Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
File:                     9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft (raw, json)
Hash identifier:          WQduYuO7Q8Ua6otetjFb/qcQgh6+EAO0QERD/jbDhuc=
Subject key identifier:   01:1B:56:A6:30:87:5D:24:E7:CD:82:D0:73:C9:D5:4E:6E:C9:30:FC
Authority key identifier: F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA
Certificate issuer:       /CN=A91AF3E2/serialNumber=F6BA6E630A6AA98D821568264E027B988DF5C9BA
Certificate serial:       59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
Manifest number:          58
Signing time:             Fri 31 Jan 2025 06:12:02 +0000
Manifest this update:     Fri 31 Jan 2025 06:12:01 +0000
Manifest next update:     Fri 07 Feb 2025 06:12:01 +0000
Files and hashes:         1: 9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl (hash: g2RtZigS3IBvPCZ4XPa73Zj3aPCK8DiIDweLDfaggM8=)
                          2: 1CDD9EF85B9F11EFACE3275CC4F9AE02.roa (hash: pt3TVE6FWWML9qDR6bF+JwKplcatGSeeBfxTZrbxiy4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF3E2/serialNumber=F6BA6E630A6AA98D821568264E027B988DF5C9BA
        Validity
            Not Before: Jan 31 06:12:01 2025 GMT
            Not After : Feb  7 06:12:01 2025 GMT
        Subject: CN=679c69b1-5d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5e:9b:9a:31:4b:41:94:78:d6:42:32:2c:6c:
                    90:03:5d:aa:16:2f:ac:20:0b:ba:c9:66:bb:4b:e1:
                    80:51:08:45:ab:ca:0a:af:29:39:4f:d0:dd:55:55:
                    a4:ae:31:18:c7:c2:51:47:5c:77:d7:41:37:1a:c0:
                    7b:ba:c2:6c:64:ec:85:a9:2c:14:2f:c5:7a:f3:4b:
                    84:54:2d:ad:6e:7f:7d:26:c5:a6:92:b5:7f:2a:8a:
                    c1:23:99:cc:79:73:81:97:98:df:3e:60:44:cd:ff:
                    5f:56:50:92:22:7f:c8:56:54:f2:6c:8d:0d:68:7d:
                    94:0b:c8:94:9c:68:36:c8:de:ef:61:be:44:8c:e1:
                    99:f0:cd:24:90:3d:ec:fc:de:19:75:05:27:5b:4d:
                    33:f8:0d:2c:69:96:db:8f:8a:4a:94:c5:0d:16:ea:
                    b7:b7:55:45:e0:d4:4e:30:5e:4f:9f:f6:a7:78:e2:
                    ae:95:cd:d7:47:a3:c0:90:e2:61:ab:74:a1:78:16:
                    bf:02:72:b3:34:55:60:6f:3e:ba:e2:95:e8:de:29:
                    ef:d3:b0:4c:ef:ff:8b:9e:d3:29:b6:fc:8a:e9:fd:
                    e6:48:a0:ca:d5:ac:43:00:86:57:33:40:55:52:58:
                    1c:50:a6:90:af:6e:b6:ee:2e:65:7f:63:16:ad:90:
                    14:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1B:56:A6:30:87:5D:24:E7:CD:82:D0:73:C9:D5:4E:6E:C9:30:FC
            X509v3 Authority Key Identifier:
                keyid:F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:11:03:6d:95:10:53:61:4f:e7:c3:f2:ec:d0:3d:c6:4a:f2:
         65:ee:b6:3c:2b:87:b7:f8:62:ae:cb:95:07:51:e2:f0:5a:8c:
         f7:0b:c2:fd:f4:dc:ae:3e:95:ec:1f:29:03:73:1e:c6:11:ce:
         ad:a5:d0:66:28:9e:42:fc:c7:5b:0a:75:71:cc:82:22:6a:55:
         8a:a4:11:ff:d8:e2:83:ce:2c:94:df:33:9e:65:92:b2:d3:b9:
         94:6f:eb:46:16:ee:21:4e:2e:5c:fc:18:ca:cd:2b:6b:97:86:
         89:75:fc:c4:de:ec:a7:ed:ff:53:2a:07:8b:b3:44:89:a4:5b:
         4b:a3:dd:04:61:63:d6:3a:9f:ac:19:07:ae:a9:0b:5c:29:e5:
         0c:b5:f2:2f:36:d5:f4:92:f1:80:3b:15:60:d7:79:79:91:d8:
         e2:c8:3f:c5:21:d3:73:e3:d5:3c:f7:26:9c:f0:c0:94:f6:70:
         1c:7d:05:01:aa:73:08:d6:6b:d2:1c:0f:02:53:b0:e6:2c:1d:
         10:33:d2:e7:a5:95:db:a3:02:8a:38:58:ce:43:68:96:2e:77:
         30:d2:c6:62:67:54:e5:43:66:ba:17:e7:f9:ad:0c:19:f6:6c:
         61:26:cc:81:fc:0e:f3:32:33:81:c1:db:a9:36:1b:8a:f3:24:
         37:5a:85:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:02:51 2025 by rpki-client