Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
File:                     FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json)
Hash identifier:          YvbT0FKr2h5UmSZX7MZ1QVPFmL02GU0J0awGxKuYXuY=
Subject key identifier:   B3:DE:1F:D7:FA:2A:8F:81:4D:9E:EB:B0:E5:A3:F0:0A:04:0B:18:1D
Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8
Certificate issuer:       /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
Certificate serial:       34E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
Manifest number:          3499
Signing time:             Fri 31 Jan 2025 14:26:38 +0000
Manifest this update:     Fri 31 Jan 2025 14:26:38 +0000
Manifest next update:     Fri 07 Feb 2025 14:26:38 +0000
Files and hashes:         1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: Gl1X14VS7vmiybtRvlU6/gjxUIJyODaSBY9sNwzJ7U4=)
                          2: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: +b4JTzk5rUoiBhLUxnA3EW+SFsT+j/Ycd9v6oicmMdQ=)
                          3: 40DFD5AC650711EFB94FD44FC4F9AE02.roa (hash: 7lbO8FJw1G5XebxqgjyAycbRZnwkoSKxE4lbb1qM6S8=)
                          4: F6FAB490BB5811EF8C37CB81C4F9AE02.roa (hash: 8BNZKJ0bk38KOQOWjsH36VcnyN3HEx5P7NFwwrluJjM=)
                          5: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: nz0TqyYIJbty+IiMMO1L40DQ1f9SJsrGYZW4STnoOWg=)
                          6: 5F22E1129B3011EF952F2762C4F9AE02.roa (hash: GzI1DKhtNKvZlRIctznDCQywZe9adFXYq+KIp89kCD4=)
                          7: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: M3hgU5ipnFVKj6gek7MHkg0fz4T5KcW7+G9KqLsqkNs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13544 (0x34e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
        Validity
            Not Before: Jan 31 14:26:38 2025 GMT
            Not After : Feb  7 14:26:38 2025 GMT
        Subject: CN=679cdd9e-9d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:a8:81:06:48:c2:25:04:e3:53:34:d3:fe:
                    a9:4b:13:20:45:de:6d:d4:1d:89:04:ef:66:d2:1d:
                    ee:a6:47:76:5e:6a:ed:72:c4:e4:da:bd:bd:b3:76:
                    29:77:a1:f6:d3:f3:71:84:2c:d1:58:3a:97:40:d6:
                    79:ab:c7:e5:03:87:5e:7a:3d:d8:71:d7:dd:10:2e:
                    cf:f6:e6:4f:88:05:f0:05:bf:d5:19:b4:59:14:3f:
                    17:82:03:a2:db:2a:ab:29:a6:40:bc:ec:f0:10:12:
                    cc:f2:ea:11:f4:9b:a6:56:61:12:f8:61:f3:df:1a:
                    63:c4:e0:b1:04:77:32:57:a7:44:19:a2:88:8d:80:
                    1d:39:89:16:47:95:81:e5:42:a6:50:e5:e6:ca:51:
                    bc:2f:53:f4:c9:ae:79:7f:55:a3:1d:97:97:14:40:
                    67:8d:5e:98:41:f7:ff:a9:65:44:60:fc:22:5f:22:
                    d8:c1:19:57:3c:ca:ad:88:55:c1:f2:af:7b:35:8a:
                    b0:9f:e5:31:25:f4:4f:a6:46:74:2b:36:37:54:1f:
                    0a:1d:48:3b:da:25:48:81:10:84:57:68:be:05:2f:
                    c3:40:0a:0f:7d:77:26:93:a5:9b:b1:1e:44:45:cc:
                    8d:37:1c:51:d7:3f:65:0b:3b:eb:b7:2d:59:fe:ed:
                    79:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DE:1F:D7:FA:2A:8F:81:4D:9E:EB:B0:E5:A3:F0:0A:04:0B:18:1D
            X509v3 Authority Key Identifier:
                keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d7:06:de:0f:85:ba:44:ce:fd:58:a3:84:2b:55:79:b5:37:
         db:27:68:b7:5d:93:66:30:56:1a:b0:2b:f9:e6:f1:9a:5c:9f:
         d6:fe:81:d6:a9:7f:9d:14:a1:4a:b4:98:71:77:0e:81:e9:e0:
         d0:d5:75:6f:2c:d9:07:72:eb:90:4f:d4:00:e5:46:fb:ac:34:
         cf:a2:66:eb:2e:7e:c1:d5:d6:dc:18:5d:44:6b:44:f9:5a:21:
         91:06:0d:3b:67:5b:d6:25:76:4e:34:53:b5:23:86:7a:8d:5e:
         42:71:69:d0:c0:30:31:63:0e:4f:a2:b8:08:9d:66:58:35:76:
         d3:9e:fd:ed:7d:c8:f9:2d:70:28:2c:e4:21:62:a6:b1:55:d1:
         99:40:61:51:cc:09:3b:ac:ad:ad:b9:e7:6e:78:e0:f8:de:b5:
         89:79:39:93:b0:af:a5:f9:3e:d1:22:74:63:71:65:90:06:99:
         93:17:b9:c1:d8:7d:10:f2:11:97:32:33:a0:43:40:83:46:48:
         ac:7c:06:88:bd:69:10:7d:06:58:70:a7:55:64:6b:98:64:6a:
         8b:78:d6:b9:03:de:1d:b3:b9:66:51:8b:10:6f:6e:0e:cd:57:
         35:f5:57:68:7e:aa:1d:34:8f:23:21:e3:27:96:6b:3f:76:2a:
         f0:92:95:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:42 2025 by rpki-client