Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.mft
File:                     R1tipfIz7QWscth4EjThCb86kIw.mft (raw, json)
Hash identifier:          9mawwbiRJuFt/O7EQ/Fj19oUsPZ7HRwpRazOQ6felBo=
Subject key identifier:   5A:80:8B:32:74:0C:4E:4A:DF:64:9C:F3:26:BC:C0:BE:00:A5:0A:9B
Authority key identifier: 47:5B:62:A5:F2:33:ED:05:AC:72:D8:78:12:34:E1:09:BF:3A:90:8C
Certificate issuer:       /CN=A91C911D/serialNumber=475B62A5F233ED05AC72D8781234E109BF3A908C
Certificate serial:       06A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.mft
Manifest number:          0683
Signing time:             Thu 30 Jan 2025 22:25:21 +0000
Manifest this update:     Thu 30 Jan 2025 22:25:20 +0000
Manifest next update:     Thu 06 Feb 2025 22:25:20 +0000
Files and hashes:         1: R1tipfIz7QWscth4EjThCb86kIw.crl (hash: Aia/6Ll6gEGwHjlKd9WsVNYXA4bUh0rG5yN827MMp7Q=)
                          2: 277D6F8A92FC11EE9104E34AC4F9AE02.roa (hash: Y63HpsRvYL/5i6ST/DVFn929os6gpGVpLFx16SbSFmk=)
                          3: DA853E36B35011EE9639F31BC4F9AE02.roa (hash: 5u6FIfkR7o/EwRjVi5favs4dE8YNgcz6uiHlqeySIn0=)
                          4: E36FB86EC09A11ECB9687037C4F9AE02.roa (hash: Ib+XazX+Qxi5XJo4rC4mxroM+7vsfCjFEjXXwhdqb+s=)
                          5: BE497906E5E311EEB87FAA36C4F9AE02.roa (hash: k1lEv2cHDDWdD60iIseLu7lRMH41febzqKklPn0n+tA=)
                          6: 26FB999C92FC11EE9104E34AC4F9AE02.roa (hash: NBz1TRw0/NeMKLoDGjeCvyyLAZyG71SuKvi7RBEyTO4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1699 (0x6a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C911D/serialNumber=475B62A5F233ED05AC72D8781234E109BF3A908C
        Validity
            Not Before: Jan 30 22:25:20 2025 GMT
            Not After : Feb  6 22:25:20 2025 GMT
        Subject: CN=679bfc50-cc33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:40:c9:d2:99:af:63:e8:68:e8:c7:b5:4d:
                    77:ca:78:18:71:ca:a0:35:7b:50:14:3e:5f:a1:dc:
                    78:10:76:8f:bb:d4:b2:48:3b:eb:ef:9b:4f:c0:ca:
                    8b:d7:e6:9f:d9:ec:d1:3e:12:2b:65:af:32:42:73:
                    2a:e8:89:1d:8a:12:20:d4:4e:90:48:5a:5b:77:3e:
                    05:84:ce:24:c8:e5:a2:bb:f3:5c:14:c7:17:90:dc:
                    2f:e5:8b:5d:18:29:bd:28:a4:54:db:28:36:a3:14:
                    00:16:b9:ad:c8:b8:cb:13:eb:48:07:f7:7f:23:93:
                    eb:8e:8c:64:46:41:d8:2a:e0:e2:c8:8d:86:5f:54:
                    77:99:da:3b:35:6a:03:6b:e3:8c:58:fc:d5:f2:ad:
                    1b:1d:87:77:68:11:1b:56:48:52:6d:85:f9:9a:16:
                    8c:5a:2b:ed:2b:9e:4d:f3:94:08:0c:cd:8c:11:5b:
                    b9:28:36:b6:88:99:8c:4e:64:d7:77:eb:54:5e:55:
                    00:2e:6e:de:bf:f0:b7:7b:26:a1:ae:69:a1:45:73:
                    2f:f3:2f:4b:65:6e:9b:ef:78:fb:cb:9f:d3:2a:bc:
                    71:d5:f9:a8:1a:cf:91:33:eb:6d:5d:a9:5d:3e:90:
                    34:f2:a2:ec:79:07:32:a6:e8:f1:27:98:df:7d:d3:
                    eb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:80:8B:32:74:0C:4E:4A:DF:64:9C:F3:26:BC:C0:BE:00:A5:0A:9B
            X509v3 Authority Key Identifier:
                keyid:47:5B:62:A5:F2:33:ED:05:AC:72:D8:78:12:34:E1:09:BF:3A:90:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f7:65:ca:26:cf:b1:25:5d:21:c3:40:5a:96:13:84:9c:59:
         56:80:c2:60:db:d1:45:1d:19:14:d2:37:7f:8d:6a:0b:23:2a:
         66:80:9e:3e:62:88:78:6e:9d:0c:d5:7b:cb:2d:e8:48:53:a0:
         81:de:08:e3:20:9c:4e:7d:97:c0:bd:dc:58:2b:3c:16:63:1d:
         45:03:1a:f5:c4:26:4b:d5:1f:4b:ae:8c:cf:24:ec:f6:62:ff:
         7f:b6:3c:b1:14:2c:71:1d:30:e3:09:92:bd:73:47:a7:af:e8:
         2c:d9:60:78:1c:02:4d:cb:21:9f:70:76:54:e1:0f:92:ff:c6:
         6d:fe:92:e7:43:54:49:b7:8b:98:0b:a7:9a:cd:4b:5b:c9:0d:
         0b:e5:78:41:4e:76:0c:2a:54:aa:2c:9e:a9:4c:54:f2:d3:74:
         7b:32:cf:50:0c:2c:4d:18:7f:99:3a:80:9b:68:07:62:de:5b:
         b3:39:c2:fe:45:e1:ae:07:42:ad:c2:1b:15:1c:32:a1:6f:81:
         49:70:e0:1f:95:f8:59:5c:b2:15:70:30:10:ce:1c:cb:f3:69:
         e9:48:3d:9d:76:6d:39:f0:24:0b:a0:c0:cd:5e:d5:12:d3:ae:
         16:53:8d:e6:da:c5:79:dd:de:51:0f:03:7b:45:e2:14:df:52:
         57:de:c7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:04 2025 by rpki-client