Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
File:                     T_-scXgTOS7hyHajIWceHWwqubQ.mft (raw, json)
Hash identifier:          iGoB36sIZ/6QTxHGRLegAV9gi2XRa1qVPvHw59kqmWk=
Subject key identifier:   BE:F2:38:AF:D4:76:36:92:27:2A:7E:9D:0A:7C:51:7C:B4:67:7C:12
Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4
Certificate issuer:       /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4
Certificate serial:       0795
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
Manifest number:          0783
Signing time:             Thu 30 Jan 2025 21:19:36 +0000
Manifest this update:     Thu 30 Jan 2025 21:19:36 +0000
Manifest next update:     Thu 06 Feb 2025 21:19:36 +0000
Files and hashes:         1: T_-scXgTOS7hyHajIWceHWwqubQ.crl (hash: /grDrBp3ZEnqnbpDMNHVilmgDBOnncrIrLPtkry2dIM=)
                          2: CAF5CED2E1A511EC8AB72944C4F9AE02.roa (hash: VwKaIz3U6aDghRoNhWv7S/G0XuOUWwKqRpkvmSggRD4=)
                          3: CC57D98CE1A511EC8AB72944C4F9AE02.roa (hash: KGmpX6V6GwHwuicQlQLq7ntPEMjkSVAxnjSlxc3wQ2A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1941 (0x795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4
        Validity
            Not Before: Jan 30 21:19:36 2025 GMT
            Not After : Feb  6 21:19:36 2025 GMT
        Subject: CN=679bece8-49f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5e:18:79:67:a8:25:80:54:f7:46:4a:7d:c9:
                    09:9b:fc:38:e8:b1:bc:57:ae:90:57:85:7f:a5:e2:
                    91:47:2f:7b:8d:38:f2:58:16:d2:16:6a:2d:cf:79:
                    5f:e4:16:a0:33:51:ea:61:d2:96:35:fa:f9:0c:e1:
                    8c:d1:bf:f0:79:ca:ec:16:fe:13:d5:ed:34:86:4f:
                    9c:22:36:a2:26:7f:3a:59:93:6d:4a:45:28:df:33:
                    3b:1b:63:21:8a:8d:04:bf:f9:30:92:19:61:f8:5e:
                    bd:3f:7c:36:07:8d:bd:cf:70:29:a1:7a:c3:38:1d:
                    2b:17:48:51:dc:c0:32:27:30:cf:80:c5:b6:ab:5f:
                    24:a9:70:e5:f3:e3:4c:67:7a:ce:d4:47:51:eb:49:
                    d1:c1:d3:73:c5:96:12:9d:94:85:9e:18:ff:e0:e3:
                    f5:7a:ea:dd:04:e5:68:23:c5:d3:ac:d4:4a:59:75:
                    32:4f:2f:d4:06:d2:f7:a8:5b:a6:06:89:dc:26:2a:
                    ba:44:03:cb:9d:e8:2a:24:d4:6a:9d:cc:0d:11:9d:
                    eb:6c:2e:c0:5c:f1:d7:dc:de:8e:ad:da:2a:73:ba:
                    7e:c9:9e:dc:63:1f:a4:45:16:9a:4f:08:3b:60:ab:
                    cd:e9:fd:ad:06:f2:28:6c:96:63:50:1a:6d:d9:04:
                    e5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F2:38:AF:D4:76:36:92:27:2A:7E:9D:0A:7C:51:7C:B4:67:7C:12
            X509v3 Authority Key Identifier:
                keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:89:b6:c4:98:dc:50:b8:b8:56:4d:ce:1b:f2:94:1c:e0:e5:
         c2:c4:06:66:8b:bb:fb:62:b0:53:bd:ff:1f:fd:8d:c8:d2:af:
         e8:78:8f:37:fe:a1:49:25:ec:ce:ba:9c:d5:bd:09:47:c5:cd:
         cc:ad:42:f9:8c:8d:9a:2c:a9:35:94:b3:2a:bf:89:a3:e7:a4:
         94:17:3d:6d:64:98:60:d7:64:9f:6b:4b:91:8c:46:17:6e:70:
         ee:af:54:8f:fd:2b:e5:39:48:50:34:81:25:c0:f1:45:fb:56:
         76:09:c2:cc:df:97:6a:09:71:88:9e:a4:f7:4b:18:fe:e1:e5:
         8d:8d:85:de:f0:93:57:e2:5e:e8:c4:d8:26:40:d2:aa:87:29:
         e1:35:7b:0b:a7:84:f8:ae:52:ac:64:7b:9f:ae:1a:13:a3:73:
         41:e1:07:34:a5:03:00:84:53:3f:28:e7:28:1d:40:93:3c:d3:
         0e:24:f9:46:37:d5:c6:90:84:e0:a9:50:ce:b8:db:ab:cc:9f:
         5a:98:b3:2a:e0:2e:62:fa:83:36:fe:9d:48:8e:64:8e:c6:b4:
         14:11:04:9f:86:fb:cc:48:11:ae:23:9d:82:98:88:0d:7a:50:
         c5:b2:fe:86:eb:f9:9c:fb:36:79:05:60:f8:97:d0:7c:68:2c:
         f1:1f:d9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:32 2025 by rpki-client