Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
File:                     6kGaeWKZYloHSmW3ys7_GLgGbIs.mft (raw, json)
Hash identifier:          kMsOTSpFgM/Zkihu3ycZqYMBnEcXJN3doVmofUulaac=
Subject key identifier:   FE:C9:B6:C6:F6:35:46:3A:AB:FA:FA:2B:38:95:2F:01:65:40:84:4B
Authority key identifier: EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B
Certificate issuer:       /CN=A91BEBB1/serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
Certificate serial:       01B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
Manifest number:          01AC
Signing time:             Fri 31 Jan 2025 02:27:53 +0000
Manifest this update:     Fri 31 Jan 2025 02:27:52 +0000
Manifest next update:     Fri 07 Feb 2025 02:27:52 +0000
Files and hashes:         1: 6kGaeWKZYloHSmW3ys7_GLgGbIs.crl (hash: EHWCBzw8AgyKvxCeo+kgH+Ao4llQ720fayuTQ5siY9Y=)
                          2: 8CD5FC2253A011EDAC40531BC4F9AE02.roa (hash: IlKGwFHV9ZEo1VbyiGg5B3egdFnPmqfH6pmscMBr3y0=)
                          3: FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa (hash: ceGnF1r8IOwVE50G1+2RnDibZLWap/obpLcH2ZWlhhY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEBB1/serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
        Validity
            Not Before: Jan 31 02:27:52 2025 GMT
            Not After : Feb  7 02:27:52 2025 GMT
        Subject: CN=679c3528-ca87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0e:da:5a:ec:4e:6a:e2:97:d9:2c:4c:f5:a0:
                    0f:5a:07:05:db:89:af:7b:f5:9b:66:a6:77:ac:46:
                    1c:2e:d8:6b:34:19:3f:9b:36:ff:b1:06:3e:41:24:
                    c7:f3:f9:e2:91:99:e8:31:67:9d:31:95:c9:30:1c:
                    41:29:7c:9d:1c:0d:95:02:93:39:a0:f2:14:7e:fc:
                    00:ea:95:5f:f4:23:70:4b:c1:12:87:1c:f6:92:c8:
                    1f:2b:2c:e9:6e:e5:a9:85:10:13:42:e2:24:a9:35:
                    a8:69:e7:81:39:df:ef:1b:e2:b6:fa:e6:0b:cc:64:
                    a2:ba:82:9d:bb:bd:29:3b:2a:e3:81:18:b8:3f:24:
                    e8:0d:56:9b:85:c1:a9:f7:41:f7:8b:94:5d:b1:c7:
                    f8:e0:88:f9:fc:72:51:e6:10:05:0e:01:02:c1:79:
                    cb:75:92:b1:6e:e8:e3:1e:f3:ff:7d:90:47:67:6a:
                    7c:46:1e:8b:d9:fc:0a:4c:19:5f:62:ff:1c:4b:d0:
                    5e:7f:f5:6b:e8:eb:77:a2:89:46:76:1b:b4:8d:47:
                    e6:48:2f:80:2a:6e:63:23:42:36:4c:42:d7:46:10:
                    4a:7e:42:f1:ed:b6:b1:12:7d:31:94:d7:50:c7:93:
                    14:58:f8:88:8a:d6:52:48:62:99:7d:94:7a:d2:7c:
                    5d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C9:B6:C6:F6:35:46:3A:AB:FA:FA:2B:38:95:2F:01:65:40:84:4B
            X509v3 Authority Key Identifier:
                keyid:EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c9:d9:db:69:a7:bc:8a:3b:ef:06:83:1b:f5:9b:39:cc:61:
         e7:dd:66:f2:55:72:f2:de:03:05:69:3b:f4:44:a2:e1:15:1b:
         aa:a4:6e:3a:fe:78:d8:92:71:62:1c:54:83:1e:ff:99:f2:8a:
         67:2a:f7:7f:3f:27:d4:e3:6e:0b:9c:b8:74:00:e1:fe:20:dc:
         df:e5:d5:80:ba:5c:df:bf:d2:df:a1:6e:c2:9d:3c:8b:22:40:
         35:02:f0:1a:15:7a:31:94:9c:c0:28:a2:8f:8a:96:05:2b:c6:
         15:4d:d1:41:69:e9:a7:b6:15:f3:c3:eb:aa:08:90:94:02:19:
         fa:28:71:39:9d:87:dd:38:85:c1:4a:a8:73:ca:4f:eb:68:f4:
         0d:82:08:d7:89:4d:7a:4d:c6:43:1e:9e:b8:d8:13:17:a6:08:
         af:a3:5b:55:5d:65:0a:f5:4d:88:0f:d1:3a:85:9b:3c:98:27:
         06:79:3d:e9:0f:d2:d6:d3:4e:3c:1a:d5:88:12:6e:26:69:dc:
         e9:45:36:81:03:9b:d5:03:54:93:1e:a3:0f:3a:b2:d6:f1:07:
         83:e3:98:9b:4d:5a:1a:d8:4c:ef:e4:db:23:c1:58:00:ea:1c:
         fc:d4:c7:dc:18:d7:96:e3:ef:2b:63:11:6d:7a:80:b4:bb:8c:
         10:89:37:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:59 2025 by rpki-client