Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
File:                     j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft (raw, json)
Hash identifier:          E+qqpmaTBK0rmh/TJ2taJJ5eFMFgTg82Fk6Q3nE5CK4=
Subject key identifier:   AF:3B:D7:53:E0:D9:B5:97:7F:E4:9F:0B:24:FD:78:FE:EC:23:CD:7F
Authority key identifier: 8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E
Certificate issuer:       /CN=A91C81E8/serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E
Certificate serial:       0B9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
Manifest number:          0B95
Signing time:             Thu 30 Jan 2025 18:58:13 +0000
Manifest this update:     Thu 30 Jan 2025 18:58:12 +0000
Manifest next update:     Thu 06 Feb 2025 18:58:12 +0000
Files and hashes:         1: j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl (hash: 7VtTnWZQ88e8XhZZ9R/d99pO3myCGtXCroVj+2D4h1Y=)
                          2: 659779341A4511EAA4C46765C4F9AE02.roa (hash: WVFiwUZapp9A6STjs2oU5G8NhDLpA0+WzTdM80uXluY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2971 (0xb9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C81E8/serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E
        Validity
            Not Before: Jan 30 18:58:12 2025 GMT
            Not After : Feb  6 18:58:12 2025 GMT
        Subject: CN=679bcbc5-58a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:89:78:36:7a:29:73:7c:83:23:28:70:60:1d:
                    a4:a6:15:45:43:48:65:00:5a:c3:cf:00:54:27:09:
                    54:52:e8:ec:1f:a7:e4:2d:13:a4:d5:dc:bd:0a:4f:
                    67:b8:70:f6:ec:9a:a7:43:aa:c2:53:a3:da:5d:14:
                    a9:ff:72:00:2f:6d:e8:79:5b:99:ec:5f:5c:01:e4:
                    65:36:46:0e:9d:b3:89:f6:ca:e9:f2:5f:95:cc:06:
                    9e:9f:a1:f6:33:e5:cd:0c:12:51:c8:7f:13:88:0d:
                    74:0e:ed:9b:59:a3:7e:4f:c7:f0:ec:e8:f5:26:f2:
                    71:1a:a1:ef:94:f2:02:89:13:96:28:c9:e9:59:7c:
                    8b:5b:ae:29:61:05:14:68:e7:3a:c6:b5:14:9e:78:
                    6e:8a:cc:52:92:fe:a6:34:c2:42:06:e4:3a:81:91:
                    ac:74:ad:d6:9b:a8:fa:11:aa:f9:52:c1:49:38:c6:
                    37:0a:e7:45:9c:ef:61:f2:79:b9:82:46:2c:75:19:
                    1b:5a:55:85:aa:b4:be:7e:e1:4a:c6:96:e3:f2:df:
                    8a:df:cd:e5:09:13:54:b6:31:3c:59:1f:41:43:83:
                    3d:af:62:5c:f4:cc:11:52:6e:a5:b9:a7:51:2d:8c:
                    8f:d0:66:78:cf:fe:1c:78:da:2a:0d:72:ea:55:c5:
                    e1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3B:D7:53:E0:D9:B5:97:7F:E4:9F:0B:24:FD:78:FE:EC:23:CD:7F
            X509v3 Authority Key Identifier:
                keyid:8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ff:9e:ee:5a:57:78:bf:0e:ff:51:ba:f3:78:e0:08:0a:42:
         eb:5e:7e:75:70:ce:0a:0f:78:67:5a:09:fc:2a:1e:4e:81:25:
         4f:84:0d:35:28:fd:6b:e2:b2:a9:7f:75:5e:db:94:cb:8a:a0:
         7d:23:59:86:e4:29:58:78:77:da:2c:ae:9c:52:9b:e8:8b:16:
         2c:54:ff:d2:bd:2d:2a:6a:12:62:1e:0f:f9:a9:2f:3c:82:57:
         f7:7f:b5:af:b3:dd:00:ac:c1:b3:a0:cd:69:20:83:aa:01:ec:
         bd:46:99:9b:fb:72:99:fe:39:23:5c:7d:ed:f2:85:ef:15:2d:
         9c:12:d3:79:62:e3:d5:67:f8:b5:ce:4c:f4:fa:1e:03:38:f7:
         69:66:e7:1c:54:28:8d:4c:f4:fa:49:ab:59:f0:08:79:ed:22:
         a8:e5:79:82:9f:d3:16:09:dd:24:47:27:64:88:6d:b3:34:88:
         b3:c3:bc:22:32:24:29:0b:0e:4e:bf:45:5f:62:b6:7b:81:c7:
         b3:40:3b:50:2b:c9:43:a5:53:8c:4d:c2:3f:ac:e4:72:c3:0b:
         95:00:88:b0:7a:55:6f:23:57:5a:84:a3:f1:53:c4:03:ce:5c:
         1b:52:35:29:57:2b:63:be:d5:76:06:42:57:16:cd:b0:a0:b9:
         20:10:29:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:15:35 2025 by rpki-client