Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft
File:                     0fGDjm-uASwUWNKgeiJNnhEBJdw.mft (raw, json)
Hash identifier:          j10NZ/3/19h69Kzgs1jMpbxniprxCxyRTiMdmEUadtA=
Subject key identifier:   B3:73:36:ED:B5:2D:21:3B:16:DE:56:03:44:18:05:1B:A1:57:E2:31
Authority key identifier: D1:F1:83:8E:6F:AE:01:2C:14:58:D2:A0:7A:22:4D:9E:11:01:25:DC
Certificate issuer:       /CN=A91D3603/serialNumber=D1F1838E6FAE012C1458D2A07A224D9E110125DC
Certificate serial:       049F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fGDjm-uASwUWNKgeiJNnhEBJdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft
Manifest number:          0499
Signing time:             Fri 31 Jan 2025 00:00:49 +0000
Manifest this update:     Fri 31 Jan 2025 00:00:48 +0000
Manifest next update:     Fri 07 Feb 2025 00:00:48 +0000
Files and hashes:         1: 0fGDjm-uASwUWNKgeiJNnhEBJdw.crl (hash: W/XZvkqNHSzFu9PfOHfTvDFY1eGFEiaernZeYaB0eg8=)
                          2: 11F818F81F7311EC9027050AC4F9AE02.roa (hash: PTzWu6eYDTTqoEV88MOR131OkkMKAZ5jVAGwccli/Vg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1183 (0x49f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3603/serialNumber=D1F1838E6FAE012C1458D2A07A224D9E110125DC
        Validity
            Not Before: Jan 31 00:00:48 2025 GMT
            Not After : Feb  7 00:00:48 2025 GMT
        Subject: CN=679c12b1-dce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f2:f7:24:5a:b0:11:a2:03:04:3d:76:cd:86:
                    ef:c9:e2:f5:76:73:1b:7d:d2:55:06:08:3a:6e:9c:
                    22:3b:3c:14:b0:5e:e1:b0:a1:b3:04:7a:c9:2d:e7:
                    cb:ca:c3:1e:3a:e7:54:16:4c:fc:c5:7e:22:de:0f:
                    6b:bd:6a:62:72:8d:c1:b2:2c:c8:ac:7f:79:ea:c7:
                    b1:c3:e2:eb:0a:5b:9d:e8:d3:15:4f:94:f7:a4:9e:
                    d9:27:a5:c7:ee:0e:50:7e:7b:11:d6:37:3c:b5:7d:
                    c7:57:7a:10:97:7d:fc:81:79:f5:c3:dd:37:20:2a:
                    f9:3c:32:9c:dd:a7:d5:ba:fd:2b:d1:d5:ee:4f:c3:
                    ab:8a:6b:f8:3c:f9:6e:e1:c0:b5:5c:97:7d:6f:b0:
                    67:ba:e5:bc:af:b7:76:5d:e9:80:0b:a0:bb:37:3a:
                    09:78:87:c2:09:ad:a6:8c:f3:c9:a0:2d:a8:fc:aa:
                    7e:8b:93:07:47:dd:fa:85:a8:22:0d:d3:47:5c:e7:
                    34:5e:66:10:4c:a4:da:06:8c:80:ce:47:e2:93:b2:
                    e5:57:04:06:9b:56:18:6d:97:24:1e:46:7f:81:f0:
                    e4:ff:28:3a:93:4e:c3:26:21:69:b9:5a:c9:50:2a:
                    dd:c2:26:92:75:12:02:f2:3d:89:af:0f:a2:39:03:
                    a4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:73:36:ED:B5:2D:21:3B:16:DE:56:03:44:18:05:1B:A1:57:E2:31
            X509v3 Authority Key Identifier:
                keyid:D1:F1:83:8E:6F:AE:01:2C:14:58:D2:A0:7A:22:4D:9E:11:01:25:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fGDjm-uASwUWNKgeiJNnhEBJdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:36:e4:d2:87:a2:e8:a4:97:c0:64:25:ee:1a:05:ac:47:22:
         7f:05:12:f9:d7:2d:97:05:59:8b:27:c5:e1:22:e7:2f:3b:77:
         6c:9c:c3:af:28:26:be:91:b9:c4:6c:f6:54:1c:e7:32:03:c3:
         22:ce:e9:b3:2a:3d:e0:11:a3:09:5f:b9:9a:32:b9:6e:bb:75:
         66:f8:f8:6d:ce:6e:97:31:1f:4e:10:15:37:df:90:d2:d3:85:
         6b:22:34:0c:57:9a:b4:cd:3f:1f:4c:35:06:49:f0:d0:c9:4e:
         86:eb:d5:88:5f:04:1e:d5:93:2b:6e:a8:79:0e:1b:52:d5:8f:
         06:4e:4c:8a:1b:b7:69:d9:51:91:9d:b4:40:dc:02:6c:95:37:
         29:eb:e2:47:1d:35:29:b7:4e:1a:3c:d1:ed:91:00:f9:e3:0f:
         aa:56:37:c7:0b:bd:d5:80:2f:19:db:3d:71:ba:8c:3e:4e:19:
         66:fb:b1:e2:57:11:e4:53:e0:27:d8:a5:10:e7:c6:60:03:05:
         00:19:44:e0:88:d6:67:86:83:0f:61:69:1a:e3:3b:f9:b5:de:
         85:ac:45:05:be:f3:b0:1a:ac:3e:06:9a:d4:84:27:5a:43:51:
         d2:5f:61:65:e7:29:cc:63:3c:a8:ec:dd:27:82:0d:6b:36:af:
         55:8c:2c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:12 2025 by rpki-client