Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft
File:                     HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft (raw, json)
Hash identifier:          L2BBJ3mT5szXMDpExvzZH89Xzioe8AalFez8ou6eN8U=
Subject key identifier:   1C:BE:B8:47:3D:7E:DA:BF:12:B9:42:F9:B2:B8:5F:34:66:47:E6:D4
Authority key identifier: 1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E
Certificate issuer:       /CN=A91D19ED/serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E
Certificate serial:       061D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft
Manifest number:          0616
Signing time:             Thu 30 Jan 2025 22:45:33 +0000
Manifest this update:     Thu 30 Jan 2025 22:45:32 +0000
Manifest next update:     Thu 06 Feb 2025 22:45:32 +0000
Files and hashes:         1: HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl (hash: eAAZNJ2mx9gAzAhYDa7EMD9I2cmOM1yISD/KqQn43I4=)
                          2: C28841A201DB11EDA4B7F257C4F9AE02.roa (hash: gl+Xayi16U6h277wIL1sN1GFI6Op5pizCRAvEuYKZew=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1565 (0x61d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D19ED/serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E
        Validity
            Not Before: Jan 30 22:45:32 2025 GMT
            Not After : Feb  6 22:45:32 2025 GMT
        Subject: CN=679c010c-313b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d8:d2:0a:70:f9:c9:fe:93:ca:66:d5:6b:13:
                    16:b2:e5:9f:8d:25:be:4d:b8:60:8d:23:32:75:11:
                    16:05:ce:65:04:c8:ee:68:f8:23:3e:b6:26:4d:81:
                    01:57:77:fb:dc:9a:e2:68:33:24:11:88:d5:04:81:
                    f7:65:37:f8:69:cd:2b:a4:67:56:d2:ff:ab:4d:85:
                    23:e0:02:43:97:c7:e6:d2:dd:96:09:2a:aa:91:4d:
                    74:4c:14:2e:c9:25:55:16:be:e9:5a:87:39:14:04:
                    ed:4c:3d:1a:1b:75:b1:d4:6c:09:c5:00:3b:8a:d2:
                    08:31:a9:dd:92:e3:94:57:98:67:19:9d:72:55:61:
                    33:ea:58:e0:a8:41:c6:bb:1d:bc:90:aa:59:dd:1c:
                    c0:17:f8:82:2f:8e:74:8d:79:f2:46:04:8d:c3:be:
                    0b:cd:7f:0b:5c:77:fc:4f:7c:0a:e0:d7:5b:21:b7:
                    fc:17:e4:b8:aa:0e:b4:20:39:88:fc:88:09:16:7b:
                    f3:86:12:d8:1f:b0:ac:cf:95:09:5d:35:7d:96:29:
                    52:5e:1f:fd:68:9f:86:4d:54:dc:8d:88:35:e1:01:
                    e5:05:64:4f:21:11:37:44:88:6c:e1:e7:16:fd:6b:
                    fe:12:dd:e4:d4:9a:8c:29:fe:85:5e:fc:d6:bd:f6:
                    61:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BE:B8:47:3D:7E:DA:BF:12:B9:42:F9:B2:B8:5F:34:66:47:E6:D4
            X509v3 Authority Key Identifier:
                keyid:1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:3d:e6:be:9a:14:0a:3b:a1:ca:b4:f9:2e:fd:35:95:12:1c:
         c2:08:d2:03:81:60:c7:cb:45:20:1b:64:a3:51:e2:2a:10:a8:
         b1:fd:84:0e:ee:e2:68:da:f5:1d:7b:ff:d0:a2:79:ca:ee:20:
         11:1a:49:05:5c:aa:58:cf:b8:f5:1a:b1:fe:20:64:a8:dc:6b:
         ec:b0:50:1f:be:e9:97:a4:ca:9d:1e:ce:04:58:9a:79:c7:34:
         ba:f9:62:b0:1c:2b:85:c2:ba:32:92:67:06:a3:c6:ef:e6:42:
         15:ce:b5:1d:6d:58:23:bb:b7:47:b9:87:88:ad:ad:a4:a8:f5:
         a9:c3:53:c3:71:d8:c3:bd:6a:26:e9:39:d0:f5:8e:d2:f1:0a:
         a0:fc:dd:96:99:bd:20:1e:7a:2c:75:b4:25:ca:f5:ac:25:c0:
         44:5a:de:46:aa:3a:a4:b3:07:73:09:f1:ea:6c:e0:59:64:8f:
         53:a4:66:be:9c:ac:93:8a:da:60:59:2d:75:81:98:2e:59:69:
         7d:b5:64:d2:49:18:df:10:15:f6:96:21:ff:72:12:4f:4e:68:
         1b:dd:b9:be:9b:d7:81:2d:b2:2c:ad:95:e2:ac:d4:bd:36:5a:
         b1:8b:9e:e9:43:88:ae:f1:7d:99:d7:e2:f1:60:3e:e8:89:5f:
         49:ad:36:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:05:37 2025 by rpki-client