Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft
File:                     J92Lu4-1-s3BnynT7CdF1RENip8.mft (raw, json)
Hash identifier:          4PKdLcXXPkEW1BCAuQQJSNmZwMzV/lhJnC8ebQagbiI=
Subject key identifier:   47:65:B0:CE:4F:07:66:4D:7A:69:91:D3:BE:15:87:C8:49:C5:C7:06
Authority key identifier: 27:DD:8B:BB:8F:B5:FA:CD:C1:9F:29:D3:EC:27:45:D5:11:0D:8A:9F
Certificate issuer:       /CN=A91BC3FD/serialNumber=27DD8BBB8FB5FACDC19F29D3EC2745D5110D8A9F
Certificate serial:       08F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft
Manifest number:          08EC
Signing time:             Thu 30 Jan 2025 20:27:08 +0000
Manifest this update:     Thu 30 Jan 2025 20:27:07 +0000
Manifest next update:     Thu 06 Feb 2025 20:27:07 +0000
Files and hashes:         1: J92Lu4-1-s3BnynT7CdF1RENip8.crl (hash: MCv1Ptek/vxOPzCPFjK+1PubWdFyVeCybxhq4a6vYdw=)
                          2: CC1DFBAC9F0F11EAA4419D2DC4F9AE02.roa (hash: jPD93oq8qztqVjRiofsyP42XOpCIiQV5KYalzchExEU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2289 (0x8f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC3FD/serialNumber=27DD8BBB8FB5FACDC19F29D3EC2745D5110D8A9F
        Validity
            Not Before: Jan 30 20:27:07 2025 GMT
            Not After : Feb  6 20:27:07 2025 GMT
        Subject: CN=679be09b-12ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e3:35:fa:0d:73:f3:f5:7e:38:71:84:32:94:
                    25:aa:82:9d:c7:36:60:b2:0e:a4:63:2f:fd:5e:9f:
                    30:30:84:75:3d:01:fa:cd:01:30:c3:87:9b:08:e7:
                    f5:64:2c:f5:f7:8c:35:21:2f:31:98:76:0a:28:18:
                    fc:83:23:6a:3d:79:3e:54:86:72:eb:2d:b5:13:bf:
                    ff:53:aa:35:65:bc:eb:7b:f7:dc:7f:52:0d:9a:ba:
                    82:45:0d:68:9d:91:61:af:c4:1d:a1:ab:0f:21:45:
                    59:f7:94:87:b2:e9:04:51:46:2f:e9:15:1b:52:36:
                    22:13:42:d7:5e:b3:95:76:7c:b6:2e:74:1a:cc:81:
                    13:66:4f:51:22:a4:66:fd:f1:fc:5f:ee:f4:ea:c2:
                    64:db:a8:ca:61:54:40:c5:14:fb:49:3a:11:55:53:
                    3b:bd:8b:d0:c9:93:af:07:27:51:e3:5c:50:44:c5:
                    b2:2d:35:c8:3c:f5:aa:29:8a:8f:fd:9a:42:e6:78:
                    ca:bc:5b:b9:b4:8a:f9:f8:10:66:d1:5e:d4:cd:19:
                    9e:2e:31:74:b2:1c:46:01:f0:72:73:9f:34:24:9e:
                    70:b6:c8:f4:27:48:21:a8:8e:23:66:00:d7:b2:ec:
                    e0:3c:02:57:76:d9:e9:c7:3d:7e:11:cb:0c:92:43:
                    c3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:65:B0:CE:4F:07:66:4D:7A:69:91:D3:BE:15:87:C8:49:C5:C7:06
            X509v3 Authority Key Identifier:
                keyid:27:DD:8B:BB:8F:B5:FA:CD:C1:9F:29:D3:EC:27:45:D5:11:0D:8A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:11:c1:21:27:04:0b:76:bd:0e:c1:6c:84:a6:1b:56:e5:61:
         eb:5b:42:68:f1:6c:0e:9d:04:6d:cf:0c:21:db:32:3a:50:a8:
         80:fc:3e:fd:5d:5c:71:a2:46:ac:72:a2:88:bd:8e:1c:1e:8e:
         fd:d9:90:6b:df:d5:c2:2d:d7:c5:14:f4:e3:9e:8e:6b:8a:4e:
         f3:5f:24:00:cf:c8:7d:43:5e:69:d9:ce:ca:80:6e:03:7f:62:
         6f:30:fd:2b:7d:d7:0a:ff:af:87:1a:ec:5f:be:c1:f1:5d:68:
         5e:64:85:ce:8f:ae:c7:a3:80:9c:65:63:57:9b:62:30:f6:00:
         65:76:d1:50:fd:61:28:84:1c:d3:cd:2f:5d:57:1d:31:a7:73:
         49:cb:bf:fa:45:8e:22:d8:2b:11:9d:1e:35:30:de:0d:30:32:
         1e:06:fb:e2:39:87:eb:4f:16:f6:db:93:8e:79:f1:9a:d4:42:
         5d:6d:59:5b:75:69:d5:3f:ea:f6:c4:3a:50:a8:ef:cc:35:c6:
         cc:12:a9:80:ea:b3:a3:0a:7c:64:45:d1:f9:1a:33:fd:ca:43:
         71:1f:bd:4d:89:96:cb:0f:9e:76:6b:e2:e9:98:97:20:1c:55:
         00:53:65:d9:39:64:b0:0e:34:31:5b:72:61:1b:ae:b4:cf:8c:
         54:90:a1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:20 2025 by rpki-client