Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft
File:                     kBUoySF5F9lWch0caFZlNFvrVv0.mft (raw, json)
Hash identifier:          5lnpUNjzluCACfkPiOt8uR5vOLXR9H7X5V6OX1LxIIA=
Subject key identifier:   F8:3A:E4:C2:3C:1D:54:A7:87:D2:32:28:5E:1E:9B:6F:BE:2A:59:C6
Authority key identifier: 90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD
Certificate issuer:       /CN=A91CFAB9/serialNumber=901528C9217917D956721D1C685665345BEB56FD
Certificate serial:       02F0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft
Manifest number:          02ED
Signing time:             Fri 31 Jan 2025 01:03:32 +0000
Manifest this update:     Fri 31 Jan 2025 01:03:31 +0000
Manifest next update:     Fri 07 Feb 2025 01:03:31 +0000
Files and hashes:         1: kBUoySF5F9lWch0caFZlNFvrVv0.crl (hash: ++eSFwfUk4ASY9VGclb6QEF7Tw1n3+vlezFvSWpxuMM=)
                          2: 39A335D6CB3F11ECBEBC9A1DC4F9AE02.roa (hash: FD8mMbLhsLGNWUTDqXS2ge1jhJLxbO0CzgruTSg9Row=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 752 (0x2f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFAB9/serialNumber=901528C9217917D956721D1C685665345BEB56FD
        Validity
            Not Before: Jan 31 01:03:31 2025 GMT
            Not After : Feb  7 01:03:31 2025 GMT
        Subject: CN=679c2164-6687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:42:a4:8e:84:f3:d8:22:e1:2c:04:24:3e:8e:
                    0c:ac:36:04:d0:ff:23:dc:81:da:f2:8c:8c:6b:7e:
                    cc:40:37:9e:04:fa:bb:8a:cc:ca:98:49:ed:7a:d8:
                    fc:5d:74:55:b8:fa:ba:2a:e8:23:f8:a3:2d:bb:69:
                    cd:63:3c:39:60:12:03:9e:d7:0e:64:d8:e9:fe:7e:
                    37:cd:46:97:27:2f:7d:ee:24:63:3d:db:c2:69:f3:
                    7e:62:bd:db:00:e6:52:82:70:f8:c8:cc:70:94:37:
                    63:af:44:c6:e0:0e:e9:61:3d:53:18:b5:d4:34:a1:
                    3c:38:f2:95:06:42:98:e5:d8:09:05:6c:c5:62:27:
                    9e:e1:0e:24:79:8c:6a:3e:ae:85:dd:09:0c:15:e0:
                    90:99:af:f2:24:ae:69:5d:ba:d0:2a:34:ed:fd:cb:
                    dc:81:b4:5c:2d:85:7f:13:9e:aa:6b:24:d8:51:a6:
                    a6:b1:7b:bc:5c:0e:7d:63:0a:26:b8:10:27:dd:e4:
                    ed:3a:a3:e4:e3:62:c9:99:03:6c:7f:75:f8:ca:13:
                    4b:a7:ed:b2:36:3d:e0:a1:fa:29:ed:42:a7:63:64:
                    ea:87:11:b5:d9:12:85:a9:fd:5a:86:42:d3:c6:6b:
                    fa:cb:65:ca:78:a8:12:18:5a:78:ff:b3:fa:f7:38:
                    27:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3A:E4:C2:3C:1D:54:A7:87:D2:32:28:5E:1E:9B:6F:BE:2A:59:C6
            X509v3 Authority Key Identifier:
                keyid:90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:94:9d:0a:fb:4a:d7:f8:26:e7:23:9f:ed:aa:96:a2:d3:3e:
         e1:15:9e:e8:f1:bf:28:c7:02:1a:5f:d2:00:fc:62:df:9c:0b:
         df:5f:5a:9f:c3:2a:eb:af:d7:4c:c2:f6:8c:b9:79:a6:38:84:
         7e:9f:4f:74:b5:0a:f2:43:f8:58:8d:65:2b:79:e8:51:78:c4:
         6d:a0:c9:84:f0:db:c1:1e:e8:45:71:fa:ad:ae:c0:9f:a5:ee:
         f8:ed:e4:ea:a8:3b:20:b8:52:8f:6c:91:ef:ed:59:ab:6a:76:
         04:9c:7b:35:20:67:f5:cb:6d:e4:81:0e:1d:88:62:2e:97:3e:
         19:ba:66:23:7c:b0:e5:3b:de:53:84:2a:46:15:47:2a:54:42:
         4f:75:1c:31:49:ae:23:1d:f8:cd:03:4e:8a:d3:24:07:8b:f5:
         4d:14:bb:8e:05:1f:47:d1:5d:01:bb:4d:be:2e:09:95:93:aa:
         41:d2:e8:1b:86:8d:71:d5:b7:08:67:f0:0d:af:a7:00:1e:06:
         8c:68:5a:ca:0e:6f:9a:d3:ec:2c:c1:7b:05:ab:a6:7f:f2:01:
         f4:dc:c1:c4:d3:af:fe:1b:4d:c9:36:ef:ca:33:a7:cf:49:2a:
         7c:bd:13:10:d9:05:29:9b:97:85:8c:0a:83:80:ec:1d:4a:95:
         85:7d:9c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:00:09 2025 by rpki-client