Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft
File:                     yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft (raw, json)
Hash identifier:          3Xh3Uy3q1Gt9LGRHOkRb3RxoosUbLmE9LkoRsSpEVnk=
Subject key identifier:   72:0D:C2:03:A5:D1:1A:1D:C0:CF:8C:70:1C:65:5E:4B:28:43:5D:E3
Authority key identifier: C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77
Certificate issuer:       /CN=A91CB06F/serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77
Certificate serial:       02A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft
Manifest number:          029E
Signing time:             Fri 31 Jan 2025 01:37:06 +0000
Manifest this update:     Fri 31 Jan 2025 01:37:06 +0000
Manifest next update:     Fri 07 Feb 2025 01:37:06 +0000
Files and hashes:         1: yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl (hash: 75tNgGCZFfXDM1u4M5lBdwNwjN6vLOA0NLU38bPdbE0=)
                          2: 5FC8538AE7D811ECB3E05318C4F9AE02.roa (hash: 5o54TJ7CvBWY2lPEbb8bfTWNjpq8SWQjpNjv9BAXw6o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674 (0x2a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB06F/serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77
        Validity
            Not Before: Jan 31 01:37:06 2025 GMT
            Not After : Feb  7 01:37:06 2025 GMT
        Subject: CN=679c2942-1db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:48:e2:56:72:18:d2:07:27:e1:28:f7:4c:
                    18:59:bd:d8:a2:7b:55:2b:dd:45:1e:ba:f0:fa:74:
                    aa:79:2d:4d:d6:02:33:46:d1:56:35:66:81:1a:35:
                    20:08:d0:2c:d1:9e:f1:3f:86:d3:11:db:94:d5:41:
                    23:41:d1:37:75:ac:82:98:98:6c:b4:86:ca:e9:87:
                    8f:e1:dc:83:5d:7d:82:39:16:d3:a8:98:6b:a0:da:
                    3e:eb:38:c6:4c:89:a3:28:f1:64:fc:af:76:4a:75:
                    ad:71:3b:ad:9a:4d:4c:97:43:a3:3f:35:2e:b7:65:
                    5a:88:59:b4:b7:9c:28:e6:02:96:ed:d5:5f:61:52:
                    4b:fa:77:f0:24:3e:95:17:2e:20:55:29:75:8d:f0:
                    64:04:a0:79:34:3d:83:59:32:9d:6e:b3:f4:2c:70:
                    df:4b:e8:e1:ea:51:03:e2:84:ab:34:dc:64:29:75:
                    86:32:8e:bd:22:17:8b:7a:62:a0:2a:66:0d:df:8c:
                    8d:8e:60:67:91:e9:c5:42:43:73:f5:fa:75:7c:98:
                    fa:8a:44:b3:c8:1d:a0:bb:d8:72:95:98:27:5b:72:
                    8b:35:98:1a:bf:a3:4b:9c:28:59:e2:c3:a3:1c:34:
                    ea:ca:3a:08:a4:68:b4:56:5a:40:4a:b3:12:e1:e9:
                    f0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0D:C2:03:A5:D1:1A:1D:C0:CF:8C:70:1C:65:5E:4B:28:43:5D:E3
            X509v3 Authority Key Identifier:
                keyid:C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:42:57:9f:3c:40:7d:9c:cf:8a:aa:74:b7:a7:2b:55:d4:e8:
         c5:70:be:71:c0:53:1d:59:9b:5d:56:13:82:e0:c3:76:0e:7a:
         46:a7:82:69:f4:6d:11:e7:dd:53:b3:28:f1:01:31:72:85:4b:
         94:00:c8:f4:77:7b:e2:bf:fe:d2:aa:e3:6a:1b:13:ab:ee:12:
         4e:6b:f7:f6:4b:54:4a:4c:30:53:c7:87:e1:32:fc:5e:4a:04:
         7c:41:61:bd:64:15:c5:20:ac:5d:0c:50:6f:06:65:6e:33:37:
         ae:ad:4e:f5:27:59:a3:29:ea:9f:a5:7a:0a:8e:f9:c3:80:cd:
         f7:8e:e8:0f:cf:be:83:a7:b2:76:b8:17:d1:3b:7d:b7:4f:fe:
         d3:c8:1b:a2:fb:24:61:9b:ee:9e:b3:bc:90:87:93:cb:8b:2c:
         e9:4b:d6:f9:88:99:d1:68:81:3d:ed:d0:54:88:02:a0:25:d8:
         0d:21:93:ee:78:31:83:26:4c:bb:96:9d:f3:95:06:d4:b6:2f:
         f1:7b:49:cd:c9:9f:2c:0c:06:74:0d:9c:52:a4:c2:25:b3:a7:
         7b:15:e5:10:8c:6e:d2:12:66:8b:64:33:93:4f:75:51:cc:73:
         00:98:dd:f9:c9:9b:8e:65:12:a4:58:e4:55:5c:66:14:b0:48:
         1b:43:2f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:44:12 2025 by rpki-client