Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
File:                     edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json)
Hash identifier:          1275i9umOs8bYbfSdWPHP8k/8a3dsgmVXhjeflkxe1U=
Subject key identifier:   A3:40:71:DE:D2:C3:A1:C1:55:84:76:A6:3F:68:63:5C:0F:8B:FE:11
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Certificate issuer:       /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial:       13AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
Manifest number:          135A
Signing time:             Fri 31 Jan 2025 16:59:56 +0000
Manifest this update:     Fri 31 Jan 2025 16:59:56 +0000
Manifest next update:     Fri 07 Feb 2025 16:59:56 +0000
Files and hashes:         1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: 44L+M3BxAhnVHoneY8DBu7Q0CVUmxUyEYjcHhm1Lk9o=)
                          2: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: bxKpA/oFCU6TUM9crxLIgO78TFK6gY7b8jSCF6lkl2Q=)
                          3: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: Ie+fFLUk+hkh8iPsi0JIDwR97rjtnpIzqO2/djh9dOA=)
                          4: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: HMDXcvVMEGAxoOC++6wcObudAAOApyw/6bDY30a1r+o=)
                          5: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: bwsT9LHkujI+JrOu04/8rGiF6KuhSDYaJy2PKrf04nk=)
                          6: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: vIOfq2VGA/o5BqEJqyV+v1G5m5lQGi2kmLP/YtnJAmE=)
                          7: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: l4uHSTMAHvz3K39iQ1N6BJocMGP4W2EFJHrCsRCiw/k=)
                          8: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: 0Wf6MrY856EXSgNTseMSxFkk6LBzj+vW0CkBQhFM5Vo=)
                          9: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: wsYRvalqXpbWZCIqLrO6x3uxF4QcGxGmLPv4fG6+ndk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5039 (0x13af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
        Validity
            Not Before: Jan 31 16:59:56 2025 GMT
            Not After : Feb  7 16:59:56 2025 GMT
        Subject: CN=679d018c-33e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:66:5c:54:28:7f:c7:ed:c6:c2:f0:cf:a6:84:
                    e7:bc:3e:5d:4d:8f:97:9c:dd:75:6e:fa:df:ea:2a:
                    ed:0f:8a:71:a2:cf:2b:10:f6:d5:60:8d:66:46:5d:
                    e8:57:1d:0b:4b:a1:fc:72:36:0f:eb:e9:20:a3:9e:
                    05:85:55:ae:e7:f1:c5:c4:72:0b:53:36:ac:9b:ee:
                    91:88:76:ec:da:a7:0e:6c:9c:f4:de:6c:0f:57:b0:
                    b0:e5:bb:6a:bb:7c:5e:8f:cf:8f:46:84:d8:00:1b:
                    43:60:18:2b:d0:6a:5b:0b:3b:1e:e0:cb:86:63:d6:
                    05:75:73:1f:64:8e:5e:af:b9:d7:06:2a:d9:3d:0f:
                    01:21:60:7e:63:36:eb:f2:78:09:da:8d:a0:64:de:
                    81:ad:c9:91:d6:1b:98:71:e7:90:e9:45:8e:66:2e:
                    12:52:45:19:4e:06:63:5e:a6:1f:ca:88:7e:11:c4:
                    0e:23:5c:b9:62:1a:69:be:35:60:7d:4d:b6:b0:40:
                    94:38:24:7e:b8:67:4c:2b:64:c0:9c:e4:b7:c2:68:
                    a3:63:4a:d8:a7:0c:41:8c:9e:fc:44:30:c2:b0:46:
                    7e:f4:3a:91:24:ae:f1:0c:cc:40:38:b3:7a:b4:d8:
                    67:c5:bf:fa:97:d8:50:07:89:b8:57:91:0f:91:23:
                    81:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:40:71:DE:D2:C3:A1:C1:55:84:76:A6:3F:68:63:5C:0F:8B:FE:11
            X509v3 Authority Key Identifier:
                keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:bd:a1:63:ef:18:9c:73:7c:03:53:47:65:d2:eb:96:67:ca:
         21:67:7f:a1:0d:a3:e8:7f:ce:a7:d1:10:8d:fb:74:09:25:d9:
         bc:bb:64:5a:e4:82:f1:80:63:12:61:14:cc:31:74:35:56:7f:
         a8:33:41:f5:5a:cd:ba:1b:d4:a6:dc:d3:f0:9e:2f:5e:16:89:
         5e:21:7c:30:5c:c2:6a:ce:60:00:83:c2:55:fb:9a:c9:4b:03:
         3a:ce:09:87:3c:76:b2:78:35:ec:10:c7:ea:66:eb:9a:b7:8a:
         e0:6e:b0:33:8d:f8:7f:6e:dd:ed:a1:d3:c4:40:2c:e8:aa:67:
         9a:88:ab:95:a7:ca:da:0c:ce:ae:ab:af:cd:c0:ac:38:e7:fa:
         f4:b9:55:8a:c3:39:99:10:5d:4d:1b:a6:f4:bb:e2:17:ca:8f:
         bf:3e:69:25:5f:f3:f4:f6:1e:64:bf:3a:15:9c:23:22:e1:02:
         90:de:78:16:3f:05:44:df:ea:47:90:64:ba:26:41:3c:73:6b:
         35:9e:9f:2c:f9:28:9a:41:ec:93:fe:86:01:d0:3f:ad:5d:21:
         4e:41:e6:77:ef:52:be:19:63:5f:5b:ac:ce:4f:f2:07:c5:30:
         fe:d2:1e:46:f2:37:0a:5e:82:3f:32:0c:41:a5:ce:3d:2a:20:
         15:bd:1b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:12:54 2025 by rpki-client