Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft
File:                     elBsIXoxB45CF4FgOA3SyDko2S4.mft (raw, json)
Hash identifier:          9PDx4Olw7Kn0YiDDO8SBBOkRiZAFtqeiGYP6Dfdb9sk=
Subject key identifier:   3E:AD:44:00:66:0F:08:C2:7E:D8:F0:76:16:96:71:EF:0A:A3:22:92
Authority key identifier: 7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E
Certificate issuer:       /CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E
Certificate serial:       0C68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft
Manifest number:          0C60
Signing time:             Fri 31 Jan 2025 18:10:41 +0000
Manifest this update:     Fri 31 Jan 2025 18:10:41 +0000
Manifest next update:     Fri 07 Feb 2025 18:10:41 +0000
Files and hashes:         1: elBsIXoxB45CF4FgOA3SyDko2S4.crl (hash: IzlsOiTScUrUJAVBonjT9D3WcheP0zygNIXTjVeocd8=)
                          2: 07B85890C29D11EBBAF29939C4F9AE02.roa (hash: Wbd4SNbG7n2IN5fFqW7xiw4LueCafFj4BsRNKFvE840=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3176 (0xc68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E
        Validity
            Not Before: Jan 31 18:10:41 2025 GMT
            Not After : Feb  7 18:10:41 2025 GMT
        Subject: CN=679d1221-2885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:32:3c:e4:5f:bc:18:6e:63:9d:61:5a:0f:3d:
                    5c:00:f3:67:4e:67:f2:33:04:ec:1d:b3:97:7f:9c:
                    54:06:13:c2:08:3f:0e:c8:e9:e0:fe:3f:fd:a8:0d:
                    8f:d1:91:c7:b6:a5:1d:41:b1:6e:40:3b:11:97:d2:
                    d2:61:31:2f:35:39:a2:a3:52:29:1f:31:41:51:e9:
                    ec:d4:e1:3f:35:31:aa:92:3b:47:9f:45:c2:f1:c5:
                    37:80:32:9f:49:21:66:85:40:8c:4a:7d:3f:27:22:
                    fd:0e:e9:fd:43:b4:1d:98:34:be:40:cc:7c:4b:91:
                    5e:2c:34:f4:fe:ce:4c:78:86:93:86:b6:38:16:eb:
                    56:f3:a0:3f:a6:71:87:20:52:ec:97:a5:5c:b3:94:
                    ee:07:2f:8f:9f:91:68:5d:d4:4a:77:a0:15:72:b4:
                    72:07:7c:04:84:52:6d:22:aa:ec:12:c6:aa:bd:65:
                    bf:b9:31:95:db:94:eb:67:b9:c9:5e:1a:1b:15:38:
                    b6:95:fe:c5:4b:01:7e:9c:e6:12:7d:55:a1:57:10:
                    eb:3d:fa:fe:ce:8d:18:f9:44:17:57:19:c9:3e:84:
                    43:8b:65:6e:08:71:f4:e2:33:39:8e:7a:ba:99:30:
                    37:a8:50:0c:95:24:b8:a5:b9:e0:5f:97:10:84:00:
                    e4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AD:44:00:66:0F:08:C2:7E:D8:F0:76:16:96:71:EF:0A:A3:22:92
            X509v3 Authority Key Identifier:
                keyid:7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:3b:85:37:70:98:ec:c8:d2:1a:51:8c:cd:dd:6c:c2:cd:0e:
         ae:95:be:59:2d:5c:dc:a7:0b:1b:9b:d9:0a:4e:72:a2:78:bf:
         1e:0c:61:83:df:bf:be:8d:09:9a:a3:ae:b2:e3:67:c3:dc:b8:
         e7:5a:59:ec:33:d8:db:f4:09:78:dc:ae:96:27:50:c1:d4:92:
         87:53:f4:61:f3:58:a0:2b:e8:14:77:f7:49:b0:36:3d:e8:c8:
         62:85:77:28:97:93:4f:29:1c:ab:e9:e2:ff:45:6f:e1:a1:df:
         29:ef:95:3b:4e:bf:f6:80:4b:2d:b5:35:e3:6c:d8:82:40:df:
         a3:4b:37:42:48:0f:ba:68:94:15:a7:49:0c:8f:a0:4d:a9:48:
         c3:75:00:1b:64:d9:8d:81:5b:f0:35:ad:8b:26:7f:6d:38:00:
         3c:05:02:12:ad:9a:17:d6:f4:49:ff:c1:bb:0c:49:9b:28:cc:
         2a:ed:63:0e:1b:24:c3:2d:48:7f:f0:c4:69:62:e0:df:04:9b:
         40:56:a5:7d:58:99:9f:7d:97:55:5b:6b:22:8e:e4:ba:7a:56:
         f7:e6:6f:d5:ef:e4:3a:21:be:db:f9:ec:12:e2:de:28:62:a8:
         32:1e:8d:b1:ae:8d:fa:03:fb:21:69:a3:09:16:1a:e3:67:10:
         4b:86:ba:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:12:12 2025 by rpki-client