Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
File:                     4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft (raw, json)
Hash identifier:          jnaicTeVxUvNyIEPN9ZmLO1YrjhpXP5lrIwbKjBlkqQ=
Subject key identifier:   10:18:5E:20:0F:09:61:CF:C4:9D:9D:7E:79:1F:49:ED:73:36:F8:20
Authority key identifier: E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A
Certificate issuer:       /CN=A91B0367/serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A
Certificate serial:       0D5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
Manifest number:          0D59
Signing time:             Fri 31 Jan 2025 17:57:21 +0000
Manifest this update:     Fri 31 Jan 2025 17:57:20 +0000
Manifest next update:     Fri 07 Feb 2025 17:57:20 +0000
Files and hashes:         1: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl (hash: 7RRXlR3qiR+1tEwbTFhvvqczo6yeVciKPJiZjJcVHEY=)
                          2: 7321413EC22511E99FB7F225C4F9AE02.roa (hash: Z6lmT51OP+45EouSJ7OPnhCtkGwpN+kuXARe/mt1yM4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3423 (0xd5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0367/serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A
        Validity
            Not Before: Jan 31 17:57:20 2025 GMT
            Not After : Feb  7 17:57:20 2025 GMT
        Subject: CN=679d0f01-84d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2f:3b:2b:55:19:8f:cb:80:f7:ae:6f:1e:97:
                    e6:5d:a6:ec:aa:01:b1:81:c6:53:78:28:0d:3e:df:
                    97:2b:e8:72:7c:e0:e9:f3:81:3b:c5:3e:59:f5:c5:
                    c9:89:49:c5:99:2d:6b:cd:87:7d:26:f2:c1:1d:ce:
                    50:43:62:75:e5:27:47:19:da:59:e8:c3:b5:6c:d5:
                    04:70:af:fc:09:63:5e:da:80:34:b0:74:d9:be:61:
                    73:c8:7a:fb:1e:ef:62:45:9c:93:ae:17:e6:d4:c6:
                    94:2d:d0:c3:ad:5b:67:d7:da:ce:8b:b2:f2:e7:5c:
                    08:a9:41:9f:0d:74:cc:ea:8c:0e:54:69:22:0e:6b:
                    a0:88:19:78:ff:e6:78:8c:08:4e:64:0e:4f:ee:69:
                    6f:fe:63:e8:e6:4d:63:e6:4b:5b:c6:c4:2d:72:c0:
                    a9:37:84:1b:38:77:45:6b:dc:24:ed:e6:0e:c6:6c:
                    5f:64:e9:f6:d7:3a:40:f6:24:7d:77:32:dd:65:71:
                    6f:2f:0c:df:f4:1d:3e:6e:dd:38:66:d1:85:06:93:
                    92:b6:53:f9:eb:e8:0e:88:29:90:90:f9:9b:19:4e:
                    8d:dd:d7:ab:cd:74:4a:a5:12:5a:da:3c:96:b1:68:
                    fc:e5:7e:0c:63:0f:4d:d7:99:82:68:95:f1:a6:9e:
                    53:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:18:5E:20:0F:09:61:CF:C4:9D:9D:7E:79:1F:49:ED:73:36:F8:20
            X509v3 Authority Key Identifier:
                keyid:E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:49:9a:29:67:04:da:6e:59:17:15:44:f7:2e:78:6f:43:ec:
         2c:84:a7:54:1c:c8:4f:e4:39:16:a8:a3:ae:c1:44:54:34:62:
         be:38:fb:8e:36:b9:3b:b7:e0:5e:ea:40:b0:59:4f:69:7d:67:
         da:61:0b:c7:cb:aa:2a:72:98:81:5e:2b:10:be:6b:80:e0:17:
         d6:f5:57:68:bf:c8:34:fa:91:5d:67:0b:cb:d4:6f:3e:1a:b3:
         ff:bd:44:70:75:1b:f8:f3:c6:4d:83:e2:b1:29:8f:97:9e:de:
         0a:00:72:59:df:d0:16:a3:c7:be:a3:41:b7:52:c3:8e:d2:ea:
         6c:a4:84:2c:28:40:9d:6d:be:d4:ed:18:3c:a9:7d:72:85:de:
         aa:d3:f9:4f:c7:a9:49:12:21:4e:a7:53:2c:d5:77:d9:d7:36:
         b2:df:15:4d:63:bf:48:db:02:3d:ec:7f:8e:3d:92:cc:87:f6:
         54:7d:d3:13:0d:af:38:c4:d9:77:0d:2c:fa:5d:09:c1:07:08:
         06:62:59:18:87:b7:ae:74:7c:96:67:5d:59:71:8a:8a:fa:5f:
         85:6d:a3:36:e6:1d:80:33:80:5a:0b:bb:07:bb:a4:0e:17:a9:
         a8:1a:72:84:76:2d:c7:43:31:38:a7:b3:d9:c7:3e:c2:0d:9f:
         41:58:84:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:43:25 2025 by rpki-client