Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
File:                     W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft (raw, json)
Hash identifier:          AOVxkm9xtD3F8H+WFcSAim2LaF2e/G9mgUDTLL1OsJY=
Subject key identifier:   46:51:30:76:77:76:68:44:C2:EB:A5:1A:DD:16:41:70:AA:D8:C2:43
Authority key identifier: 5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C
Certificate issuer:       /CN=A91D1E29/serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C
Certificate serial:       0890
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
Manifest number:          088A
Signing time:             Thu 30 Jan 2025 20:38:46 +0000
Manifest this update:     Thu 30 Jan 2025 20:38:45 +0000
Manifest next update:     Thu 06 Feb 2025 20:38:45 +0000
Files and hashes:         1: W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl (hash: 33VLpI8BeIcsHJgqtBraXjsEA6UipTMxDzhBYURjik0=)
                          2: 108B7DAAB2A711EAABBE8663C4F9AE02.roa (hash: qTuGE1JcRtd/cW9n5J8BXF2j1PTZne38og2GGYl8DqM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2192 (0x890)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1E29/serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C
        Validity
            Not Before: Jan 30 20:38:45 2025 GMT
            Not After : Feb  6 20:38:45 2025 GMT
        Subject: CN=679be356-c83c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ce:23:3d:dd:ee:54:a9:c8:e7:e2:e5:24:85:
                    a3:a0:9e:3e:85:7d:37:27:49:dd:21:5c:04:0e:29:
                    11:f2:01:48:f6:4a:3d:1c:10:c7:6c:0c:c4:35:f2:
                    20:ce:1d:5b:02:65:0b:0e:9b:5b:e9:14:ad:86:07:
                    ae:f3:d8:b8:26:8f:f2:ed:25:66:d7:44:27:05:07:
                    94:0d:e1:ea:aa:df:70:bd:6a:8b:2c:de:c9:48:d9:
                    20:c8:28:a2:3a:14:55:b1:ba:18:ab:f9:d5:67:a4:
                    38:8c:18:f8:44:b4:fc:67:6d:78:86:49:5f:b3:4f:
                    88:73:a0:89:89:bd:3b:1a:66:09:46:d6:7d:87:b0:
                    fd:56:a5:e6:19:ad:45:17:1d:fb:db:39:3d:09:f6:
                    f5:e7:a3:54:25:4d:87:02:78:84:05:e7:e0:e6:10:
                    0c:10:07:96:d7:07:a3:7a:ba:0a:88:d6:71:0e:f2:
                    d1:96:60:df:de:61:96:91:cf:84:5b:01:82:67:03:
                    9a:ee:b6:dc:53:cb:06:1c:22:d7:81:3f:15:c6:f2:
                    3c:a0:9d:d8:73:22:c5:ef:7e:10:95:28:4b:02:6b:
                    ad:52:52:3e:bb:de:f9:54:9b:57:e2:f4:31:e7:19:
                    87:26:36:3f:36:50:94:d0:80:27:aa:b5:b9:81:0e:
                    f9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:51:30:76:77:76:68:44:C2:EB:A5:1A:DD:16:41:70:AA:D8:C2:43
            X509v3 Authority Key Identifier:
                keyid:5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d3:9b:d2:aa:86:b1:0b:65:c3:f0:13:62:94:77:46:4f:f3:
         b4:a0:1e:eb:c8:b1:93:11:94:91:9e:d8:03:05:f2:b2:25:cc:
         71:c6:fd:74:4e:45:85:f2:56:af:1c:af:96:aa:9e:b3:8b:bc:
         e0:3d:69:02:69:87:d9:31:28:04:b7:e2:7e:46:48:79:2f:0d:
         96:14:f6:15:b0:91:a2:a5:cf:60:c8:ae:06:a3:bd:3d:24:1b:
         b3:f6:1b:68:3d:26:02:0f:7f:be:55:ef:f9:d1:bd:3f:11:48:
         b8:26:14:53:5b:a5:4b:4e:68:68:79:c7:12:cd:7e:f8:61:a9:
         16:0f:e5:81:e5:ab:50:4d:71:32:72:26:81:30:30:1f:06:b0:
         17:0c:c8:7b:e3:91:35:f0:a7:e1:dd:b2:ca:be:34:2c:72:90:
         95:08:ae:08:74:ee:08:3f:3b:aa:73:b7:d6:c5:b7:c6:13:a8:
         25:ab:48:56:53:1a:07:d9:f1:12:9b:0e:a5:35:4a:ec:5e:29:
         fc:26:63:30:2e:c2:f2:ab:69:af:b1:b9:ce:8a:01:d9:ad:9d:
         0c:e9:81:2c:b3:81:a7:4e:11:ed:5e:bc:8a:fe:0b:5b:b1:81:
         4d:e9:6f:13:74:f9:83:eb:67:4a:3a:1b:06:c8:e5:ec:4b:77:
         14:a0:78:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:32:19 2025 by rpki-client