3cASRWqnDqYgbeOkYHh3l3Bs0=
Subject key identifier:   F5:6C:1A:B1:C1:F4:F9:10:8B:92:F9:58:26:42:ED:D6:58:59:D5:ED
Authority key identifier: 50:08:BE:04:1F:99:97:B2:59:D2:58:44:83:A5:3A:0D:FF:0B:17:8C
Certificate issuer:       /CN=A91A3D65/serialNumber=5008BE041F9997B259D2584483A53A0DFF0B178C
Certificate serial:       0198
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft
Manifest number:          0194
Signing time:             Fri 31 Jan 2025 02:47:16 +0000
Manifest this update:     Fri 31 Jan 2025 02:47:16 +0000
Manifest next update:     Fri 07 Feb 2025 02:47:16 +0000
Files and hashes:         1: UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl (hash: W7dYybWEccZVJTqm1y0Fky1/jp08x4a5dtf4JwHhHHc=)
                          2: 57DD65D0D1FB11EDA0A31C2FC4F9AE02.roa (hash: FNFbf5sb9V0I6f51NgIRl7bd8+WZE2kCB/02TRMhw6k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3D65/serialNumber=5008BE041F9997B259D2584483A53A0DFF0B178C
        Validity
            Not Before: Jan 31 02:47:16 2025 GMT
            Not After : Feb  7 02:47:16 2025 GMT
        Subject: CN=679c39b4-39fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:eb:62:f0:bb:d6:74:a6:7a:16:b7:88:b0:6c:
                    eb:ed:68:c8:4c:26:ed:0b:cb:11:56:1e:07:55:50:
                    9f:fa:cb:a9:80:ac:d6:6f:af:c2:f4:bd:64:0a:93:
                    87:cf:a7:8c:33:3e:bf:19:86:9b:de:c6:92:e1:8c:
                    0a:bf:a5:28:b5:a8:62:ca:f0:bc:a4:8c:02:62:6d:
                    06:50:f8:08:9f:fe:32:e6:97:59:e3:af:c7:7c:8d:
                    9a:86:5f:9c:d5:b2:1c:40:4d:b4:09:bb:65:e2:63:
                    5e:a1:59:1f:a8:80:6b:c6:b1:a7:b5:94:13:ac:b3:
                    8a:bf:11:73:4c:68:14:b9:26:e8:0c:33:39:d8:54:
                    8c:a4:e3:54:53:b8:ee:c4:12:54:dc:f1:e3:45:d5:
                    bd:27:9a:9c:70:5d:9a:44:b1:79:7e:ea:74:c3:18:
                    10:15:16:49:d5:1e:0d:af:c6:a3:f7:1e:f3:48:f2:
                    ea:a8:18:a1:02:ee:32:eb:56:2e:b7:ab:2c:e5:90:
                    0b:b4:57:a8:46:b6:96:d2:5e:ef:aa:c9:80:16:d8:
                    86:02:c4:79:93:af:8f:cc:71:ef:e2:a0:4e:5a:15:
                    50:2d:eb:d6:40:d7:37:2b:a7:13:9e:4e:78:a9:5e:
                    95:c4:c3:57:78:b8:f3:f0:19:b0:d6:9b:0c:33:0a:
                    df:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6C:1A:B1:C1:F4:F9:10:8B:92:F9:58:26:42:ED:D6:58:59:D5:ED
            X509v3 Authority Key Identifier:
                keyid:50:08:BE:04:1F:99:97:B2:59:D2:58:44:83:A5:3A:0D:FF:0B:17:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:71:74:6b:d7:d2:d0:ee:f5:e2:df:48:37:51:d2:bd:63:d9:
         58:ad:93:b1:b9:ff:cc:ff:53:f6:a4:78:5d:b7:bc:ec:07:7a:
         c4:6d:c9:ec:af:b3:50:94:03:b9:bb:62:35:3c:e1:d6:64:a0:
         6b:3c:94:d5:a1:06:77:87:fe:03:fa:c2:78:6b:10:24:9b:32:
         dc:b7:3d:1a:20:f6:4d:75:26:6d:45:04:08:4b:2a:43:c6:0b:
         bd:a5:1e:70:32:f9:77:78:fb:d9:c3:21:b5:8b:e4:83:87:b3:
         05:18:63:d6:db:9b:c6:e1:11:ab:f9:ee:79:27:c2:69:bf:0f:
         ae:88:9b:22:b0:2e:b5:15:77:9c:51:06:93:5c:a5:36:d4:f6:
         b4:4a:ed:f2:6e:3d:75:04:b3:9c:44:36:c8:2e:76:fd:21:42:
         c5:4e:44:1d:52:19:80:4f:67:72:2a:ad:6a:b8:44:54:68:a7:
         73:9e:ac:c4:00:2a:3a:99:a5:03:ba:62:ef:bc:37:9f:cf:2f:
         aa:04:c1:f3:c4:99:92:42:4c:d1:9c:b1:7b:94:96:22:9b:84:
         01:8b:7c:24:46:93:a6:fe:19:73:d1:1e:06:a4:ff:75:f8:05:
         64:58:0f:0d:f2:68:60:e2:52:49:f0:2e:6b:c6:75:d8:2a:1b:
         f1:a1:6b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:21:01 2025 by rpki-client