Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft
File:                     baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json)
Hash identifier:          /+9B4m6M8pe/rHtRLWQ4OxwUyYucCbFcBvbdHObW97w=
Subject key identifier:   6E:EE:9B:5F:6B:43:4A:36:CC:8E:76:EB:37:47:87:E3:B4:A6:6F:B8
Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A
Certificate issuer:       /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A
Certificate serial:       0A3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft
Manifest number:          0A2C
Signing time:             Thu 30 Jan 2025 19:52:02 +0000
Manifest this update:     Thu 30 Jan 2025 19:52:02 +0000
Manifest next update:     Thu 06 Feb 2025 19:52:02 +0000
Files and hashes:         1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: eHOOSa5PUv3nhwxHAdOe1DFLBjqydmtaie36y8VW4WQ=)
                          2: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: M+Tax7VG5rWwMeFmLKAhTKuNTWFgY09O4MxcZyAINIM=)
                          3: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: atmi78TUPnJSElHg9rmGVGz4tW8Pja2ubn4FGuQeO3A=)
                          4: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: JiElKZX5FAky3YUtr16s6rTxBUIiCodYWGxVZrlNjio=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2622 (0xa3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A
        Validity
            Not Before: Jan 30 19:52:02 2025 GMT
            Not After : Feb  6 19:52:02 2025 GMT
        Subject: CN=679bd862-9f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:02:46:de:0a:70:ab:b1:60:3a:dc:99:81:40:
                    0e:a3:5e:e2:f7:5f:d3:97:3e:74:b5:88:36:d3:7e:
                    3d:c7:e2:f5:65:93:cf:6e:df:66:81:33:a1:9e:0e:
                    38:31:89:aa:43:50:24:13:43:74:cb:68:93:fb:e0:
                    f4:49:c9:17:72:b6:9f:d0:cc:b5:50:65:4d:51:7d:
                    c5:79:4e:72:d4:57:85:e9:e8:0f:8e:32:b2:66:ba:
                    7e:ac:33:b9:8d:9e:7d:d1:02:01:f3:4b:3a:1e:6b:
                    ad:20:75:40:95:d6:a8:6b:13:92:ab:6a:7b:c9:50:
                    2a:43:03:17:1b:40:ac:c9:20:96:ef:74:df:fe:31:
                    4b:ca:b8:14:f8:60:a5:13:a3:f2:37:3b:b2:d2:30:
                    c0:1a:19:22:dd:8e:17:84:e1:13:ca:ab:38:31:5f:
                    6c:6c:bb:2d:ac:7b:30:c5:a8:55:69:d7:e3:25:c3:
                    99:d0:fc:34:f4:9b:e2:a7:a6:20:75:98:42:d0:4b:
                    2c:59:a1:02:57:c3:74:40:1f:24:93:c9:d3:60:18:
                    58:69:9e:a5:8d:2f:d0:6a:8a:d1:7d:26:4a:e2:5f:
                    d9:2a:50:cb:53:8e:f4:61:3f:2d:5c:0b:41:f0:bd:
                    85:56:e2:0a:ab:bf:c4:17:c1:81:d5:a6:59:08:85:
                    14:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EE:9B:5F:6B:43:4A:36:CC:8E:76:EB:37:47:87:E3:B4:A6:6F:B8
            X509v3 Authority Key Identifier:
                keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:2f:0b:c6:ef:0c:03:79:bf:ee:86:d8:db:c3:c7:73:6a:6e:
         cc:99:05:35:6d:ce:01:81:bd:88:8a:b6:e6:8d:4b:92:0b:86:
         b4:6e:1d:c9:b1:f3:02:63:aa:0f:92:91:b9:20:0c:51:f8:a9:
         e1:53:56:b7:ab:be:94:f4:e9:4a:fe:37:da:3f:d5:9b:3f:4f:
         97:39:9d:b6:01:fd:ad:6d:14:6e:37:72:02:f9:eb:da:ce:41:
         47:07:b2:25:cf:03:cf:d9:55:a7:77:9f:ed:ed:bb:cf:c2:a8:
         1e:e3:cd:68:81:95:0b:0d:24:c7:5b:37:dc:fa:e7:ae:c7:e2:
         1d:27:05:c3:ad:d7:7c:20:f0:c3:e4:e4:45:1a:a6:7e:c1:18:
         c4:75:92:15:c0:90:2d:71:19:2d:a2:6d:7b:69:8d:b9:f2:33:
         78:db:f5:82:b5:25:52:00:a9:e3:dd:53:c2:81:9d:b5:68:f4:
         28:63:bc:a6:f0:68:96:b4:8e:cd:3c:2d:17:a7:8b:e4:fa:58:
         ad:64:a4:8c:fa:e6:fa:07:3f:da:30:68:c3:94:37:2e:53:47:
         4c:2e:b0:77:41:8b:d4:96:3d:6f:18:7b:86:be:d2:64:04:af:
         6a:54:2c:00:6c:6b:8a:90:c2:7c:44:fa:11:57:ba:d2:23:71:
         ac:17:aa:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:54:54 2025 by rpki-client