Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft
File:                     As_3eY8FPpyB_czteWLsu3bB0ho.mft (raw, json)
Hash identifier:          J792CgyeLtNP3L7efm75DcfsLgC2d6SCT33cV3WQDSw=
Subject key identifier:   A2:73:BD:07:9A:99:28:64:B6:30:93:2D:5B:42:70:5C:FE:C6:74:AC
Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A
Certificate issuer:       /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft
Manifest number:          5A
Signing time:             Fri 31 Jan 2025 06:09:20 +0000
Manifest this update:     Fri 31 Jan 2025 06:09:19 +0000
Manifest next update:     Fri 07 Feb 2025 06:09:19 +0000
Files and hashes:         1: As_3eY8FPpyB_czteWLsu3bB0ho.crl (hash: h9tX+ARl0DtYrjGDmRl7bndXXJO2wt7jal8X1RG5aqo=)
                          2: 7DAE5EB25AE011EFBA58F07FC4F9AE02.roa (hash: Wp/6wyEXkRXlx5jv/S/ukoLxXoe3Zkz5HAA1XVAZayI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A
        Validity
            Not Before: Jan 31 06:09:19 2025 GMT
            Not After : Feb  7 06:09:19 2025 GMT
        Subject: CN=679c690f-42e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:93:54:4d:69:d9:ea:be:cd:0e:71:10:c3:42:
                    f6:ef:21:05:ca:ee:81:94:57:78:69:02:82:8d:9b:
                    1d:97:e9:6c:fc:8d:1f:46:8b:e3:62:55:22:de:60:
                    62:17:1c:6b:29:84:91:7a:36:f3:7b:a9:94:4f:13:
                    4f:52:a3:e9:a4:d9:b6:03:b6:21:f0:49:d8:cc:2e:
                    5a:f6:fc:af:a3:b1:c5:e8:8a:29:2b:68:ac:20:3b:
                    71:c7:d5:d3:b0:ab:ea:af:87:53:33:30:13:cb:3a:
                    87:98:e4:e8:f7:be:d9:53:1e:9a:cf:da:b2:1e:39:
                    fe:09:ba:17:24:7f:c4:96:02:21:ff:59:68:7b:70:
                    58:ac:bb:ec:e5:4f:a2:1c:62:f3:d7:3c:d5:52:3a:
                    66:0f:a8:bd:61:b9:20:19:6a:b4:34:14:ee:23:98:
                    5e:5c:26:77:f3:b3:f0:05:6b:fc:af:3c:34:27:f4:
                    af:b3:3c:7c:51:93:81:a6:ec:1f:b8:85:76:46:2e:
                    76:34:39:ef:0d:8e:05:de:f6:01:0f:85:4c:c6:f4:
                    51:4b:a1:d2:9c:82:9a:fe:07:3e:98:50:6f:6b:34:
                    a2:95:1a:23:2a:b9:54:74:56:55:11:18:c9:66:dc:
                    e5:88:86:24:ec:58:14:07:3a:d6:f2:6e:7c:ae:51:
                    d3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:73:BD:07:9A:99:28:64:B6:30:93:2D:5B:42:70:5C:FE:C6:74:AC
            X509v3 Authority Key Identifier:
                keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:fc:e3:af:ea:6b:f0:ec:df:9e:e6:60:c0:36:f0:e5:68:73:
         66:97:7e:7b:d1:b1:8e:76:ac:db:83:f8:44:01:0c:0c:a1:d5:
         d0:22:f3:2e:09:4b:5f:64:82:4c:46:77:c1:a4:8b:94:47:41:
         24:6b:7a:11:0c:15:48:c0:06:51:38:35:b1:f3:31:2e:d4:ec:
         f4:a5:97:b1:cb:2f:b6:56:73:35:15:9d:09:73:b0:ac:2d:f4:
         ca:23:4f:27:11:59:ac:a1:b6:9f:01:28:a5:1f:8d:e3:32:fb:
         c5:3c:a9:30:2b:05:5e:ab:c9:85:ac:75:ec:57:be:d0:c8:c5:
         84:44:1b:16:66:53:f0:8e:53:58:95:d3:db:45:2c:a5:ca:7f:
         a6:48:ee:7f:57:c7:ee:32:b8:74:fe:13:7c:d7:41:15:f8:81:
         8b:51:65:a5:cb:31:1a:d1:cc:83:bd:41:93:ef:58:40:d5:11:
         8f:d5:b8:bc:a6:ff:0f:7b:7a:71:3e:27:e9:5c:ac:37:e5:f6:
         a0:dd:2d:c2:fc:ff:30:52:e2:cf:41:27:4d:68:76:7b:ae:10:
         6b:09:4e:c9:ff:19:63:3e:76:9c:f6:56:33:c2:ab:79:37:16:
         fb:e9:a0:4a:48:ac:90:a2:62:2e:b1:38:ef:93:70:6b:c8:fd:
         a2:12:07:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:40 2025 by rpki-client