Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
File:                     DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft (raw, json)
Hash identifier:          3iF5purgdQiSHczBWpUF66M9bnfHTLwx+Yq6V5Xiqcc=
Subject key identifier:   52:6E:05:C0:D1:BE:EE:38:E0:30:13:00:81:3F:7C:B4:25:31:D3:F8
Authority key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
Certificate issuer:       /CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
Manifest number:          58
Signing time:             Fri 31 Jan 2025 06:20:08 +0000
Manifest this update:     Fri 31 Jan 2025 06:20:07 +0000
Manifest next update:     Fri 07 Feb 2025 06:20:07 +0000
Files and hashes:         1: DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl (hash: MwYl2QTTXd/+I8PNw4d06L+71iD+Wzjh6kL7Oic7QJI=)
                          2: 6E7D3C16816811EF99DD7787C4F9AE02.roa (hash: GJjFHlhUrw3PK9n6h+pqP/cBSWFV8op0nahH1r+sT6k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
        Validity
            Not Before: Jan 31 06:20:07 2025 GMT
            Not After : Feb  7 06:20:07 2025 GMT
        Subject: CN=679c6b97-d027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:12:81:3d:69:fa:11:5e:5d:d0:55:83:e6:e0:
                    f8:22:ab:98:45:63:c3:57:77:cc:6d:64:c1:01:cf:
                    fd:6e:3d:01:ef:e9:73:a8:56:a1:bb:70:5b:1b:28:
                    5b:cd:3c:0c:73:08:3a:3f:22:92:e3:61:27:06:57:
                    15:2b:6f:47:07:a9:4c:e3:de:93:8b:9c:f5:a7:73:
                    ff:24:a3:c1:4d:3b:cb:95:f2:f5:60:41:53:0d:35:
                    34:c5:c0:7c:62:8d:4d:26:87:9f:65:be:73:7f:df:
                    01:f1:23:35:1c:90:69:f2:ac:71:f2:5b:83:17:58:
                    86:7a:6e:b4:de:a3:3f:55:5a:58:7c:ca:ca:59:c0:
                    e1:87:2b:51:1e:38:83:e1:5b:9b:bb:f0:18:e8:71:
                    a4:ef:dd:b6:6a:c3:7a:c4:5d:70:c2:7a:89:7e:7e:
                    ec:12:ef:36:95:28:8a:db:9c:13:e4:4d:d1:7c:62:
                    2f:56:5b:ae:b2:0d:e7:44:4e:60:9f:f8:ee:82:59:
                    97:e2:d3:f0:d5:92:10:69:92:a7:95:cb:2f:34:72:
                    a1:45:1c:0b:f3:d5:25:fb:5b:b0:00:bd:bd:9c:74:
                    d0:d8:51:f5:8f:37:e8:fb:d9:09:d2:3b:46:23:08:
                    17:39:73:33:88:b4:91:04:e8:3a:71:d3:a6:f7:f2:
                    39:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6E:05:C0:D1:BE:EE:38:E0:30:13:00:81:3F:7C:B4:25:31:D3:F8
            X509v3 Authority Key Identifier:
                keyid:0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:ad:5b:25:b6:94:95:89:e4:3f:ef:65:a9:d5:55:c8:89:54:
         6f:bf:79:96:e1:44:2c:49:95:43:c7:3a:c1:72:30:aa:75:21:
         1a:b3:21:0f:bd:de:3e:57:84:96:fc:42:34:80:66:23:2d:e6:
         aa:1c:55:d1:ea:13:9b:ab:3b:30:db:e7:48:fc:c2:8e:60:77:
         b8:f1:af:27:05:d2:a8:3d:f4:c9:18:a2:46:14:e8:bf:8b:32:
         98:4f:96:bf:6a:b1:33:99:e6:36:8a:de:47:70:1e:cb:9e:a4:
         fd:29:2d:5c:86:81:a7:66:cb:99:b2:f4:47:c6:8d:15:4b:ec:
         a3:3e:05:c4:b8:8a:a2:01:5f:23:93:aa:d9:24:2e:b2:47:db:
         6f:e7:fc:e8:aa:be:dc:eb:bf:73:86:cd:18:df:5e:15:ef:17:
         18:08:cd:8e:91:8e:4e:1d:69:57:d7:b8:a0:e3:5b:95:86:4a:
         d3:e7:27:ce:9e:81:90:d5:52:33:58:27:71:61:7e:a8:a7:4d:
         90:a9:50:c6:92:05:bf:60:29:fd:4d:0c:3c:a5:8a:a7:dd:9c:
         42:a4:24:ef:a3:75:c8:86:41:88:10:76:38:6c:62:a1:f0:e2:
         a2:21:af:f8:55:46:5c:ae:02:2b:26:fb:7b:f6:f0:b1:97:d8:
         a4:43:27:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:33:28 2025 by rpki-client