Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.mft
File:                     oDlpuv_Weqt11JODf6HHxp_7Jxc.mft (raw, json)
Hash identifier:          YOB0Qkoh8R57QzMy7wE0ksqqysYyjYDd8VEbC5aN1Ck=
Subject key identifier:   FD:2C:8E:BF:10:C4:B5:C3:0B:F9:E2:3E:07:E8:19:4C:56:65:5F:75
Authority key identifier: A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17
Certificate issuer:       /CN=A91CA496/serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717
Certificate serial:       2A49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.mft
Manifest number:          29E1
Signing time:             Fri 31 Jan 2025 15:37:45 +0000
Manifest this update:     Fri 31 Jan 2025 15:37:45 +0000
Manifest next update:     Fri 07 Feb 2025 15:37:45 +0000
Files and hashes:         1: oDlpuv_Weqt11JODf6HHxp_7Jxc.crl (hash: 3q65kLXOTh9bvdlggg/jXEAiUvmYXLeDDMIt8ewTYzY=)
                          2: EE3DDD2401AA11EDB7DF7B4BC4F9AE02.roa (hash: dg5P0bOa9bfh+0q6pRKAhwC/a/FidA3if8bbm6m10Kw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10825 (0x2a49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA496/serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717
        Validity
            Not Before: Jan 31 15:37:45 2025 GMT
            Not After : Feb  7 15:37:45 2025 GMT
        Subject: CN=679cee49-6c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:75:4c:8a:22:ee:a5:27:4c:d6:db:db:90:6e:
                    a6:8a:31:ab:48:c6:d9:16:f0:d1:6f:9b:9a:64:26:
                    8c:e5:7c:0b:d7:e1:29:aa:ee:1f:79:21:a4:1c:2f:
                    ce:ed:6e:8a:20:2c:f6:ed:35:7a:3c:70:cc:a1:8c:
                    5d:1c:79:35:59:cb:9e:ab:93:b7:57:9e:1e:bc:27:
                    cb:7b:ed:0e:43:f0:bf:21:7d:74:b0:87:39:c2:31:
                    40:fa:09:ae:53:e6:46:aa:b4:fa:8a:e3:83:87:9e:
                    e5:b3:83:2b:fa:6d:a0:45:3b:2a:66:bf:87:b2:f2:
                    1f:d6:e2:51:28:d8:af:5c:19:d2:28:3d:fd:75:3f:
                    60:9e:ec:25:0d:90:6d:f8:c1:80:16:e9:23:55:d6:
                    44:02:89:d4:21:27:30:5f:e2:97:76:c5:d8:a3:64:
                    26:3d:6a:eb:cd:13:ae:6f:0e:4c:24:c7:89:1f:e6:
                    db:16:49:39:fa:05:ad:6b:ad:de:45:79:be:38:b5:
                    f7:01:92:e9:0c:0d:e8:0d:49:27:25:fc:c2:69:34:
                    57:07:53:11:3e:94:b7:93:42:be:2c:71:13:9b:0a:
                    2c:36:9c:bc:da:78:df:27:f9:90:6a:45:7a:e2:cd:
                    c2:58:ad:33:31:d0:83:6e:5d:c2:b2:6b:90:24:62:
                    54:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2C:8E:BF:10:C4:B5:C3:0B:F9:E2:3E:07:E8:19:4C:56:65:5F:75
            X509v3 Authority Key Identifier:
                keyid:A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:be:4a:40:f5:8b:ce:48:5e:74:c5:bf:43:9b:c6:c3:fe:12:
         77:62:ce:d6:b1:6c:ec:80:54:ee:c9:27:1b:14:c3:06:33:9f:
         f6:75:b9:9d:41:14:cd:76:e7:92:14:dc:5e:04:ae:dc:6a:ee:
         5b:02:a8:c6:ce:90:84:58:5c:b8:42:48:ea:8f:8e:38:bf:a0:
         06:40:7e:c4:a3:5c:81:0a:77:42:ef:8e:aa:f8:72:00:e0:07:
         90:98:bc:26:05:14:90:39:b7:30:c7:82:0d:aa:83:49:70:f3:
         88:75:11:55:9d:fc:a5:35:59:27:2a:4a:52:ab:e7:65:f7:69:
         60:f2:89:54:b7:8c:2c:b2:ac:6a:5f:87:13:8a:a5:bc:3c:1a:
         ae:4d:4f:39:d4:61:e3:5f:77:f7:8d:df:87:45:5c:f5:76:b8:
         9c:44:55:46:6f:3b:ba:02:0a:2f:f1:e3:e3:57:3b:45:f1:b8:
         b3:4c:42:63:a8:55:2b:57:e4:7e:be:9d:16:07:a0:40:91:eb:
         88:fb:ab:ee:ab:04:d2:5a:05:aa:b5:76:81:2f:16:a4:4a:32:
         46:9f:fe:10:98:0a:d4:8e:fe:b1:69:0b:bd:70:9f:c6:a4:a3:
         54:b1:94:32:95:23:4b:a0:1f:78:c9:26:ad:d0:77:f6:ce:86:
         7d:d1:9c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:59:13 2025 by rpki-client