Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
File:                     Swkt8QQoD0W8PyeW9AHMK0xhROk.mft (raw, json)
Hash identifier:          pu5aRxOea+GIgeMCxEV17ajFb0JLAJWZPvQvZG9jr0s=
Subject key identifier:   F4:BF:C0:01:EA:C9:11:5A:54:A4:2D:64:04:2F:CB:71:CE:8B:FE:55
Authority key identifier: 4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9
Certificate issuer:       /CN=A91C8307/serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9
Certificate serial:       19
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
Manifest number:          18
Signing time:             Fri 31 Jan 2025 07:02:46 +0000
Manifest this update:     Fri 31 Jan 2025 07:02:45 +0000
Manifest next update:     Fri 07 Feb 2025 07:02:45 +0000
Files and hashes:         1: Swkt8QQoD0W8PyeW9AHMK0xhROk.crl (hash: OiOWISQK4qNAwyTd6hHpO7xP/lUfdBqy7yo/Vq1gYgs=)
                          2: DE72D5AEBED411EF835BB47AC4F9AE02.roa (hash: 5j81/BZOYpTkz0ooChEWGP+uFOoiaPO0/qxC0SgYzdY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8307/serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9
        Validity
            Not Before: Jan 31 07:02:45 2025 GMT
            Not After : Feb  7 07:02:45 2025 GMT
        Subject: CN=679c7595-b8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:43:32:0e:fb:04:fd:af:89:a0:85:e4:9a:fe:
                    cb:c3:e8:e7:e7:04:10:4c:3d:52:ad:3e:2a:f7:f7:
                    82:c8:2c:37:46:97:76:f0:9f:62:40:e6:a7:ba:1a:
                    20:24:7e:07:b9:27:aa:3d:aa:70:a4:ff:e6:49:08:
                    8b:70:2a:71:a9:ba:43:4a:99:9f:56:24:77:f7:22:
                    f0:68:ba:60:3a:a5:fe:ef:0b:fe:62:19:0b:a2:51:
                    aa:4f:c6:26:17:5d:eb:d5:23:8a:d2:ef:ad:f6:97:
                    af:b8:07:c6:8b:28:ba:7c:0a:58:95:33:f8:ee:85:
                    b1:eb:08:c5:76:70:88:00:d2:c1:66:47:fb:49:f5:
                    00:7b:59:41:e0:0d:ee:1b:b2:ed:91:89:f8:ae:8e:
                    89:21:9b:c4:cc:58:f8:c9:7b:f1:d1:2c:86:4b:9d:
                    51:9b:40:c0:df:64:e6:7f:5b:b3:c2:59:ec:77:50:
                    f9:05:e6:8a:4a:3a:79:2f:4b:7d:f7:7b:9c:ee:1d:
                    90:31:56:4c:bb:54:c4:ba:c2:4f:52:7a:be:98:ef:
                    c6:dc:b7:8c:ba:25:c2:d6:54:50:ee:c4:f3:72:5c:
                    68:89:f0:2e:03:67:ea:ce:1e:df:b4:90:86:4e:83:
                    d0:41:54:03:e4:44:fc:c7:67:69:1b:cb:e9:48:b9:
                    cd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BF:C0:01:EA:C9:11:5A:54:A4:2D:64:04:2F:CB:71:CE:8B:FE:55
            X509v3 Authority Key Identifier:
                keyid:4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:b1:25:9f:9b:bc:82:ff:c5:22:f5:af:81:53:00:55:db:b6:
         20:11:79:b1:ca:93:6b:59:cf:5e:24:b2:cd:d1:77:e1:d2:ef:
         d3:a3:a2:47:91:3a:98:bc:26:81:58:2c:ea:22:db:42:c4:c3:
         eb:d3:93:fd:0f:70:96:f7:31:b0:e2:b4:6d:d7:0f:ec:1b:93:
         1b:5c:35:cd:7a:da:59:92:01:f9:63:f5:bf:86:74:c3:82:82:
         f5:30:03:ea:e2:de:e9:72:18:2b:46:41:6a:12:ec:d6:87:c4:
         f2:d8:12:5b:87:b3:f2:e8:d2:f2:8f:c1:42:48:06:e9:7f:6c:
         3c:e6:93:cf:44:fb:7e:c5:5c:6f:5f:33:b1:fe:20:3e:af:b6:
         e2:4f:22:d3:72:58:07:0c:2c:7e:4d:79:c1:6f:a4:3a:cc:10:
         da:26:46:1e:7a:9b:db:ce:e7:71:39:04:9b:68:4a:d7:a2:2a:
         7d:96:bf:33:26:8f:5f:de:9b:36:fe:f4:1e:8f:bd:5f:0a:fa:
         73:20:83:27:7a:6d:a7:2d:eb:ac:32:f4:ba:97:d0:6d:87:8a:
         a9:bd:b2:65:49:3e:6d:d8:b6:35:e2:8d:ea:4b:8f:fc:4f:70:
         89:d5:b0:9a:46:a5:95:0b:68:5a:26:9e:63:96:8c:bc:9e:d8:
         81:03:40:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:01:17 2025 by rpki-client