Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft
File:                     kpiJu1006GCsv3CJQzekYsHWrC4.mft (raw, json)
Hash identifier:          ZhRmBPvQLNkuUPYOV4O7gpIwCn7uF0wckguw1qczV0k=
Subject key identifier:   49:99:E1:17:A8:9F:FD:FE:6E:BD:E1:08:F7:32:0B:1B:D2:51:01:EA
Authority key identifier: 92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E
Certificate issuer:       /CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E
Certificate serial:       0C92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft
Manifest number:          0C83
Signing time:             Fri 31 Jan 2025 18:08:35 +0000
Manifest this update:     Fri 31 Jan 2025 18:08:35 +0000
Manifest next update:     Fri 07 Feb 2025 18:08:35 +0000
Files and hashes:         1: kpiJu1006GCsv3CJQzekYsHWrC4.crl (hash: QftMDlerMLzxOdj2vHiwzm42P8OpevXChAY+3BbX5vs=)
                          2: B579952EEBB311EEAF9E7718C4F9AE02.roa (hash: l70W9C7sKwAcMsRhEuSt7Uvtsib+WwKJgxVKjnT8swQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3218 (0xc92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E
        Validity
            Not Before: Jan 31 18:08:35 2025 GMT
            Not After : Feb  7 18:08:35 2025 GMT
        Subject: CN=679d11a3-2006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:69:44:2f:b7:9e:e7:ef:e8:f5:3f:67:39:63:
                    50:bf:0e:cb:3f:1b:d2:ce:05:3c:f2:98:9b:4c:db:
                    cd:cb:9b:19:45:ee:13:53:06:36:78:b6:c2:7f:c3:
                    1f:ad:99:db:a7:08:4b:bf:6b:cb:c9:72:51:c2:65:
                    6c:82:6f:d6:c5:46:45:ff:dc:ea:32:21:7f:1b:df:
                    12:ea:d3:36:5b:e8:3a:4e:b8:31:eb:b8:e8:d0:19:
                    51:e4:f0:44:0b:ff:39:db:25:a7:4d:ff:d4:0b:d5:
                    16:26:ae:b0:e3:66:00:88:3b:9c:a2:51:07:87:87:
                    cb:39:12:7f:65:96:53:88:29:1b:4a:2a:1e:bd:ff:
                    e4:93:48:9f:fc:4b:93:3c:8a:a1:00:d3:0c:0b:41:
                    90:ff:39:ed:de:31:b6:0b:97:9e:7b:87:e4:20:e5:
                    0c:56:69:eb:ac:ca:b5:36:ab:4a:d1:87:cd:e3:6a:
                    91:2c:8f:71:0f:83:7d:82:6b:c8:2d:58:74:81:78:
                    9d:fb:d9:af:6c:27:a0:e1:2b:dd:17:3d:56:80:d5:
                    5c:82:48:e3:af:20:4a:1a:65:8d:3f:a4:a8:95:9c:
                    0f:58:6e:4c:8c:a9:6d:ab:6a:20:d5:72:fd:31:39:
                    1d:42:01:7f:9a:0f:e2:bc:b5:85:90:8f:84:79:e4:
                    df:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:99:E1:17:A8:9F:FD:FE:6E:BD:E1:08:F7:32:0B:1B:D2:51:01:EA
            X509v3 Authority Key Identifier:
                keyid:92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:db:9d:d3:f0:4b:d3:00:6f:27:49:3c:dc:38:d2:8e:35:2f:
         45:62:55:94:67:be:19:3f:19:b6:3a:5c:94:1c:b7:fe:45:f9:
         58:bf:cb:33:e3:5c:98:f4:53:38:d3:d6:77:37:b4:de:22:2e:
         90:35:a5:b9:fc:fd:44:0e:c6:d0:b2:68:65:53:4c:61:df:5b:
         3d:0e:c3:7d:f8:0f:fd:8d:db:57:bd:05:90:01:84:ef:b1:0d:
         a6:ec:83:06:e3:27:69:df:45:49:7f:dc:b2:d4:43:37:20:e8:
         62:af:c9:f4:2b:7e:1e:76:2d:73:f4:02:3f:ed:74:2b:84:92:
         5f:92:55:61:5a:d8:33:4d:02:1d:27:b8:f4:e6:da:5a:43:1b:
         b9:44:41:aa:a1:0c:34:fa:b7:79:c7:a5:97:1c:e3:3d:25:88:
         c9:04:f2:ab:2d:95:8b:f4:05:c6:86:80:3e:ec:30:7b:80:00:
         f1:04:3b:ca:b7:75:a5:f3:3a:61:e5:eb:4b:e1:c4:67:12:d4:
         61:37:16:e1:39:27:f7:50:77:e8:7c:08:98:20:80:77:d1:98:
         a2:7e:10:26:0f:52:7d:9d:4a:e5:06:b7:38:bf:8e:29:da:c4:
         91:d8:28:30:eb:2b:93:b4:c2:72:63:c5:65:11:42:05:d6:9f:
         fe:4a:53:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:30 2025 by rpki-client