Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft
File:                     SU13HlEeEgBTuwmx8nS9j1nXOqg.mft (raw, json)
Hash identifier:          rGCIZYQsmRdbwdfHVpn8IhDc5EqZzPccq9yhNU36XSE=
Subject key identifier:   34:4B:55:EA:EB:4D:76:DC:5F:E7:28:76:91:38:8B:69:DE:FE:3F:9F
Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8
Certificate issuer:       /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8
Certificate serial:       0C68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft
Manifest number:          0C5D
Signing time:             Fri 31 Jan 2025 18:12:32 +0000
Manifest this update:     Fri 31 Jan 2025 18:12:31 +0000
Manifest next update:     Fri 07 Feb 2025 18:12:31 +0000
Files and hashes:         1: SU13HlEeEgBTuwmx8nS9j1nXOqg.crl (hash: EvCLvJzsXyZ9Ju/XGZn4BYpHEeiTxDRmYsi9Z2q7NA4=)
                          2: 36BB47B6D9A911EF89038F1AC4F9AE02.roa (hash: OOF/b7AZN46iSW47VIOG3TgQEjgojDl66vynN/q29SI=)
                          3: 120309CED9A711EFA1A06175C4F9AE02.roa (hash: q+1Y5hq/yh4YfPOJkEBoniKbdoZsahE93nmVVL/JHCc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3176 (0xc68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8
        Validity
            Not Before: Jan 31 18:12:31 2025 GMT
            Not After : Feb  7 18:12:31 2025 GMT
        Subject: CN=679d1290-c742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ed:42:27:2a:21:fa:18:a3:36:a9:34:72:5d:
                    bc:23:38:16:27:58:73:b8:db:30:c1:27:a9:cc:41:
                    4f:10:cc:1e:ce:a4:91:4f:f8:59:68:44:6f:c5:4d:
                    ea:bc:a0:56:38:4a:5c:6e:8c:d5:8a:9a:b9:64:bf:
                    99:af:e8:81:ed:ef:20:1f:81:ca:7c:a0:6f:96:25:
                    41:94:ee:1d:b3:b3:f8:e6:ad:2e:3b:21:8f:f4:80:
                    4e:31:88:a2:cd:e4:0b:d6:a2:ad:3f:a8:0e:84:5c:
                    06:da:c9:e4:95:0d:92:37:bb:16:a8:84:19:17:d8:
                    be:cb:58:57:c4:4c:ce:12:fc:9c:37:cb:b7:ee:9b:
                    8a:7e:9d:f1:34:0c:da:3d:47:93:c9:36:84:b7:35:
                    15:f5:c9:51:ae:f4:a7:d3:ec:e3:ea:d6:61:e6:1b:
                    e4:f8:db:98:5f:f0:69:7e:8e:b7:12:ee:53:70:8d:
                    91:6c:9b:d0:ca:6c:6e:18:1e:af:ab:8d:17:00:c6:
                    ed:36:79:bd:01:81:47:ae:dc:41:51:42:4a:4d:68:
                    af:52:72:50:a7:5e:2d:5b:04:2b:a2:18:e2:6b:65:
                    12:52:75:6b:73:71:7a:58:bf:9b:a6:61:fe:3b:fe:
                    36:c6:bc:b1:b4:5f:02:61:ff:d6:26:f0:5a:30:f1:
                    74:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4B:55:EA:EB:4D:76:DC:5F:E7:28:76:91:38:8B:69:DE:FE:3F:9F
            X509v3 Authority Key Identifier:
                keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:67:a9:d8:92:45:8d:0b:83:db:a1:4d:6d:22:8c:b2:3b:fd:
         ba:f2:bc:43:d3:a4:e2:5d:16:15:fd:20:e9:ec:2b:0a:fc:55:
         ba:d0:bd:d0:f5:ba:a0:19:18:72:8f:b6:49:e1:54:22:22:35:
         86:93:c3:60:2a:c3:6b:1c:0a:d2:c7:c2:3d:4d:f3:5f:27:0c:
         ae:79:21:b8:b2:8d:6f:ca:ab:93:a5:ef:23:29:18:51:63:99:
         af:f3:2d:21:c2:4a:26:e4:47:00:7b:bd:0b:3b:b0:a8:05:72:
         01:48:aa:97:50:6a:a7:50:5c:23:ee:b3:82:4f:86:eb:02:5c:
         1d:43:f4:1a:b5:28:6f:24:ed:e4:02:aa:72:ff:c7:e5:41:09:
         58:d7:b8:3c:c2:cb:49:b4:b4:1f:d2:1f:3b:93:dc:a8:d1:de:
         b8:0c:7f:ef:27:0d:60:9d:e5:68:35:93:57:8f:75:7c:33:fb:
         2d:26:ce:7a:6f:b5:86:c4:d6:39:56:5e:e2:fb:40:2c:fe:46:
         df:6c:43:aa:e4:31:99:b4:23:14:02:8d:6b:c2:ac:20:bb:96:
         95:bc:33:0e:9e:73:bd:85:64:4b:98:3b:c5:ea:cf:25:f6:ee:
         d2:59:f6:8e:27:b0:9a:61:98:f4:f3:a1:cf:fb:3e:12:0f:76:
         5c:f8:ef:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:00:32 2025 by rpki-client