Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
File:                     LMM_vLhkCEAgiUpy3QiFBa-btm0.mft (raw, json)
Hash identifier:          iKzoB2KG4GodlqnNlMsYHw5sVrBBgK73VFzqYSgODks=
Subject key identifier:   7E:93:CF:25:26:2B:EE:E9:C5:82:B5:4B:CF:C4:6F:C6:DA:89:7D:65
Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
Certificate issuer:       /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Certificate serial:       0301
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
Manifest number:          02ED
Signing time:             Fri 31 Jan 2025 01:24:28 +0000
Manifest this update:     Fri 31 Jan 2025 01:24:28 +0000
Manifest next update:     Fri 07 Feb 2025 01:24:28 +0000
Files and hashes:         1: LMM_vLhkCEAgiUpy3QiFBa-btm0.crl (hash: AsOI50RxgIf8vXMVLJmiGGatNowBiVrVeEBXuzDoCIE=)
                          2: 10D5A618C80411ECBA7BB174C4F9AE02.roa (hash: kudNvuOAJ7g4JEKXMXcZZMNyXS95FJFcLSknrEVaX8A=)
                          3: 1054539CC80411ECBA7BB174C4F9AE02.roa (hash: TKnNgWGNwFoC8C24zbH99O5sozDHLNm2T5yHAR3Xfxw=)
                          4: 11935C9EC80411ECBA7BB174C4F9AE02.roa (hash: BF6cZd20wS6vXmi4J2+LH+GU/32EXCZGZq32FPBE5bM=)
                          5: 0FA97166C80411ECBA7BB174C4F9AE02.roa (hash: m4xQJUZYqlletUsPZRxHk+Gm5/JsI9i5xKEsy9BARXw=)
                          6: 0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (hash: iAJOypV0Ywq6kQD3jOtFOhaI+MrLN3HZqbGx/hK/XRY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 769 (0x301)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
        Validity
            Not Before: Jan 31 01:24:28 2025 GMT
            Not After : Feb  7 01:24:28 2025 GMT
        Subject: CN=679c264c-621a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9f:f3:70:b6:ea:bd:5c:7d:5a:25:0f:30:5d:
                    e8:9f:e4:61:6f:ae:e5:0e:74:ba:a6:53:69:a2:57:
                    fe:8e:6b:ba:7d:4d:f2:b6:a3:9c:66:f1:cc:21:a4:
                    88:5c:88:a4:a6:88:4f:c6:42:84:e7:fc:a5:3d:94:
                    cb:fd:e2:81:11:9a:d1:e5:03:6d:7c:b5:b5:db:cf:
                    62:e3:89:e3:c4:89:a1:7b:bd:5c:f5:0d:c2:97:e1:
                    15:70:33:cc:8a:9f:85:15:3a:25:73:40:f7:1e:af:
                    f6:d3:25:cd:c5:fb:81:12:4f:d2:77:65:82:81:4f:
                    7b:64:06:c4:0b:37:5d:31:1d:90:62:5a:ad:f8:4b:
                    f1:b8:7c:69:37:c0:78:b7:50:cb:5b:57:e9:7f:f7:
                    39:e6:06:b4:11:ee:af:ef:f7:e2:f9:6c:aa:33:fe:
                    7d:f3:0b:bb:1f:e8:d0:4e:46:d4:5f:66:d3:35:bf:
                    54:7b:7f:a9:7c:df:18:b5:d2:95:d0:7e:59:39:76:
                    d7:8a:61:36:e6:f7:27:ed:62:70:ef:e7:d5:c6:1e:
                    24:4e:15:7d:9a:3c:11:7e:08:ed:69:39:8c:6f:19:
                    6c:24:7a:9d:d5:73:0a:9d:ea:f2:52:e4:d8:07:aa:
                    69:a6:12:27:86:69:64:ae:36:0f:2d:1b:4c:79:84:
                    05:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:93:CF:25:26:2B:EE:E9:C5:82:B5:4B:CF:C4:6F:C6:DA:89:7D:65
            X509v3 Authority Key Identifier:
                keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:82:c3:2f:c3:2d:35:97:26:ff:39:9e:38:29:84:ca:0d:93:
         33:db:f6:5f:55:cc:4b:45:3b:d4:5b:f5:a7:4f:5b:cd:74:19:
         3f:ad:7a:29:4a:24:be:7a:d7:51:ee:20:ef:3e:df:c4:58:58:
         21:00:c7:3c:a9:99:ba:91:41:da:69:d6:ee:08:21:71:36:b9:
         e8:e1:ce:73:57:25:52:c7:87:a9:7b:15:26:93:90:66:91:3b:
         f6:54:70:8d:7c:63:b7:e7:ce:9a:87:a1:1c:13:b3:68:ca:2a:
         38:ff:93:ec:14:ff:48:ad:83:f1:ce:5e:ff:66:49:e1:ec:55:
         d3:03:29:df:97:23:26:56:6d:09:54:38:c7:2a:bb:21:e1:0b:
         9b:e9:56:8c:79:f8:65:df:79:de:46:49:f1:99:23:93:3a:cf:
         51:67:cc:80:14:60:d2:92:73:28:18:9c:b9:5b:dc:f0:b8:7f:
         24:98:f3:3a:7a:f9:b3:c2:3c:e7:a9:dd:17:9f:cf:53:12:f2:
         15:f3:6f:92:f6:d4:8b:fe:29:50:c3:e6:6d:be:43:10:27:df:
         af:79:13:ce:d0:ea:24:d0:c3:9d:f0:96:62:8c:9c:d8:6e:ef:
         7d:a6:30:14:59:0b:83:54:c5:54:38:85:cb:42:6a:90:cc:3d:
         50:64:d4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:17:44 2025 by rpki-client