Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
File:                     SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft (raw, json)
Hash identifier:          k1PWfBAu9VkiH12fHwxnQIYh4j9UAIl4Q4h+biagoCU=
Subject key identifier:   6C:81:54:D5:31:83:6E:FF:42:AF:15:31:FF:61:74:E1:2C:77:0A:72
Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F
Certificate issuer:       /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
Certificate serial:       3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
Manifest number:          3D
Signing time:             Fri 31 Jan 2025 06:31:02 +0000
Manifest this update:     Fri 31 Jan 2025 06:31:01 +0000
Manifest next update:     Fri 07 Feb 2025 06:31:01 +0000
Files and hashes:         1: SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl (hash: m/Eor/i8w4E3x3JbzyWCmoPey5fGeUdByJZtsJ0A738=)
                          2: 35525B92845611EFB053C341C4F9AE02.roa (hash: WnW59BqD7yxG6xwyHVyCL3N6dDBnzflFu8yKPNbhrU4=)
                          3: 35C99D4C845611EFB053C341C4F9AE02.roa (hash: V78F/sUvRrSVdDJyDfEyty7/vxO3/r50Hl6d0lC1src=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
        Validity
            Not Before: Jan 31 06:31:01 2025 GMT
            Not After : Feb  7 06:31:01 2025 GMT
        Subject: CN=679c6e25-fe04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:77:f6:82:76:e4:c4:07:45:8a:0c:4b:04:27:
                    02:2f:6e:c1:80:0c:57:e1:d8:d0:8f:45:29:12:96:
                    47:f2:3e:97:b5:25:0c:6d:95:df:f8:ee:15:30:28:
                    a4:af:4c:88:13:e5:1c:d2:af:a5:ed:1c:49:14:20:
                    0b:8f:3a:d6:78:3d:e0:da:3b:66:1b:be:0b:58:33:
                    81:6f:8f:fb:10:3c:b1:64:14:c5:9e:2c:31:7f:45:
                    bc:b2:04:e0:32:9a:25:73:c3:b6:6e:93:25:39:c1:
                    e0:83:8d:70:55:0b:78:f8:48:51:8b:e9:59:b3:df:
                    cd:77:8b:08:ca:3f:75:ed:38:31:b8:bc:59:fb:21:
                    7d:0c:19:67:00:57:1f:a9:8b:da:51:aa:ea:54:29:
                    85:d1:92:24:30:e7:d5:2d:fa:c9:f9:27:0d:20:e2:
                    e3:2c:a0:cb:b4:cd:76:51:13:a5:49:01:a3:93:89:
                    54:a9:e5:97:ac:40:cf:d6:a5:d8:08:fd:25:8e:42:
                    44:57:23:17:cd:3e:3d:39:c9:d4:23:cf:c5:dd:3e:
                    a4:fd:63:e0:c1:e9:5d:25:8b:51:3a:bd:ba:51:2d:
                    d8:0d:fc:b0:f1:d8:a6:f4:58:f0:4f:d5:f0:37:c3:
                    16:fd:a3:f3:9c:4d:1e:8c:7c:5b:48:74:1f:d7:ce:
                    61:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:81:54:D5:31:83:6E:FF:42:AF:15:31:FF:61:74:E1:2C:77:0A:72
            X509v3 Authority Key Identifier:
                keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:30:e2:3f:d4:a5:bb:1f:3c:aa:75:72:a7:d3:cf:05:78:23:
         32:3a:a3:16:4b:b4:41:b5:11:5a:1a:6d:f7:bb:e5:63:e2:9b:
         5a:34:49:53:1d:d3:84:24:0a:ec:11:39:ae:4a:2e:12:4f:f8:
         dc:63:89:dc:93:10:84:1e:49:2c:8b:2e:3a:1c:a7:25:b7:2f:
         af:48:cb:ba:e2:91:ee:a8:95:69:a1:ff:72:42:94:47:af:2e:
         eb:f3:d4:69:83:29:4a:30:a6:2d:ff:d0:c7:4e:17:3f:2a:02:
         c3:76:eb:4c:9e:0e:3d:3c:1a:6a:d2:8a:82:ea:cd:3a:c9:f3:
         84:68:96:64:98:6e:2a:dd:d3:dc:e5:0b:6b:68:95:10:65:98:
         18:fd:90:ce:f5:14:6c:5f:9e:ef:20:b9:99:3e:1c:53:f7:63:
         0c:2c:1c:40:6b:92:9e:af:5f:ed:5f:ff:68:a3:74:0f:03:c8:
         6c:f6:7a:d6:1f:95:7f:6d:06:fe:fa:a2:18:7e:2b:de:50:72:
         06:1c:3a:60:e7:ec:f4:2c:fb:bf:4f:12:a8:2f:81:40:d3:75:
         43:32:3a:83:22:67:39:ac:01:22:4e:c6:aa:9d:3c:c3:e4:49:
         fd:27:b9:1d:3e:d0:fb:2c:47:0d:b7:fa:a3:8f:b5:3f:95:a2:
         ad:f4:29:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:15:48 2025 by rpki-client