Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
File:                     1f9FyAWBJcJy3wRtwLjgb6owT88.mft (raw, json)
Hash identifier:          AmYa3Y28xTzm/l/TOBTyr9N2dC2/R8tJXVqrG0pzarw=
Subject key identifier:   B0:D4:87:04:25:1E:DF:C8:AD:2E:17:3D:2C:2A:FC:AD:21:BA:03:77
Authority key identifier: D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF
Certificate issuer:       /CN=A91A7E29/serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF
Certificate serial:       03A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
Manifest number:          039A
Signing time:             Fri 31 Jan 2025 01:14:40 +0000
Manifest this update:     Fri 31 Jan 2025 01:14:40 +0000
Manifest next update:     Fri 07 Feb 2025 01:14:40 +0000
Files and hashes:         1: 1f9FyAWBJcJy3wRtwLjgb6owT88.crl (hash: aF5gOuw/SzIDShpbL+WfVb09FrcIuYJzBt3avkjhHc4=)
                          2: 99F51284A1E911EDAD7CE929C4F9AE02.roa (hash: DgFh0007lZzBIY6/Uazy8v7Lvih8jtP3rAyQ1LouyMA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 930 (0x3a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7E29/serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF
        Validity
            Not Before: Jan 31 01:14:40 2025 GMT
            Not After : Feb  7 01:14:40 2025 GMT
        Subject: CN=679c2400-c846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4f:c3:b3:9e:fb:d9:eb:82:7f:b1:5c:54:1b:
                    41:8f:e1:bb:10:ac:ab:19:43:ec:7d:2d:f5:df:db:
                    04:35:f6:e1:8c:14:e8:fd:ee:42:bf:c5:23:60:7b:
                    c1:23:43:d3:71:7d:4e:90:74:af:60:38:58:97:70:
                    f0:96:3f:9f:3e:09:9e:f4:a7:d6:b0:89:2d:85:60:
                    ec:8d:df:f9:ac:c4:b1:77:f1:95:b7:ab:da:85:28:
                    df:d8:9b:d8:d2:60:78:d7:13:6f:44:0d:90:ba:9b:
                    e0:45:97:40:fe:58:f7:6a:e9:f5:23:60:67:93:76:
                    b3:1c:33:8a:2a:da:e0:e5:23:42:a4:de:61:5d:d9:
                    90:8c:5b:af:b2:49:0a:2e:4c:94:da:2a:bd:d5:08:
                    8e:e6:4f:73:f4:10:14:1a:e7:13:cc:3a:9f:1f:94:
                    d5:d9:26:c2:80:89:f8:db:37:5b:5a:74:33:cb:4c:
                    21:cb:26:d0:4d:2f:b0:c9:57:44:df:1b:3f:b1:98:
                    ec:aa:31:16:9e:52:7f:43:de:fa:2d:f2:62:82:c7:
                    17:ca:e4:87:06:96:c9:61:b7:00:ec:67:bd:62:0d:
                    6e:1a:77:19:3f:92:5c:a0:16:48:51:a8:48:ee:09:
                    7d:f5:c2:aa:12:59:3a:07:85:1c:52:63:e2:bb:dc:
                    51:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D4:87:04:25:1E:DF:C8:AD:2E:17:3D:2C:2A:FC:AD:21:BA:03:77
            X509v3 Authority Key Identifier:
                keyid:D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:95:4a:3a:90:1b:fc:92:0b:21:11:ab:7f:27:f0:9c:92:b8:
         ff:f6:f9:ae:ad:5f:4f:e5:e2:38:0e:5b:f3:6c:10:2b:df:cf:
         1c:3b:d8:9b:50:f7:bd:f7:76:8c:2d:2a:c8:10:3f:45:cc:7c:
         e7:f1:43:16:41:cc:33:f1:82:43:45:b7:15:8b:ae:ec:5a:aa:
         db:38:c5:8e:77:85:ee:db:6d:8e:f3:45:18:a2:b2:8b:c1:c1:
         7b:26:6f:30:fe:cd:0a:24:d5:3c:6f:5d:1e:be:19:e8:91:4a:
         63:25:88:26:f4:a9:1c:26:9e:0f:1d:64:b5:33:72:92:5e:3d:
         ee:f5:79:bc:93:e2:99:80:a8:30:9d:60:9d:4d:10:24:1f:d3:
         a5:ae:94:10:c2:44:2d:9c:3f:84:1a:da:f8:c5:18:01:6f:47:
         d5:4c:bf:45:15:f7:b7:5f:8d:1e:6c:81:01:54:b8:08:f0:6e:
         11:7f:71:5d:b8:37:cb:0d:ab:1b:28:09:3e:c0:aa:a6:ce:97:
         18:b8:d4:9b:3c:12:02:26:3d:16:56:b8:c8:29:c2:32:cf:b4:
         eb:55:8c:2a:78:2b:5a:8a:1c:27:df:41:67:09:d6:13:8c:fc:
         e6:19:a6:33:5c:81:80:27:7b:59:83:db:9f:8d:38:ca:3f:26:
         8d:34:62:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:59:02 2025 by rpki-client