Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft
File:                     dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft (raw, json)
Hash identifier:          vX7+mVPhqhkrXFqYa9fxM6aocK1NvoPRV2qJl1j5owg=
Subject key identifier:   5B:75:2C:22:21:8C:AA:98:0E:94:24:AB:BB:E2:BB:C1:C0:80:B0:0D
Authority key identifier: 76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F
Certificate issuer:       /CN=A91B7E17/serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F
Certificate serial:       061A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft
Manifest number:          0615
Signing time:             Thu 30 Jan 2025 22:44:49 +0000
Manifest this update:     Thu 30 Jan 2025 22:44:49 +0000
Manifest next update:     Thu 06 Feb 2025 22:44:49 +0000
Files and hashes:         1: dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl (hash: akts2vYY4xJQFAbi4AAq2mz4y4tqzg3+fmfXVATbFvo=)
                          2: 87F6FDDC880911EB96D8882DC4F9AE02.roa (hash: HlAv5VKHlCkHYXAj9IKNWvazVRDv1+Tmr+7FuDlOMWM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1562 (0x61a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7E17/serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F
        Validity
            Not Before: Jan 30 22:44:49 2025 GMT
            Not After : Feb  6 22:44:49 2025 GMT
        Subject: CN=679c00e1-6d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:86:7e:15:d6:a7:86:8f:e6:d9:59:7e:01:e8:
                    e1:c7:fc:5d:2c:24:03:56:85:d5:f3:d0:25:11:ec:
                    81:36:96:4f:8a:55:3a:4f:f0:1b:bb:8f:5d:70:09:
                    87:05:12:e0:36:af:7d:c1:dd:22:f9:0a:08:37:35:
                    55:e3:1d:65:77:57:ee:c9:92:46:b6:50:f5:c4:2b:
                    09:c6:d7:0d:87:13:b9:28:f2:b1:90:97:da:6f:e6:
                    3c:02:9a:7d:d9:f7:d3:e6:0a:79:9d:e8:6c:cc:af:
                    bb:ff:08:a1:f8:c2:ad:c4:2d:4e:a7:78:d5:a4:d6:
                    15:3b:2a:a0:ee:7c:32:f5:b4:65:ef:39:66:d5:f9:
                    99:7d:eb:b3:c7:2d:27:fc:21:a1:04:03:05:96:4f:
                    b3:2f:ec:81:b4:74:15:7e:64:26:09:02:ef:29:aa:
                    77:e1:77:ec:ad:e8:2f:1b:df:db:82:f3:ef:f8:82:
                    1d:b4:ce:7a:84:f5:0e:a0:91:f3:83:35:5f:d1:8a:
                    86:f2:2d:49:34:89:73:c4:65:b3:a3:9a:c0:83:b0:
                    da:bc:17:2e:4c:f2:7f:ef:e0:47:ce:25:7f:45:46:
                    44:26:7e:db:40:6d:9f:2d:65:c0:86:a7:97:04:d4:
                    96:8d:cf:0c:73:1f:1c:be:b3:9b:7b:23:ed:8d:43:
                    23:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:75:2C:22:21:8C:AA:98:0E:94:24:AB:BB:E2:BB:C1:C0:80:B0:0D
            X509v3 Authority Key Identifier:
                keyid:76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:39:af:74:e2:c2:28:7e:46:65:cf:01:4e:c9:a7:59:db:37:
         9e:4d:83:6d:3f:23:7e:8e:e0:7b:2a:48:e1:cf:ea:56:2a:10:
         33:83:c8:43:6b:c4:9a:70:a0:c7:ed:95:0f:5d:cd:2c:40:c8:
         5b:96:ab:c6:fe:06:89:b2:43:f4:3d:e1:22:3f:43:f5:fa:1c:
         39:95:be:9b:3e:6a:9b:2d:78:c7:c2:53:77:11:70:e6:c8:4f:
         86:48:80:39:02:99:be:31:51:59:b3:71:f1:b8:7a:5a:bd:8e:
         8d:6a:49:24:2e:db:cd:ec:b8:e7:73:bd:2d:23:b9:12:29:fc:
         32:53:7e:e3:cb:3b:57:3f:5c:9f:db:25:84:8f:d1:fc:80:20:
         59:95:24:3d:05:8f:6b:63:ae:ea:1e:35:eb:8e:9b:1b:b5:54:
         b8:a9:9d:df:ae:62:c5:fe:2d:22:7f:ef:75:91:d9:09:b1:2c:
         a9:38:ac:23:db:14:6d:42:c9:85:e1:84:37:35:45:24:8f:06:
         50:fe:53:5c:3e:49:a5:05:fb:ef:69:69:12:6e:70:fe:a9:9f:
         1f:30:8b:c3:98:13:16:4b:cb:3e:7f:06:7c:d1:01:cc:69:3a:
         e8:32:39:bf:ea:98:89:ea:65:87:ba:d6:6c:a3:30:67:16:29:
         b1:d5:bc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:02:55 2025 by rpki-client