Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
File:                     lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft (raw, json)
Hash identifier:          hTBACZF8MmHMjACgXYnpa/6/a0xQhSqOwK/K3Eckdjo=
Subject key identifier:   80:0C:7C:FD:83:9C:EE:9B:53:F7:5E:8D:22:B8:75:9C:9A:1C:D7:31
Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
Certificate issuer:       /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Certificate serial:       03F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
Manifest number:          03D6
Signing time:             Fri 31 Jan 2025 00:42:08 +0000
Manifest this update:     Fri 31 Jan 2025 00:42:07 +0000
Manifest next update:     Fri 07 Feb 2025 00:42:07 +0000
Files and hashes:         1: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl (hash: 3Yx+4UMgRlRSrAyh8CHS+A579nKsJjnPUu+GXk2A00I=)
                          2: A8827568116911EEBB241C32C4F9AE02.roa (hash: Qc67Zl9xH5UQVVuJaiSmRCShgX4fnvxw7leOq59EYpg=)
                          3: E248BDA63C5211EF94184A20C4F9AE02.roa (hash: Gw3lyprk2wHQfVI8gyQDjj5muddHnRtxMvJMvAySrdk=)
                          4: A6FA9A4A116911EEBB241C32C4F9AE02.roa (hash: qtIjXGWFBwLcXf/7DCnDMfdtxosWwEooU8YqRW4JUKo=)
                          5: F4D295243FDA11EFAF5E676AC4F9AE02.roa (hash: Zzu4mk3oMia2siQQ0DnH3c4pXZbn4XSvZ0+RKKFCJKs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1010 (0x3f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
        Validity
            Not Before: Jan 31 00:42:07 2025 GMT
            Not After : Feb  7 00:42:07 2025 GMT
        Subject: CN=679c1c60-2375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:86:4e:80:1c:d1:95:68:c2:d7:81:11:63:a7:
                    d4:7b:d1:47:c0:4d:e6:65:46:5e:25:62:7b:22:9f:
                    86:f8:b0:b2:5b:4f:c8:35:bf:4e:e4:99:e1:bd:8e:
                    4f:55:2b:90:69:6c:b5:9e:6d:a5:70:70:a6:29:05:
                    b7:a1:22:d0:1f:6d:d6:6f:fb:00:9d:0a:bd:b7:db:
                    83:de:ea:d4:f3:83:63:43:66:cf:ff:9e:6f:11:13:
                    d1:28:b6:22:14:83:ae:70:82:ef:9b:11:20:c8:6c:
                    b0:d2:62:e9:f7:62:82:65:1d:a6:a5:8e:79:a7:b1:
                    d6:db:87:8b:2c:e4:c4:52:3a:29:a2:a6:35:49:c1:
                    f9:7b:72:fe:21:3d:fc:a1:84:f5:79:83:e9:68:fe:
                    bc:3a:cb:ec:4e:e6:62:83:16:26:14:a8:1d:74:20:
                    76:89:24:9d:02:27:a2:33:42:31:0f:08:63:5c:52:
                    55:46:12:be:24:fe:f1:be:57:2d:f7:ec:62:c8:43:
                    8a:f6:ee:9b:04:a7:4f:a7:b9:72:b2:07:b3:8b:2a:
                    b8:0f:96:e0:04:8d:0c:89:89:45:0c:3d:74:28:b0:
                    68:61:88:b7:fa:56:74:87:93:4f:f4:03:52:8d:f6:
                    82:ca:a0:11:c2:84:d6:7d:78:13:1a:ca:51:94:ad:
                    ba:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0C:7C:FD:83:9C:EE:9B:53:F7:5E:8D:22:B8:75:9C:9A:1C:D7:31
            X509v3 Authority Key Identifier:
                keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:15:71:fd:92:41:e9:31:c9:83:c7:d6:f7:a1:9f:8e:d4:2b:
         41:ab:5d:6b:67:09:62:05:25:71:6e:a3:3f:d3:3a:c8:9e:fd:
         2b:cf:34:54:88:d1:3d:bb:fd:d5:52:3a:46:d0:13:9c:01:a8:
         c7:7d:3b:6e:01:a5:bb:ff:1f:72:71:f5:71:3d:88:ce:f2:ba:
         69:39:e7:c0:3d:bc:61:fb:00:c5:0d:6b:76:76:2f:ce:c0:25:
         a9:75:e1:21:ca:7c:71:5c:40:c9:fe:61:d8:c2:9c:03:01:03:
         57:f2:56:74:49:36:e9:9c:14:f3:34:ac:92:da:db:d1:09:a2:
         fa:ce:da:dc:2f:56:7d:04:b1:97:73:45:5f:c7:2d:40:b7:f0:
         ad:5e:38:ee:12:c6:89:4f:f8:2c:2b:cf:d4:5e:20:47:08:e6:
         9f:f2:36:3b:47:8c:1c:5d:04:1c:77:36:98:f7:fa:0b:ef:0e:
         16:5e:df:7f:d6:ca:cb:5d:03:e3:f7:fe:d0:fc:13:83:b6:bf:
         f5:88:fd:5a:f2:83:df:9e:23:81:3d:d2:06:8e:7f:0c:c1:a6:
         66:e2:25:89:99:0a:6a:4d:c5:27:e7:a5:41:e1:d0:48:e4:78:
         0c:84:94:a6:66:8d:52:59:d3:b9:58:cb:43:26:e1:44:35:43:
         8f:ee:44:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:48 2025 by rpki-client