Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
File:                     AruX_YsfYg4CoeLK21nWVvAa2kU.mft (raw, json)
Hash identifier:          R7u4tqOkoMG9xIunbJu01rBWcLyYMH6YkdGv8wVyoF0=
Subject key identifier:   52:BE:9B:E8:93:41:72:16:04:F9:6A:96:10:9C:8D:96:7E:8B:5F:80
Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
Certificate issuer:       /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Certificate serial:       02E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
Manifest number:          02D7
Signing time:             Fri 31 Jan 2025 01:27:45 +0000
Manifest this update:     Fri 31 Jan 2025 01:27:45 +0000
Manifest next update:     Fri 07 Feb 2025 01:27:45 +0000
Files and hashes:         1: AruX_YsfYg4CoeLK21nWVvAa2kU.crl (hash: 2tP9dzskmnL2Kiw+8If7PTeFln6Q4Nlwb+QUCaBAA64=)
                          2: E100C846D0D211EC92E5014CC4F9AE02.roa (hash: 1/Pe3M/1G4UPq/rk/to0ivJs3udNjtiSMOYgKnEzG+4=)
                          3: 2DED8B66D02011ECB021972BC4F9AE02.roa (hash: X1fS93fErO++gD03CgWQlQr9RcZXTdWLfGnx0iqRdE4=)
                          4: 2D478AFED02011ECB021972BC4F9AE02.roa (hash: KiWMfnaqo/tfw5gCcea55F0jBNiA0r/0TcX17r/8cvk=)
                          5: 8FCF722626C911EE9F1A0917C4F9AE02.roa (hash: qejGSJs6cPmwpEoFNORTx2hIhyRLer5JBQ2gW4em5wk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 738 (0x2e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
        Validity
            Not Before: Jan 31 01:27:45 2025 GMT
            Not After : Feb  7 01:27:45 2025 GMT
        Subject: CN=679c2711-f00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5b:ac:c4:04:74:e8:aa:32:82:7b:8b:bf:29:
                    78:47:05:13:d2:a5:71:26:46:0d:6d:0f:bc:dc:5b:
                    41:37:09:5c:a1:39:f1:a1:a4:84:b8:e4:dc:69:94:
                    39:6b:7d:5d:a2:51:61:73:aa:73:b4:4a:d0:6b:c7:
                    a8:12:f1:b3:19:0f:75:14:c5:a5:72:2a:cd:b5:46:
                    e9:58:7e:69:7d:c9:de:4a:46:24:14:b4:6f:08:3d:
                    f9:31:fa:1e:4b:92:c1:e3:48:27:cb:91:04:b8:70:
                    4d:49:07:6d:25:ad:1f:47:0a:08:06:61:73:d1:4b:
                    a1:01:52:1d:be:c6:79:92:58:52:9f:d1:08:0c:cd:
                    cc:f1:06:98:28:7e:29:ab:75:96:51:4f:25:25:e5:
                    55:fc:c7:53:c1:1d:29:c8:6f:e0:43:11:a2:63:1e:
                    1b:0d:52:54:3e:7c:79:e8:81:09:d8:6e:90:73:5d:
                    cd:5c:1e:9a:bb:07:dc:32:07:2a:6e:5b:aa:07:a5:
                    29:5a:c7:ff:66:53:d3:36:bc:43:02:02:0f:0c:56:
                    a5:60:29:55:bb:bf:eb:e5:5d:c0:3e:e3:d3:06:a2:
                    a8:a6:ca:f6:37:5c:41:33:eb:68:8e:a7:36:48:b2:
                    12:7a:81:17:10:02:76:98:d7:de:46:05:c3:5b:41:
                    54:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BE:9B:E8:93:41:72:16:04:F9:6A:96:10:9C:8D:96:7E:8B:5F:80
            X509v3 Authority Key Identifier:
                keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:1c:49:db:91:f2:56:b8:f2:4a:3d:85:12:f8:b7:2e:49:3c:
         d0:0b:41:19:50:6a:c5:c3:cb:4f:a8:f3:79:46:da:82:ce:f5:
         ae:97:65:34:e0:2c:a1:da:32:07:ed:35:01:4b:10:e7:73:26:
         d7:02:24:28:ef:71:83:ad:5d:26:2d:1d:45:f8:8b:d5:36:b1:
         10:03:65:52:84:f0:29:f3:18:7c:7f:83:ec:cc:54:38:4b:4b:
         9a:2d:75:e5:95:c3:00:b5:33:94:14:1e:a0:4e:f0:fa:78:dc:
         4d:29:2b:8e:4e:ff:b5:fa:b1:ea:df:5c:58:41:0e:73:59:c9:
         1d:f4:f0:a9:91:48:7a:7d:ac:fb:f5:d0:c0:24:db:45:18:e0:
         7f:b3:af:3a:b9:05:22:73:39:e1:2b:f9:d0:a3:5a:3a:42:9d:
         10:86:a5:a2:dd:c6:13:07:de:e0:f0:46:e9:4a:db:d3:d1:68:
         2e:08:cc:b6:26:af:d5:b3:b1:69:3c:d2:70:f9:db:6b:8b:80:
         ae:07:74:20:5a:81:6f:ff:84:cf:ea:73:49:b7:60:b3:b4:7c:
         1b:10:48:b9:a6:4c:76:38:aa:21:99:3b:cd:0e:48:19:8c:ce:
         7e:d4:6f:d8:e6:8d:8d:1b:09:80:fe:f5:98:d3:c6:49:52:bf:
         96:7b:7a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:39 2025 by rpki-client