Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft
File:                     96B_epkcIaJc05qyCt5Po7XgXRU.mft (raw, json)
Hash identifier:          1VjFBOQ+dRRUkirh/KtRz5fzkhIuCdoT9bN9jFYeTrw=
Subject key identifier:   42:E2:21:41:44:22:82:15:31:C7:FC:53:B1:FA:6E:20:1C:16:B8:9F
Authority key identifier: F7:A0:7F:7A:99:1C:21:A2:5C:D3:9A:B2:0A:DE:4F:A3:B5:E0:5D:15
Certificate issuer:       /CN=A91BEC2F/serialNumber=F7A07F7A991C21A25CD39AB20ADE4FA3B5E05D15
Certificate serial:       0390
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft
Manifest number:          0383
Signing time:             Fri 31 Jan 2025 00:58:50 +0000
Manifest this update:     Fri 31 Jan 2025 00:58:49 +0000
Manifest next update:     Fri 07 Feb 2025 00:58:49 +0000
Files and hashes:         1: 96B_epkcIaJc05qyCt5Po7XgXRU.crl (hash: x+lA0wLzw3wyzBPY63brs2ZrA27byu6tT2qbBSLdQA4=)
                          2: B843A2DE29B011ED8AB64660C4F9AE02.roa (hash: FxAP/J/FPDNaLo9BONled54l0bbXYkJ639e/aSCdwDU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912 (0x390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEC2F/serialNumber=F7A07F7A991C21A25CD39AB20ADE4FA3B5E05D15
        Validity
            Not Before: Jan 31 00:58:49 2025 GMT
            Not After : Feb  7 00:58:49 2025 GMT
        Subject: CN=679c2049-2812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:e3:ec:36:f1:eb:70:54:33:63:9d:62:5b:
                    ad:da:79:e4:82:fa:81:28:7d:23:c1:0c:02:78:73:
                    cd:1b:20:51:9d:33:cd:f4:ea:a7:26:34:4b:8a:25:
                    39:d6:05:2f:f6:13:13:e2:ee:38:1c:39:3f:eb:04:
                    34:38:54:57:7f:e3:89:5a:2e:37:8d:79:09:a9:1b:
                    a6:a4:9f:af:e1:be:9a:4a:a2:b5:d9:79:54:91:f7:
                    7e:eb:b8:7f:d5:05:ab:a1:c2:a2:d9:1b:b2:0b:63:
                    60:de:cc:77:45:a3:1a:38:5a:e8:33:0b:f3:85:1e:
                    39:30:61:c4:00:67:c0:08:e1:92:f2:fe:b4:7e:e4:
                    95:c8:a5:01:e9:6d:5f:fa:86:09:c6:4f:95:9a:52:
                    bc:66:aa:5d:23:39:ec:59:37:1b:b5:97:3c:e6:c7:
                    48:8b:2c:ac:dd:a0:7b:ca:c9:46:ce:5f:dd:63:79:
                    d9:82:bb:74:80:a8:97:c4:bc:af:64:96:d4:7e:e1:
                    48:3b:86:ca:49:21:32:68:8c:24:87:95:c6:49:d2:
                    2e:17:ce:86:cf:fc:d7:15:ca:d2:55:60:26:36:ca:
                    a3:20:7b:50:f3:4e:7b:98:9f:ad:6e:aa:b4:a5:26:
                    f5:94:38:60:9c:ef:1f:55:ac:16:3d:5a:78:d6:4d:
                    f4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E2:21:41:44:22:82:15:31:C7:FC:53:B1:FA:6E:20:1C:16:B8:9F
            X509v3 Authority Key Identifier:
                keyid:F7:A0:7F:7A:99:1C:21:A2:5C:D3:9A:B2:0A:DE:4F:A3:B5:E0:5D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e3:bb:ab:b8:87:e8:dc:66:51:7f:f6:45:a8:38:bc:56:a7:
         9b:9c:c8:30:5b:70:34:77:a7:43:e3:cb:b1:ba:ea:e6:38:d4:
         f1:1b:d6:6e:9e:b7:0f:06:23:77:bc:06:bd:c8:85:24:d2:03:
         ab:44:98:9d:fa:4a:3f:50:54:8f:60:bd:35:61:27:6c:9f:af:
         d1:90:59:ad:77:0d:d7:ef:97:14:dc:01:cb:0f:70:e4:5d:3c:
         09:a0:2f:37:c8:27:62:8a:73:a9:89:4d:3d:fb:ee:85:97:eb:
         78:5f:83:40:fb:da:29:82:da:ca:64:8e:be:87:84:9e:ef:e6:
         8b:65:76:6d:2f:a0:ba:78:dc:ef:09:cc:a1:5e:98:51:f6:4f:
         0e:99:eb:fe:84:3a:29:cd:90:ad:0b:ec:cc:0c:58:25:5b:d1:
         3d:80:42:7c:0c:1b:11:7e:ed:24:4c:03:04:c7:26:96:0c:c3:
         09:c8:f8:62:26:05:d0:ec:9a:32:c5:15:df:f1:5c:e5:25:dd:
         6e:e5:69:f2:cb:fc:93:49:4c:d3:2a:2b:e1:f5:fb:31:7e:d0:
         b5:2b:60:b1:90:32:95:d6:1b:2e:82:99:1c:67:e5:56:dc:22:
         b8:ca:55:87:18:58:3e:14:fd:4f:d1:45:31:80:d2:bb:4c:40:
         cd:ea:99:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:11:08 2025 by rpki-client