Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
File:                     ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft (raw, json)
Hash identifier:          YhJnyxMW5v8nuyRc5++AMBJ8WRWjZJ2pLnvGsp/uCPs=
Subject key identifier:   44:DD:23:49:27:06:B5:59:EE:57:3C:5D:19:E5:CE:8A:ED:9C:77:AF
Authority key identifier: 82:14:F5:1A:98:14:41:F1:5F:B9:12:22:5F:D7:D0:2F:B9:43:AE:35
Certificate issuer:       /CN=A91AC777/serialNumber=8214F51A981441F15FB912225FD7D02FB943AE35
Certificate serial:       05D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
Manifest number:          05CE
Signing time:             Thu 30 Jan 2025 23:03:24 +0000
Manifest this update:     Thu 30 Jan 2025 23:03:24 +0000
Manifest next update:     Thu 06 Feb 2025 23:03:24 +0000
Files and hashes:         1: ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl (hash: 68i7NbZ30SaaUDvL1/NmYhIxrvBlniP3rMSqFNZtqe8=)
                          2: 92967BBA78F811ECAF1C286CC4F9AE02.roa (hash: 0zFQ1BRYNI+2cFpJMpx2xapZnaYr/Wv7xM9sKrY4jS4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1490 (0x5d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC777/serialNumber=8214F51A981441F15FB912225FD7D02FB943AE35
        Validity
            Not Before: Jan 30 23:03:24 2025 GMT
            Not After : Feb  6 23:03:24 2025 GMT
        Subject: CN=679c053c-12ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6e:ae:78:86:e2:70:dc:10:1d:87:e2:e7:0c:
                    fd:0c:4c:15:d0:a1:42:86:a3:a3:c4:82:c3:a0:59:
                    8c:07:f6:1e:ba:48:b1:57:63:39:f5:4c:98:cb:a8:
                    2e:40:93:9c:cd:bd:e5:21:9c:5a:03:f2:a0:db:3d:
                    a0:13:32:e3:50:f6:cc:fb:78:0f:3f:2f:a7:ed:b0:
                    f0:ef:fb:5a:92:c7:59:d1:c1:64:22:ab:c0:1d:e6:
                    b3:ff:b9:26:7e:5f:a7:68:d6:c4:ca:01:e6:b7:c2:
                    99:81:a6:54:ec:6b:81:9a:70:3d:d0:30:6a:c3:3c:
                    51:9d:05:6c:14:4c:b7:88:cb:b5:eb:f2:34:4e:50:
                    51:25:e7:d8:3c:75:cb:8e:5f:a3:fa:ec:38:a9:06:
                    ea:43:66:e3:3d:5b:1f:a6:7c:a3:26:e3:c5:70:77:
                    f7:12:dc:f3:2f:e2:7f:59:47:80:26:ac:74:52:b0:
                    ef:4b:47:b9:c8:17:8a:0d:2d:0b:c3:2c:b2:2c:da:
                    90:dd:c9:48:00:bf:9f:24:32:9f:a0:5a:d8:97:a0:
                    1f:d5:52:34:a3:d6:63:ab:94:b7:d5:77:b7:2c:6f:
                    ea:dd:fd:66:df:b4:b3:d9:2b:1f:8d:db:35:ce:dc:
                    4d:4a:55:2c:da:25:0c:2b:de:9c:45:f7:2d:41:74:
                    27:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DD:23:49:27:06:B5:59:EE:57:3C:5D:19:E5:CE:8A:ED:9C:77:AF
            X509v3 Authority Key Identifier:
                keyid:82:14:F5:1A:98:14:41:F1:5F:B9:12:22:5F:D7:D0:2F:B9:43:AE:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:d5:00:ff:79:90:14:84:20:a9:52:b4:39:98:99:23:c1:6d:
         af:8e:74:fe:91:8c:3f:52:f0:23:e5:af:bc:69:80:c1:99:09:
         2a:8c:bd:37:d4:8b:f5:f5:65:58:e9:5d:aa:ef:3c:fc:17:8b:
         58:b9:ee:bc:aa:0c:51:15:ad:6a:57:3c:88:d3:09:ac:d6:b7:
         40:99:22:5f:0b:7c:c9:99:93:25:92:5a:83:d1:d1:96:f0:55:
         66:94:b5:da:9a:78:c6:4b:e0:69:4a:cc:52:2d:8b:97:5b:d7:
         a7:f6:fa:4b:1c:f1:fc:e9:c7:c7:84:79:7b:01:66:f3:b7:0e:
         df:47:6a:37:19:d6:43:49:47:84:2f:51:07:08:8d:02:89:7b:
         8d:5c:25:b6:99:fd:68:f2:4d:ce:02:73:5c:00:5f:6e:7d:81:
         70:29:fe:cf:cb:99:61:13:70:7c:ac:2c:75:1b:a1:b3:07:37:
         39:58:1a:34:7f:90:26:67:c8:9a:bd:54:be:d8:51:88:de:e9:
         5e:3b:68:34:04:e1:b6:3c:86:8e:5b:a9:18:84:b0:aa:7c:3c:
         04:8b:f9:fb:a1:fc:ea:0e:29:c1:e5:d4:aa:e0:dc:15:28:e3:
         a3:a4:ad:69:6f:61:de:bc:85:e6:ba:4c:90:83:6b:d5:fd:43:
         63:15:1e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:20 2025 by rpki-client