Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft
File:                     8Esk0kgu8B-It9DWKlOSJzm3iA0.mft (raw, json)
Hash identifier:          ZMxNfsvZ+tMbDrZrzRUX1yP87LIT2JaibUh8S/kcrzk=
Subject key identifier:   75:11:32:94:67:B2:4C:9D:66:D5:24:A7:D0:41:C1:11:2C:F5:89:52
Authority key identifier: F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D
Certificate issuer:       /CN=A91D112B/serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D
Certificate serial:       0707
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft
Manifest number:          06FE
Signing time:             Thu 30 Jan 2025 21:52:56 +0000
Manifest this update:     Thu 30 Jan 2025 21:52:55 +0000
Manifest next update:     Thu 06 Feb 2025 21:52:55 +0000
Files and hashes:         1: 8Esk0kgu8B-It9DWKlOSJzm3iA0.crl (hash: sNH4y2Z2QiH4Tpa2B6Fe2mmZESUkbzeN9kJ5ouoOmCE=)
                          2: D00FC228F46111ECA631AC55C4F9AE02.roa (hash: SdQIXAZgLAYC0wC8aVzYt0Gf/I3END/T1//qc7xaDnw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1799 (0x707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D112B/serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D
        Validity
            Not Before: Jan 30 21:52:55 2025 GMT
            Not After : Feb  6 21:52:55 2025 GMT
        Subject: CN=679bf4b7-085d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a1:79:da:bb:c3:6a:32:0d:71:3c:ca:da:3c:
                    0c:5d:a6:be:fd:af:52:5a:93:b4:1d:e0:f9:62:35:
                    20:57:a1:1f:51:af:dc:96:1b:bd:62:e4:49:6e:8a:
                    98:6a:4d:23:c3:83:a3:1f:a3:5a:ab:98:c9:79:a3:
                    bd:32:e7:9e:a8:ce:46:e0:65:7e:fc:b1:65:e2:95:
                    c8:84:c8:f8:26:89:ef:98:fc:6f:ae:37:d5:00:93:
                    ce:80:b0:56:93:b4:97:64:de:c2:33:89:fb:8d:18:
                    cd:d9:e2:68:cb:65:43:a4:60:9b:59:45:9a:f0:a2:
                    80:d3:bc:a6:34:22:b3:15:62:9b:76:10:b4:65:12:
                    da:19:af:20:a2:6d:39:d7:d3:ea:56:90:be:f3:d3:
                    d9:f0:6a:66:0a:a2:20:57:9b:63:1b:f8:8f:52:78:
                    a3:a1:91:83:77:58:96:bf:3f:21:80:88:17:ff:47:
                    05:40:4d:8b:95:9d:a7:64:74:a7:19:25:61:87:2f:
                    f4:aa:f6:a4:f2:a5:b4:49:2c:49:a6:a8:ab:01:a3:
                    8a:31:bb:ae:2a:a4:51:5c:cf:01:4d:c0:0e:82:26:
                    e7:9a:b2:9d:30:bb:4d:0d:2e:c1:34:d2:7e:0b:44:
                    c4:7e:be:6a:30:7b:9e:cc:a7:d9:2f:3a:a1:db:90:
                    1d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:11:32:94:67:B2:4C:9D:66:D5:24:A7:D0:41:C1:11:2C:F5:89:52
            X509v3 Authority Key Identifier:
                keyid:F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:3e:00:0b:07:7d:1e:d2:c7:2a:ab:57:f0:c4:48:e5:78:2a:
         4a:50:a6:63:fc:4a:84:9b:37:4c:25:9a:ce:e4:8f:73:58:7c:
         1f:27:ef:7e:6f:ad:7c:8f:40:da:db:74:30:d7:b0:1b:21:b9:
         01:fc:f6:fa:8c:74:45:45:09:c2:7b:67:16:b6:14:69:e8:6a:
         53:dd:87:a7:27:ef:6a:3a:1c:e7:96:d6:e7:3d:09:9a:85:a9:
         84:d0:61:3c:62:db:6e:30:7a:aa:4d:06:3f:07:25:fa:05:d7:
         8f:79:09:b8:45:1e:dc:00:0a:3a:00:2a:bf:14:8a:d0:cf:e2:
         ea:a0:b3:1c:b9:e5:2b:44:a5:5c:88:d5:d8:46:f6:c9:36:00:
         42:51:c7:d3:5e:08:3b:d7:4a:eb:ef:cf:88:bb:d5:e5:6b:5d:
         a2:b0:b0:e4:45:8d:78:24:2f:a1:b0:a7:34:f4:87:8a:fe:63:
         af:e8:31:e3:be:4b:63:a3:79:e2:fb:01:2f:60:21:3c:ea:db:
         f4:e2:c8:db:6c:37:4f:23:46:92:8e:45:5f:1e:6f:2a:74:c4:
         f6:ba:be:e0:09:61:88:09:00:4e:30:e6:a0:bb:bd:54:8b:f7:
         1b:7b:28:3a:b1:90:b1:f1:56:92:2a:c0:38:43:da:97:01:60:
         2e:7c:3d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:00:28 2025 by rpki-client