Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
File:                     4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft (raw, json)
Hash identifier:          OD29P1v7r01+QGO0SI1NU57wVsw3ngLqBWVLG98CnbI=
Subject key identifier:   DA:B8:5E:26:72:E7:C4:49:20:13:16:26:D5:CE:4D:E1:1D:9F:9B:01
Authority key identifier: E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A
Certificate issuer:       /CN=A91D1306/serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
Certificate serial:       18D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
Manifest number:          18C8
Signing time:             Fri 31 Jan 2025 16:27:56 +0000
Manifest this update:     Fri 31 Jan 2025 16:27:56 +0000
Manifest next update:     Fri 07 Feb 2025 16:27:56 +0000
Files and hashes:         1: 4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl (hash: KnKJXok8G08pF8wmDsULNFU/4y/FCE47rJdjnuRRxnQ=)
                          2: 66BEBEDE83CB11E796105342C4F9AE02.roa (hash: B440WbdvKbjd1VY/h7WWP2ns/DY0sOenjaoST0N8qSQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6354 (0x18d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1306/serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
        Validity
            Not Before: Jan 31 16:27:56 2025 GMT
            Not After : Feb  7 16:27:56 2025 GMT
        Subject: CN=679cfa0c-0bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9f:c2:87:a1:e4:62:7f:5c:c5:5a:2e:49:75:
                    df:15:74:9b:53:61:4f:1c:e0:32:31:a1:f0:90:3e:
                    00:26:72:38:60:5a:38:43:b1:25:da:31:cd:c1:2a:
                    5b:84:34:80:4f:6d:ee:be:e6:b9:6d:9c:d9:a0:9e:
                    5a:16:15:8c:a6:3b:c4:7e:7c:b1:09:1a:50:61:93:
                    18:67:16:8a:50:3a:c3:17:1c:a4:df:22:f9:1c:99:
                    2e:51:a7:ac:04:11:f7:9b:ae:6f:6a:53:ab:b4:b0:
                    3d:9c:66:c0:c1:eb:40:a1:59:ce:7b:4f:23:5e:c4:
                    be:97:f1:5c:48:ba:dc:23:fd:dc:3e:ac:ee:f6:b4:
                    33:a8:5d:0a:66:e0:7e:51:dc:2b:82:3a:12:d9:c5:
                    2d:71:4d:d0:dd:a7:db:8f:53:27:13:fd:09:38:47:
                    98:b3:88:1c:5c:cf:ca:17:1f:30:a4:bd:16:b5:04:
                    d0:5c:2b:85:38:78:93:d7:c0:7f:a2:a7:91:19:6e:
                    a9:4e:ef:09:a1:c5:90:b1:27:a7:99:1b:34:c1:f9:
                    7d:65:2d:af:64:1a:76:f6:6c:51:5f:e3:28:14:9b:
                    05:a5:d9:80:b9:dd:7c:e3:8d:8d:c4:c1:b4:8a:fd:
                    34:dd:8d:43:da:a8:0b:9c:53:62:65:83:a8:a7:e1:
                    35:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B8:5E:26:72:E7:C4:49:20:13:16:26:D5:CE:4D:E1:1D:9F:9B:01
            X509v3 Authority Key Identifier:
                keyid:E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:bd:da:26:40:62:ee:1d:ed:df:9b:62:26:5a:d4:47:2c:40:
         12:a4:87:24:86:36:59:62:cb:85:e3:74:99:8b:42:91:6f:c9:
         9e:1b:cd:e0:19:40:0e:cf:37:af:c2:1c:f9:82:c3:2a:66:25:
         54:e2:9b:0b:52:93:3f:c6:4c:24:37:43:39:6a:08:6f:91:ec:
         7a:3d:b2:2e:a7:52:9a:b6:5a:fe:b9:47:83:d1:df:d5:8f:0f:
         40:18:48:f3:b5:6e:b6:13:ec:51:57:ef:dd:08:bb:5f:2f:e8:
         9d:13:9f:05:ad:af:b9:05:a0:0e:14:c7:07:e5:9e:5f:5e:59:
         95:63:53:0d:ad:ab:f4:f3:11:ff:b6:d0:ae:57:c2:96:db:8f:
         b8:15:cd:1f:1d:c9:06:0c:26:df:33:e2:7d:94:e4:40:d5:a1:
         37:a8:0c:cd:ee:08:f1:9b:01:de:27:00:4f:d6:03:39:9c:1d:
         76:0e:33:dc:0b:de:c6:f1:03:26:b0:50:60:bd:82:a8:7f:a0:
         2d:ae:15:90:37:f6:4e:f6:1e:a7:87:c4:92:08:bc:cd:4c:ff:
         11:d9:4c:22:5e:98:c0:10:bc:3e:0e:a5:1e:bf:fe:ce:de:64:
         15:44:93:77:bc:d5:c7:6b:b5:92:c4:8b:af:62:95:b1:fa:b3:
         92:45:b5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:13:56 2025 by rpki-client