Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
File:                     AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft (raw, json)
Hash identifier:          /mL1ICoenipQhHMtdiYC2zntvAe0DXFdT/vtGFO6FlM=
Subject key identifier:   F0:78:F7:0B:D2:2C:CE:4B:DF:B3:FA:58:00:37:03:A1:D7:03:CE:4D
Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7
Certificate issuer:       /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7
Certificate serial:       06FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
Manifest number:          06E5
Signing time:             Thu 30 Jan 2025 21:59:53 +0000
Manifest this update:     Thu 30 Jan 2025 21:59:53 +0000
Manifest next update:     Thu 06 Feb 2025 21:59:53 +0000
Files and hashes:         1: AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl (hash: ae/PsygSvli3Pm58yUqkYTlnlfbj1cOxMSV9WirjyzA=)
                          2: EEE4C606B5D411ECA20B840AC4F9AE02.roa (hash: 0XMlIXCMAiJZlp7fDiVuLUwSsm0ebLntYydTAPsauDo=)
                          3: 910A49AAB5CC11ECAE337E78C4F9AE02.roa (hash: 3it6MgHyhXt2fOxKVzUm+aEDZP71P1ra3Nfl+4bBlR4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1788 (0x6fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7
        Validity
            Not Before: Jan 30 21:59:53 2025 GMT
            Not After : Feb  6 21:59:53 2025 GMT
        Subject: CN=679bf659-34f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5c:0b:e2:64:51:ef:ab:7a:97:6b:3e:34:bd:
                    a3:cf:20:be:0b:92:39:9c:95:4d:57:18:c2:ea:df:
                    ae:ec:df:a8:80:0e:da:d1:c6:02:c1:4c:d0:76:71:
                    7b:f5:1e:8e:24:44:b1:70:41:b9:69:50:c0:97:b4:
                    90:a3:e5:03:76:d8:ce:08:31:03:0c:ac:c6:0b:96:
                    cf:44:28:78:ff:00:bb:74:30:7e:12:a8:ff:58:ec:
                    bb:75:b7:1c:d4:17:4a:7b:95:ab:2e:19:c4:74:59:
                    12:fb:8e:64:f6:ee:28:f2:6d:d6:a1:e8:fa:6c:3a:
                    b3:ba:30:51:0f:31:a0:6c:a3:05:be:64:c9:16:ec:
                    cf:c3:22:9a:de:09:79:ae:ec:b2:4d:83:76:29:76:
                    13:5b:10:e5:f2:05:0a:06:58:0e:30:5f:8f:cd:80:
                    dc:0f:5f:9c:b2:c6:84:37:cd:e2:d8:9e:e2:0a:19:
                    22:3d:76:90:f6:a8:04:51:00:54:87:2c:c2:c2:20:
                    cd:e2:5c:37:4e:14:2f:c2:c6:f7:a4:41:52:ea:bc:
                    6a:63:df:aa:be:82:98:b1:03:ee:fb:dc:67:d7:90:
                    91:cd:f5:d4:f5:b4:c9:c7:ea:7c:7b:dc:b7:3d:d9:
                    7d:d0:46:72:c5:1c:6e:27:10:09:32:d2:f1:01:4c:
                    cf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:78:F7:0B:D2:2C:CE:4B:DF:B3:FA:58:00:37:03:A1:D7:03:CE:4D
            X509v3 Authority Key Identifier:
                keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:fc:2f:17:7d:c2:0c:8c:f1:8e:0a:91:a8:86:6d:91:4e:04:
         d3:e2:95:d9:20:e7:68:e1:78:93:ab:fc:28:56:c5:f7:33:df:
         02:1d:84:5b:b1:23:65:6e:86:ee:51:8e:57:98:24:97:95:f0:
         48:c6:2e:a3:e5:96:be:d9:9f:e0:f4:8f:a1:80:be:cf:6d:e8:
         7c:16:05:7f:23:3a:f7:70:52:07:02:10:ee:69:8b:80:29:1a:
         cf:bc:87:54:a8:f6:db:3b:d8:32:19:77:e4:cd:8d:07:a3:23:
         3d:0b:18:8a:19:4d:89:47:24:35:47:19:12:e2:9f:e9:fe:8a:
         73:2e:70:15:7f:e8:6c:0f:ff:9c:6e:33:9a:37:d2:b5:32:32:
         41:c3:45:06:27:c1:7a:66:cf:d4:bc:88:5a:c0:66:5d:3b:8f:
         3a:54:42:bb:81:c7:8e:6c:c4:4d:2f:c1:36:b7:b4:4f:c3:15:
         29:11:f9:1f:ba:f9:ba:8e:9a:8b:c5:b1:9b:8d:5e:28:b6:61:
         55:d5:8e:1e:27:88:35:c3:77:9d:77:ad:c4:77:d2:0b:a1:f5:
         3e:ab:53:bb:fa:85:d3:60:c2:ef:56:59:12:56:fe:29:d6:0d:
         f8:cb:df:84:cf:80:24:22:27:7d:cc:0c:c0:03:b1:7f:32:88:
         24:eb:16:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:24:48 2025 by rpki-client