Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
File:                     kzrI56xL07WCmJ_Mty_JJ9cWQks.mft (raw, json)
Hash identifier:          VPB8kDmidECast/pou4/mlHaWaIp1fUceGZF+EkJ5JQ=
Subject key identifier:   6A:19:2F:B2:C4:BC:96:BA:98:9E:96:32:B9:4A:FF:11:AC:50:9E:DC
Authority key identifier: 93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B
Certificate issuer:       /CN=A91C79E1/serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B
Certificate serial:       07E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
Manifest number:          07DA
Signing time:             Thu 30 Jan 2025 20:59:52 +0000
Manifest this update:     Thu 30 Jan 2025 20:59:52 +0000
Manifest next update:     Thu 06 Feb 2025 20:59:52 +0000
Files and hashes:         1: kzrI56xL07WCmJ_Mty_JJ9cWQks.crl (hash: ktE43Ob0DrXA+EF2qDNNpemuQswaC2gMKsrPZvGnIsc=)
                          2: 26D0F9B82A6611ECB12FB439C4F9AE02.roa (hash: o8uKSFAZOoKiAV/aw+gEXp611EqrXFJMlAGF3VnwD9c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2016 (0x7e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C79E1/serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B
        Validity
            Not Before: Jan 30 20:59:52 2025 GMT
            Not After : Feb  6 20:59:52 2025 GMT
        Subject: CN=679be848-42f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d5:8d:96:2b:13:dc:11:29:3c:4e:1c:5a:a6:
                    51:dc:21:b5:48:77:2f:ff:b1:46:48:b9:5d:51:a8:
                    a4:36:2a:bb:15:75:b7:56:42:40:a1:16:55:ab:bd:
                    39:a0:d9:8a:bc:6e:55:39:0d:93:12:06:a6:f7:31:
                    60:c1:42:fa:3d:29:45:43:b8:58:b4:b9:8d:3c:70:
                    5d:8e:b3:56:47:b4:82:22:59:71:09:08:8b:fe:7f:
                    fd:1a:7f:a5:cc:76:5a:00:77:c5:67:d0:76:b8:3a:
                    fc:d0:63:d2:84:c2:f7:f7:40:8b:9b:dc:dc:f2:ff:
                    89:bf:53:0c:9c:75:f6:a1:7a:f4:96:18:0a:e1:2d:
                    e0:c0:a9:ab:5e:c9:a1:82:8b:ed:b5:a0:c6:e5:93:
                    1e:4c:18:e8:dd:7f:b5:1c:8a:11:b2:66:2f:b8:54:
                    58:ce:82:96:9d:61:70:44:b0:3f:4c:8e:8c:97:62:
                    d5:39:f2:ef:43:83:48:8c:11:f0:5d:73:45:82:3d:
                    e8:9a:ad:31:17:ef:3c:60:ff:b5:80:05:1f:75:9c:
                    37:d3:8a:07:88:9e:0b:da:1e:4a:77:89:a0:a1:e4:
                    45:89:d7:a8:23:ad:1b:66:6c:ae:a1:f2:6c:5a:4e:
                    29:57:79:69:09:92:9f:5c:2d:3b:b8:78:66:d3:42:
                    8e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:19:2F:B2:C4:BC:96:BA:98:9E:96:32:B9:4A:FF:11:AC:50:9E:DC
            X509v3 Authority Key Identifier:
                keyid:93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d0:d7:4a:24:8a:2a:29:17:99:f1:59:c1:f5:d7:fe:3b:23:
         3d:a1:d3:44:0c:f1:fa:02:5e:f4:a3:54:20:45:b6:2b:a9:03:
         97:a1:74:f6:40:a5:9e:9c:11:8e:79:11:e4:95:61:8d:ab:f6:
         3a:e7:05:ac:3d:4b:5c:fe:17:52:4b:6b:a1:79:fd:62:af:bc:
         15:72:6c:20:be:f9:63:c7:e5:2d:ac:2c:c6:30:3a:5e:28:b8:
         99:f0:88:2e:ae:83:eb:37:6a:99:b6:6e:46:a5:e6:bf:d6:87:
         04:9d:dd:3d:fc:84:5d:76:b6:eb:dd:8b:1a:46:15:65:51:0e:
         b1:48:b2:37:07:a2:b6:ab:93:cc:39:9b:76:f4:a9:92:e2:5e:
         d3:77:8f:48:27:39:32:c7:34:24:f7:27:27:e9:cd:77:0e:51:
         a4:8f:a6:28:c1:13:d6:15:2c:15:a4:50:37:bf:d2:a4:d7:7b:
         c2:a2:3d:36:04:cf:46:e9:05:b3:64:30:03:90:5c:a0:be:75:
         aa:0c:21:f6:95:30:75:4f:36:d1:3b:ef:e1:f8:21:68:58:61:
         5e:ae:bd:cd:70:1f:73:89:98:b8:69:e5:16:68:82:12:25:07:
         4a:a6:99:f1:77:49:73:1e:e1:15:ea:90:0f:06:e5:74:15:06:
         7c:09:10:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:40:45 2025 by rpki-client