Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
File:                     0Ll9wB2J8jqAX75YYe43vwmcP_A.mft (raw, json)
Hash identifier:          F6uKGkKbF3cOLoRUJHx0V4sRn45+eBE/5iFPWCHdsOA=
Subject key identifier:   D3:AC:24:86:03:4E:D7:B5:BD:9A:89:44:FF:30:ED:67:04:6B:57:5D
Authority key identifier: D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0
Certificate issuer:       /CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0
Certificate serial:       0BF1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
Manifest number:          0BDF
Signing time:             Fri 31 Jan 2025 18:41:23 +0000
Manifest this update:     Fri 31 Jan 2025 18:41:22 +0000
Manifest next update:     Fri 07 Feb 2025 18:41:22 +0000
Files and hashes:         1: 0Ll9wB2J8jqAX75YYe43vwmcP_A.crl (hash: AVObsVJZLOrsGZZYCrSqGWrpNfa3q7NhCJrV0zW9CUA=)
                          2: 498ED6046FD011EDA007D478C4F9AE02.roa (hash: lwkH9V+4ruYpDtKVAny/uyyCWO7r9GoTBPNu4gEXlEg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3057 (0xbf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0
        Validity
            Not Before: Jan 31 18:41:22 2025 GMT
            Not After : Feb  7 18:41:22 2025 GMT
        Subject: CN=679d1953-3158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8e:cd:f0:78:23:df:f5:11:b2:bd:94:ae:d1:
                    70:b0:32:34:0e:d5:39:b2:bb:43:f6:2c:aa:f0:e8:
                    dd:b0:c1:89:b2:c0:08:79:5a:e5:ef:3b:59:5d:b9:
                    7a:9c:aa:ec:55:04:41:8c:cc:b5:35:b1:c1:6a:6b:
                    af:56:75:c4:bb:c4:c2:ac:81:3e:11:c5:a3:f7:97:
                    73:36:a9:4b:de:07:6b:f0:a3:d4:13:db:3c:f4:a1:
                    87:4d:50:1e:86:71:a0:55:2c:5b:41:a7:e6:3e:3d:
                    e4:21:c7:63:9c:bd:76:fe:9e:bb:9d:d7:67:a0:be:
                    ea:0a:14:25:87:3b:dc:71:cd:61:d4:bd:40:d2:e5:
                    86:34:60:1b:f5:20:f2:c2:e8:ba:6a:e9:4a:32:91:
                    5a:21:fe:5e:62:cf:7d:f6:b3:ef:78:4f:e2:1f:78:
                    82:6d:a0:2f:88:7f:ec:13:ce:62:2b:11:a9:0f:25:
                    8c:c3:d9:e6:a1:09:ed:7b:9b:ee:6b:b8:8c:76:84:
                    13:62:ce:f4:77:bf:ab:67:ad:73:5e:da:13:5c:bf:
                    b6:74:d0:68:c2:52:cd:a3:57:4c:d4:57:a9:7d:49:
                    cd:cb:be:2d:fd:2b:3c:f9:64:7a:c6:71:f9:b6:54:
                    47:cb:b4:95:1d:43:53:2a:97:6d:c9:02:8c:6f:ed:
                    b9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AC:24:86:03:4E:D7:B5:BD:9A:89:44:FF:30:ED:67:04:6B:57:5D
            X509v3 Authority Key Identifier:
                keyid:D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:a0:da:b8:b9:5a:a6:86:53:29:1b:58:c1:43:75:b1:33:5b:
         02:11:7b:a5:3f:00:c1:28:33:b9:f1:41:6e:9d:32:45:a9:0c:
         b8:e8:bc:41:dc:87:3a:e8:4b:00:25:4f:5c:8d:35:ad:9b:aa:
         9f:6b:21:4f:82:39:ce:be:b0:9b:00:b2:74:fa:77:13:bc:3e:
         be:07:03:6c:f7:ca:b9:fd:af:10:a2:39:f9:10:6c:ec:ee:93:
         0d:f0:10:a0:f3:52:26:4d:7f:9f:de:00:72:4d:0d:6c:a8:e8:
         bb:24:81:dd:24:49:4c:a5:e7:31:b8:fd:3b:a4:8a:60:70:1a:
         f0:28:b3:04:4b:b0:b3:c7:6f:83:a8:54:98:a6:7b:4d:16:24:
         2f:ed:03:fb:a5:48:f0:8f:a6:bd:e6:6a:b1:00:e2:99:bd:85:
         71:97:b2:34:46:66:0e:7c:fe:e9:f0:9f:59:f5:28:72:0c:df:
         18:38:01:31:5e:1d:1d:7c:85:ff:3a:58:4a:7b:eb:fd:64:9a:
         9e:8d:5b:ed:ee:54:57:aa:40:79:f6:98:f5:d5:c2:d4:dd:57:
         c2:91:51:52:7f:14:85:2b:d0:ff:08:0f:2b:9b:48:bd:65:0c:
         a8:54:31:bf:4d:4b:2f:62:67:ef:cd:91:9d:30:10:af:87:3c:
         ab:7e:d1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:43:06 2025 by rpki-client