Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
File:                     _vLBxOoJZEd1FMGqlG5sQXeNBr8.mft (raw, json)
Hash identifier:          d6aL/AwRHrnFZXK2czIbxiV7UuM5qg1QhzeGHZkkmxI=
Subject key identifier:   CD:C7:32:E1:82:DA:63:B7:33:32:74:4D:EC:F1:1C:35:25:D4:F9:78
Authority key identifier: FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF
Certificate issuer:       /CN=A91D298D/serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF
Certificate serial:       0822
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
Manifest number:          07EB
Signing time:             Thu 30 Jan 2025 21:12:37 +0000
Manifest this update:     Thu 30 Jan 2025 21:12:36 +0000
Manifest next update:     Thu 06 Feb 2025 21:12:36 +0000
Files and hashes:         1: _vLBxOoJZEd1FMGqlG5sQXeNBr8.crl (hash: fhtz1BTOAYMZMOHIBdeFtzLAot+StSuEaxT8k1zruU8=)
                          2: 65519ACC506C11EC99354984C4F9AE02.roa (hash: nEa6jfXtxG9N2Xq8i5UVfOUP23F8VB7FknoSsQg1RJ0=)
                          3: 01BB1B8E7C0411EFB0D29158C4F9AE02.roa (hash: uaYZ52aFS7AA/WBDBkvre20yg4+dnRTg85CyApS1/Vk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2082 (0x822)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D298D/serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF
        Validity
            Not Before: Jan 30 21:12:36 2025 GMT
            Not After : Feb  6 21:12:36 2025 GMT
        Subject: CN=679beb45-ec97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8e:c4:14:23:62:fa:08:b7:94:70:24:57:d0:
                    c7:d1:70:86:68:a8:da:7d:01:fb:83:3c:fd:a0:f7:
                    98:cd:41:f2:0b:cd:1d:70:22:21:14:89:95:fe:df:
                    e0:0a:45:f1:1e:fb:f7:9f:a1:b1:86:be:da:c8:f1:
                    9b:71:8e:d0:b9:04:47:3e:0c:73:fa:1e:34:92:36:
                    24:5c:01:98:77:d9:6c:9e:0c:06:e3:21:1e:34:db:
                    6f:3b:8e:b1:ad:77:38:b7:b9:dd:a1:ee:f0:9d:06:
                    28:b3:5b:13:cf:bb:5a:6e:d1:30:ac:de:76:ef:e2:
                    b1:f1:45:7d:02:b1:61:56:ca:87:cf:d1:72:3d:e7:
                    19:49:d7:1f:e6:c8:b2:0d:ac:96:db:6b:97:06:16:
                    8b:b6:70:0b:e9:7f:8d:0a:0e:21:7b:11:8f:02:9c:
                    1e:41:72:6a:cd:bf:91:72:b9:da:18:d8:39:cd:6a:
                    53:4d:e5:0c:3a:83:43:6c:27:88:b9:b6:de:16:3a:
                    2c:fb:43:75:95:29:15:26:7c:e8:a4:04:ae:b5:bb:
                    27:47:bf:74:a6:4e:82:6d:a3:62:00:85:61:7a:53:
                    40:ad:10:f2:3c:2b:03:7b:fe:c5:e6:dd:78:61:10:
                    f9:d8:2a:f2:23:1c:e4:97:69:24:ef:49:7d:1c:13:
                    bb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C7:32:E1:82:DA:63:B7:33:32:74:4D:EC:F1:1C:35:25:D4:F9:78
            X509v3 Authority Key Identifier:
                keyid:FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:1d:4d:c9:df:94:8e:f5:a6:d7:c7:6b:58:9b:f2:e0:b5:ca:
         64:27:83:4f:14:0c:14:e9:76:11:6a:a0:5a:c0:e5:24:c0:16:
         dd:6c:7a:87:31:4c:2a:83:37:bf:f0:15:b0:42:78:ae:49:e2:
         c0:14:11:d7:58:d1:86:72:e3:c7:73:33:89:5a:10:a9:2e:d7:
         c6:32:10:ea:7e:55:6f:02:71:cd:62:ad:7d:96:7d:e6:ba:0f:
         96:3c:51:84:03:90:0b:39:e6:5f:21:6d:fc:06:ec:93:94:da:
         b6:cf:1f:ab:83:56:17:d5:72:c2:a5:2d:79:ad:47:4e:bb:4a:
         4e:7d:a5:29:e5:6e:c0:b3:0f:05:44:f8:f0:1a:cb:64:03:8f:
         46:57:59:77:14:16:c8:3f:44:18:be:d8:b1:d9:9d:1b:4d:ed:
         ce:c5:9d:ef:b4:43:82:09:0e:23:02:14:82:7d:0b:0f:ea:46:
         9e:5c:a6:76:b1:cb:1c:d1:f1:55:7e:47:c8:bc:e3:d1:0f:57:
         67:50:d4:2c:32:92:d1:a0:19:0f:be:2d:85:5b:f0:0b:43:f6:
         ec:55:7c:83:68:77:47:b9:7f:d4:2d:43:67:d7:80:e0:12:f9:
         ba:0d:a2:56:eb:58:8b:3b:ad:55:59:a7:b2:97:ce:9e:cd:ec:
         34:e1:75:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:27:23 2025 by rpki-client