Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft
File:                     GmByWuQEWJbjBAgwAyE-6pUmfs8.mft (raw, json)
Hash identifier:          FvNXJwX0sKdDWiS78i+YrfL2faa0VwlgtG2l+Kdn38E=
Subject key identifier:   22:EB:44:D0:6B:22:F8:06:96:54:D1:75:C7:CA:DA:6A:0B:0D:24:B2
Authority key identifier: 1A:60:72:5A:E4:04:58:96:E3:04:08:30:03:21:3E:EA:95:26:7E:CF
Certificate issuer:       /CN=A91BB35A/serialNumber=1A60725AE4045896E304083003213EEA95267ECF
Certificate serial:       0119
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft
Manifest number:          0116
Signing time:             Fri 31 Jan 2025 03:59:29 +0000
Manifest this update:     Fri 31 Jan 2025 03:59:28 +0000
Manifest next update:     Fri 07 Feb 2025 03:59:28 +0000
Files and hashes:         1: GmByWuQEWJbjBAgwAyE-6pUmfs8.crl (hash: Vcz0pDqye8BO+i70uWUj5YFoA1qcHl6N0vxnsWjW7KY=)
                          2: 1779BD7C3B2311EE91010B3EC4F9AE02.roa (hash: ++SEuifHIWAk3FJLbuooJEG4UII9ZGtzJgkMFEUrXTc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB35A/serialNumber=1A60725AE4045896E304083003213EEA95267ECF
        Validity
            Not Before: Jan 31 03:59:28 2025 GMT
            Not After : Feb  7 03:59:28 2025 GMT
        Subject: CN=679c4aa1-56da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:52:9e:92:e6:c7:69:45:bb:21:7c:9b:8e:
                    dd:de:4f:c5:a1:2b:a8:66:2a:85:7e:ad:b5:ec:54:
                    e0:55:bc:33:34:73:70:f4:b6:86:fe:8c:f2:79:c3:
                    4f:4e:d9:dc:8e:58:92:b7:30:ea:4a:7e:63:bf:07:
                    80:f8:76:70:59:2e:4e:ef:7f:c9:6d:dc:f9:d0:ae:
                    d9:78:57:0e:5a:37:21:3b:6a:5b:8e:58:0c:f4:d3:
                    fc:c3:6e:e6:c5:2b:3d:dc:6d:8e:86:3a:d3:ab:46:
                    84:e7:86:d3:13:f7:40:ec:31:e5:01:68:03:9b:a6:
                    12:98:3f:5f:d9:bb:f7:73:af:3a:cf:79:7c:7e:09:
                    e4:82:28:75:06:8f:0d:ab:f3:47:f9:94:60:7d:79:
                    15:15:4d:90:b8:aa:47:a4:d0:92:78:81:3f:af:40:
                    24:a9:3f:d9:28:81:65:f8:59:2c:1f:41:e3:1b:7e:
                    df:63:ab:2c:e5:17:5d:5b:df:23:bb:10:f7:a8:44:
                    87:03:38:ad:5d:e2:60:91:71:54:dd:09:a1:a6:e8:
                    e3:17:7c:03:55:f3:96:4f:48:f3:25:44:30:5f:40:
                    6a:01:33:cc:a4:f5:5e:0c:f3:2a:64:16:09:80:39:
                    ed:81:97:16:f4:cc:9d:25:50:f0:17:87:d6:78:f0:
                    8e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EB:44:D0:6B:22:F8:06:96:54:D1:75:C7:CA:DA:6A:0B:0D:24:B2
            X509v3 Authority Key Identifier:
                keyid:1A:60:72:5A:E4:04:58:96:E3:04:08:30:03:21:3E:EA:95:26:7E:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:21:bc:de:4e:6a:98:d9:1e:76:00:97:9c:65:db:ca:21:76:
         24:9c:d8:0b:1d:e1:39:95:c9:aa:4f:98:ad:18:4b:4d:70:25:
         ff:47:0a:de:0b:26:58:73:70:aa:5c:32:b4:bf:c1:df:be:f3:
         f1:c1:24:d5:c3:6d:93:a1:c8:7c:18:a6:75:f7:ca:16:81:c7:
         f2:c0:c4:98:21:9a:e5:0a:06:f9:28:8f:ec:70:6f:cc:5c:b4:
         57:5a:4a:91:2d:1f:8e:8c:54:db:73:45:3a:73:01:d7:65:5a:
         2a:c8:06:3c:6a:ac:d9:dd:3c:61:e4:30:69:48:d0:1f:79:53:
         c1:77:7c:e7:d9:a0:63:f8:2e:34:f8:7a:51:82:78:e7:60:2e:
         89:c3:4d:e7:4b:11:a5:bf:68:c5:22:cc:6e:39:82:e9:d5:85:
         70:dd:9f:44:74:d7:a7:97:13:5e:67:48:0f:bc:3a:09:63:6d:
         9a:af:80:72:68:af:f9:de:a6:6b:7d:21:6d:56:65:10:a0:45:
         03:49:23:b5:e6:d2:fb:d4:74:a7:16:d1:18:b5:3c:c2:62:28:
         fd:85:f5:48:b6:04:1e:b4:b9:16:e9:9b:cf:6a:f3:71:49:33:
         24:89:5a:80:0a:64:5b:48:92:09:3b:76:96:45:c7:fa:f6:36:
         66:bb:6a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:40:22 2025 by rpki-client