Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
File:                     Fm664SGI_4_HXurj7PjTvearJxo.mft (raw, json)
Hash identifier:          5l7glxseW5kIfe8eCSIfDizIUo0FozRMC0TILxLB0cc=
Subject key identifier:   12:9B:54:79:85:BC:D3:DF:56:95:BD:67:87:1F:5E:EF:2B:55:2E:E8
Authority key identifier: 16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A
Certificate issuer:       /CN=A91C654A/serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
Manifest number:          0830
Signing time:             Thu 30 Jan 2025 22:13:50 +0000
Manifest this update:     Thu 30 Jan 2025 22:13:49 +0000
Manifest next update:     Thu 06 Feb 2025 22:13:49 +0000
Files and hashes:         1: Fm664SGI_4_HXurj7PjTvearJxo.crl (hash: f7Ie2VfXvAt0uJKu51QU+8NU1pg3PgcNQHIyy4qWCWE=)
                          2: 50F8849CFDC111ED95AAA041C4F9AE02.roa (hash: 0DD71MyNn/a0ClFzY+negnwcfIlHkrg4N1Q4gkDWcxQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C654A/serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A
        Validity
            Not Before: Jan 30 22:13:49 2025 GMT
            Not After : Feb  6 22:13:49 2025 GMT
        Subject: CN=679bf99d-6ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d1:e9:a2:57:54:22:59:e0:e5:d8:7f:e6:cb:
                    b3:e6:5f:58:0b:09:35:a9:f7:8c:99:8a:e9:43:82:
                    c5:ae:c9:a3:3d:f0:8f:ec:47:58:9c:76:28:1a:c3:
                    29:28:e6:df:f2:0e:c0:f1:b7:7c:68:19:ef:4d:38:
                    64:62:79:8a:f7:19:0b:78:09:8f:97:1e:e1:33:67:
                    12:87:51:5d:2d:dd:78:e7:51:59:49:30:80:9f:7a:
                    4d:07:c9:b8:c4:60:17:42:9e:29:30:8d:f6:c1:be:
                    64:dc:2c:9c:63:f5:a4:be:94:fb:85:79:e7:90:ea:
                    7b:75:48:84:4a:5a:a8:4a:dd:b6:4c:45:23:60:01:
                    4b:10:d9:d0:c9:78:62:55:89:54:24:b1:84:ad:17:
                    5d:a7:aa:4a:3b:ae:45:c2:8a:b9:c9:8e:14:9b:ba:
                    9a:dc:1f:72:1a:3d:bc:02:43:96:31:2e:a2:cf:74:
                    b0:e3:46:89:ee:6e:06:27:eb:65:60:d4:46:21:e4:
                    54:93:55:d6:14:92:89:12:d2:ad:c4:d1:81:e2:91:
                    df:f2:c1:16:5b:8d:02:0f:3e:76:90:c9:9c:a8:28:
                    68:04:5c:4c:bf:fd:b3:00:6b:da:81:a5:6b:7b:c0:
                    7b:fe:be:f9:0b:ad:8d:3e:77:40:2b:b8:d8:29:eb:
                    63:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9B:54:79:85:BC:D3:DF:56:95:BD:67:87:1F:5E:EF:2B:55:2E:E8
            X509v3 Authority Key Identifier:
                keyid:16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:de:6f:d6:27:22:d3:60:ad:08:b5:6a:4e:90:0b:57:30:b4:
         75:dc:3d:dc:25:20:bf:a0:65:b6:ae:1d:a3:80:11:df:13:c5:
         8d:b4:ef:55:f7:58:28:d3:27:a3:11:65:a2:8d:08:b6:a6:34:
         54:f5:02:a0:e2:23:b9:ba:5a:0d:e1:08:87:09:80:b4:78:98:
         e6:a1:cc:c2:33:40:be:36:9d:fd:03:30:0d:b2:e9:5b:50:53:
         e7:11:39:80:34:2d:1f:6f:74:b7:61:42:90:50:1f:ad:ae:bd:
         f0:f1:74:14:2c:7d:5f:dd:42:c3:0f:95:c4:23:52:79:20:ac:
         bb:bb:0d:5e:65:db:14:44:e4:31:20:96:74:d5:9d:4c:9f:bc:
         e5:5b:32:67:77:07:2a:82:15:43:0f:53:7d:61:21:29:ae:07:
         1a:c7:2a:8e:d0:47:e3:ec:1c:53:49:e1:30:1f:49:66:0b:70:
         31:d2:25:b4:ec:63:5c:f7:ef:bc:f9:21:52:1c:b2:a5:f9:2b:
         8d:b5:fc:7c:09:98:bd:0b:02:1e:bc:65:bb:1d:e9:4a:62:57:
         c2:fd:96:46:f9:22:06:8c:d3:35:49:36:65:ed:29:66:08:63:
         eb:c7:56:d1:13:00:8f:2e:6a:3e:b9:2a:9f:8c:30:7b:27:56:
         d2:6d:06:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:57 2025 by rpki-client