Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
File:                     BcMvXW_ZVny3AAWx10pBqFtb5xI.mft (raw, json)
Hash identifier:          0XkE49WkCf5k99eJ4zLVl6IrP0oZug3fs2acmmvPaos=
Subject key identifier:   5C:E2:28:52:A9:91:73:2F:1C:2D:E8:BE:69:D3:E2:6C:BA:57:18:EC
Authority key identifier: 05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
Certificate issuer:       /CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Certificate serial:       05EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
Manifest number:          05E0
Signing time:             Thu 30 Jan 2025 23:02:44 +0000
Manifest this update:     Thu 30 Jan 2025 23:02:43 +0000
Manifest next update:     Thu 06 Feb 2025 23:02:43 +0000
Files and hashes:         1: BcMvXW_ZVny3AAWx10pBqFtb5xI.crl (hash: ULTHDrW/KTaicBSXWQBbPuV8crTpuq7fWQl0QRgBpdE=)
                          2: F164038CBBE211ED8685DC61C4F9AE02.roa (hash: TgPklgLkA3xdg2IBb89UQztEAT8+HE02bwjfwGq7aRA=)
                          3: 27B648124C9C11ECACB77370C4F9AE02.roa (hash: ZNMqu5n7q8yqgioaOoz8FWOCKn32okK52a+TXFMlmIM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1514 (0x5ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
        Validity
            Not Before: Jan 30 23:02:43 2025 GMT
            Not After : Feb  6 23:02:43 2025 GMT
        Subject: CN=679c0513-d8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:aa:e6:44:27:0c:4e:3e:c7:08:88:b0:c2:01:
                    86:93:b8:e7:1d:e6:d2:85:10:df:c2:fc:8b:56:e9:
                    4f:aa:87:95:f6:87:aa:90:f4:1c:cb:f4:f8:bf:46:
                    cd:81:2a:fd:89:58:8a:0c:1c:8b:4f:f0:fb:99:81:
                    9a:8e:f6:9b:1d:2e:84:21:8a:7c:2c:65:eb:c0:8a:
                    43:dd:b7:81:fb:12:b3:4f:21:9f:00:a2:f8:c3:57:
                    55:a8:30:39:62:70:c1:78:41:03:f6:29:3b:44:37:
                    2f:47:d7:ce:0a:fb:39:21:9e:6b:49:d9:73:57:7d:
                    46:29:8b:74:73:0c:8a:80:a1:80:b0:96:41:33:ec:
                    23:52:e7:4c:6c:22:95:3d:4d:5c:f5:62:3e:29:c5:
                    63:91:e6:36:f9:6d:f7:e8:c1:c3:d6:4c:ed:71:a4:
                    36:c3:6d:a1:0f:6a:78:d3:ba:60:14:af:e4:ef:15:
                    47:c2:64:26:d6:53:2f:c9:94:42:d9:7d:46:62:03:
                    9f:99:75:a0:6d:22:65:25:b9:af:a7:c9:95:0e:71:
                    db:f1:e4:09:53:cb:ec:1e:04:cf:58:88:12:1d:c8:
                    c4:14:91:a9:f5:8a:cf:ee:de:84:cd:31:be:5b:71:
                    72:3a:9b:92:98:39:bf:c4:31:45:e6:d8:42:e4:9d:
                    97:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E2:28:52:A9:91:73:2F:1C:2D:E8:BE:69:D3:E2:6C:BA:57:18:EC
            X509v3 Authority Key Identifier:
                keyid:05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:43:f9:3a:4c:54:20:49:92:49:80:30:f2:21:5f:08:fd:2c:
         cc:47:94:2d:db:42:fa:ab:11:7b:09:a0:88:3d:c1:66:dc:b1:
         62:05:c1:25:8e:eb:14:fa:12:4b:f8:ac:1d:f4:48:80:27:4c:
         08:7c:70:c6:6b:b4:2e:64:0d:99:ee:cb:1d:92:12:78:88:cc:
         9b:5d:42:7e:b0:87:8e:db:19:1d:d9:17:00:ea:3a:d7:d4:a0:
         0c:be:55:40:9c:a4:e1:e2:97:5a:d3:a5:38:48:c1:b8:79:5d:
         44:af:fe:f9:86:5d:bb:8c:c9:a8:70:8d:1e:b3:65:c9:01:6d:
         ab:7b:d9:dc:d4:53:78:4e:90:91:26:e8:24:9e:6f:5a:d2:f5:
         93:b6:b0:2e:69:ae:3e:30:c8:0e:ea:c6:2d:36:2e:4c:ba:cb:
         4e:a7:5e:ab:66:67:20:28:bb:76:f9:6b:9b:9b:7f:bd:82:f4:
         17:bb:93:3e:48:b5:3a:44:25:42:1c:a1:33:f2:90:57:7b:1b:
         db:ae:8f:01:d4:de:98:56:b8:b5:c6:28:9d:73:47:96:55:8b:
         02:65:e6:df:18:4d:e1:c9:62:70:bf:e6:b0:04:6d:7c:b0:b9:
         30:2b:64:56:70:b4:14:77:0e:71:0c:dd:21:1a:32:38:c4:69:
         f4:b0:28:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:13:58 2025 by rpki-client