Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft
File:                     f5auCiLKk4vV-dmnMor1g2LrIsE.mft (raw, json)
Hash identifier:          k8rAMGbwXUNq2ZZDOXeC+A4DTYwsuGsJ5BN9H+9HSVM=
Subject key identifier:   7B:FA:B8:65:37:55:CE:A9:45:7D:AE:DC:30:DF:B3:35:68:08:23:1C
Authority key identifier: 7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1
Certificate issuer:       /CN=A91BFFBE/serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft
Manifest number:          2D
Signing time:             Fri 31 Jan 2025 06:45:33 +0000
Manifest this update:     Fri 31 Jan 2025 06:45:32 +0000
Manifest next update:     Fri 07 Feb 2025 06:45:32 +0000
Files and hashes:         1: f5auCiLKk4vV-dmnMor1g2LrIsE.crl (hash: fNH5bp/ZVhR9bbZGqQm8+BjuPsbdlpo9vjXwzXR9bHs=)
                          2: 4450DA2C9D0311EF877CD229C4F9AE02.roa (hash: buSMZTKEc3PdwiMwBtG/n0gmpQCMqdjfMf4AjKQfjyg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFFBE/serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1
        Validity
            Not Before: Jan 31 06:45:32 2025 GMT
            Not After : Feb  7 06:45:32 2025 GMT
        Subject: CN=679c718c-96be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:be:10:09:fa:99:b4:a5:79:71:66:8e:0a:ae:
                    51:3d:d7:a6:da:2e:3f:78:3f:0c:ae:29:ac:8d:79:
                    d0:a4:30:46:2f:0f:a7:52:b1:f3:76:13:05:a3:63:
                    21:a5:44:90:b7:08:c6:8e:12:c4:a1:c7:54:37:87:
                    39:e0:10:d3:f1:85:db:6b:66:33:a1:bb:6d:a3:e8:
                    d5:47:64:26:3e:3c:87:a6:fa:0f:74:8c:9c:7a:63:
                    4c:d4:ea:62:bd:f6:e4:1b:4c:4a:f2:c9:c8:10:87:
                    9a:e6:6a:df:9e:64:cd:c4:a2:56:ea:32:fb:e2:fb:
                    f3:60:5d:54:c4:07:e5:37:1c:b8:9c:89:4b:c7:f6:
                    d8:16:e1:6e:74:d6:cd:a3:eb:74:81:3c:e0:0c:e6:
                    57:f7:da:6e:7e:a1:2a:51:b9:f9:72:e4:8b:5d:7d:
                    29:c5:fe:5d:9b:d3:29:0f:a7:6f:2c:dc:55:f6:e1:
                    e9:43:0f:79:08:75:f4:dd:39:3b:48:9d:aa:c1:e9:
                    80:ae:81:83:5f:f0:96:45:92:5f:00:35:ed:29:f4:
                    4a:47:a9:f2:67:eb:e7:27:b1:1c:8e:14:11:6b:56:
                    93:1f:9a:92:0f:e2:1e:05:91:3c:ac:29:6a:da:a9:
                    1e:aa:14:8c:ab:83:99:d7:b7:e2:5c:83:f4:03:ea:
                    46:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FA:B8:65:37:55:CE:A9:45:7D:AE:DC:30:DF:B3:35:68:08:23:1C
            X509v3 Authority Key Identifier:
                keyid:7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:0a:ce:da:9a:c4:15:7a:28:ae:45:dd:dc:eb:f1:c1:39:d9:
         fe:f6:c1:4c:1e:9e:85:ae:62:98:66:52:7f:6b:2f:5a:90:3a:
         ac:a7:b7:18:f1:1f:2e:d1:76:e4:39:fa:b0:9c:e9:0e:70:cc:
         c0:68:77:cf:21:aa:2d:10:6e:29:79:5a:c4:ca:29:33:2e:dc:
         83:3f:a7:8c:e8:4c:61:51:8a:64:59:37:df:fd:80:7a:75:c2:
         da:07:32:7f:e6:c0:23:5a:92:33:83:e0:d1:83:ed:51:81:1e:
         fb:7a:e3:1f:30:81:4a:ad:5a:20:31:45:a4:d4:07:43:87:30:
         1c:52:4c:ee:1b:10:ca:66:d4:30:a8:3c:13:cc:1f:56:9e:08:
         e1:00:2b:cb:d1:3c:b4:5e:78:f9:d2:e9:4b:c5:60:d0:46:f8:
         3e:5f:fe:50:ef:12:fc:b9:9a:21:48:d0:c8:83:a1:ad:04:4a:
         6f:15:cc:53:79:ee:c1:e8:18:f9:57:f0:e8:0f:31:71:12:bc:
         dd:d8:4f:f6:5b:eb:3a:88:77:7c:71:54:f8:58:c6:d3:c6:9f:
         4c:0b:55:20:6c:06:4b:8b:06:a5:6c:b1:c2:dc:dd:20:a1:14:
         db:80:3b:43:c1:e4:12:a2:37:ef:00:2c:4a:d0:bd:78:5e:b6:
         5a:bf:ea:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:48 2025 by rpki-client