Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft
File:                     4ggepNPNtZniYIYCcE_bNYbUj1c.mft (raw, json)
Hash identifier:          SCqq3g5jQE0j3S1W63yUfuoTXkRfOqdT5L3RNkVBmaQ=
Subject key identifier:   4A:59:DC:EF:C3:AA:AE:4C:A1:94:EE:DF:FB:2B:BB:3D:6E:3C:97:8D
Authority key identifier: E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57
Certificate issuer:       /CN=A91CDF1C/serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57
Certificate serial:       0B60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft
Manifest number:          0B5A
Signing time:             Thu 30 Jan 2025 19:10:42 +0000
Manifest this update:     Thu 30 Jan 2025 19:10:41 +0000
Manifest next update:     Thu 06 Feb 2025 19:10:41 +0000
Files and hashes:         1: 4ggepNPNtZniYIYCcE_bNYbUj1c.crl (hash: 8dP0h2kYhzQ5d14D/21dxMvF5VR9+3RUyCDdcAKbUMU=)
                          2: 277BE15035CD11EAA2366620C4F9AE02.roa (hash: hJTBnRNb+rBuco3pui7GARCwhnSPV6pCkk0fRFtrHKA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2912 (0xb60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDF1C/serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57
        Validity
            Not Before: Jan 30 19:10:41 2025 GMT
            Not After : Feb  6 19:10:41 2025 GMT
        Subject: CN=679bceb2-39d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4a:36:16:6d:0b:3c:17:5b:7d:c6:66:f1:15:
                    75:57:bd:56:3c:d4:00:22:ab:b4:07:3e:56:c7:5e:
                    66:4d:01:3e:c3:22:b2:1e:0d:eb:40:46:a0:fb:5b:
                    62:cb:db:ce:52:be:97:43:15:8c:29:9c:7f:6f:fe:
                    70:4e:37:db:ca:69:70:52:62:a8:a0:8d:61:d8:a1:
                    84:cf:1f:d9:ab:d2:0a:cc:02:9a:26:10:98:3d:c0:
                    aa:a3:2b:48:57:0a:16:b4:52:93:18:dc:d2:bc:8a:
                    6f:d8:ed:b0:19:ec:5a:93:43:bc:3a:19:6c:87:f1:
                    5e:86:ac:68:1a:8c:9a:1f:8c:6b:58:e2:17:dc:27:
                    34:b1:43:8d:f4:4f:b1:54:35:ce:a3:05:b3:c5:64:
                    d2:3d:a5:a5:53:a6:e4:cb:47:62:7e:d1:43:92:73:
                    12:cd:27:ce:08:d4:10:99:a0:22:c8:5c:3b:a6:de:
                    3f:18:d6:83:ef:4a:f4:29:8d:4b:68:de:72:0a:3e:
                    a6:7e:08:b5:38:b8:cc:d4:37:47:9c:e5:12:c3:67:
                    19:e5:27:0f:64:4f:d6:11:98:13:af:24:15:ff:78:
                    e0:7b:dc:2f:de:d3:47:cb:8c:f6:48:19:9a:b0:96:
                    8d:e3:9f:90:f4:85:4b:d7:dd:cc:d5:df:6a:c6:09:
                    24:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:59:DC:EF:C3:AA:AE:4C:A1:94:EE:DF:FB:2B:BB:3D:6E:3C:97:8D
            X509v3 Authority Key Identifier:
                keyid:E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:bc:69:94:e8:16:ec:c5:09:bc:f4:f8:e0:3c:35:82:f8:00:
         dc:ec:27:c3:90:62:b8:e6:bf:cf:cd:47:90:6e:9d:c2:f6:19:
         93:d6:68:72:ab:b8:ba:b9:ab:b8:ba:ad:0e:b0:1d:fe:60:6e:
         f0:c7:3c:88:67:d8:7b:be:18:2a:38:c1:3f:8a:04:b6:67:57:
         f1:37:f3:ae:e7:d0:5c:8d:57:8f:16:be:c0:fd:59:35:7a:2e:
         ff:11:2d:ca:41:26:0d:3e:8c:24:23:d0:02:1d:7e:fd:9f:04:
         95:96:cc:49:ee:30:13:42:51:08:e1:e2:b1:9e:a9:8b:0f:16:
         79:bc:c9:2b:4c:29:91:ca:74:a0:6c:dd:34:e6:5e:1b:45:d3:
         a5:d0:87:68:49:0c:99:94:2e:ed:bf:d8:97:72:9d:d1:dd:c3:
         07:56:e4:c2:fe:54:67:89:cd:9a:c1:9a:1e:a0:ad:b6:ac:c0:
         22:d4:87:1a:68:8a:9f:06:fb:62:4d:4b:90:c1:28:29:1c:90:
         b4:68:c4:f0:a3:60:c2:67:4a:dd:47:fc:eb:73:1a:de:59:45:
         2e:7a:ab:b3:48:50:69:da:c7:eb:fa:c2:05:53:e4:45:5f:6b:
         95:fc:34:00:93:04:25:5d:82:cc:5d:17:2b:c9:b0:66:73:a2:
         80:b0:5e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:51:17 2025 by rpki-client