Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
File:                     v7abwiV2uVe6tf8za36DWNy3Cio.mft (raw, json)
Hash identifier:          HZereXKKz7olUEQPOlZlWLTtR6F9eB86VkLxrZxkX04=
Subject key identifier:   99:3B:F2:D9:E6:74:8F:1D:7B:A0:EF:BE:29:2F:48:0A:86:B3:2C:D7
Authority key identifier: BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A
Certificate issuer:       /CN=A91D5BFB/serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A
Certificate serial:       2190
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
Manifest number:          216F
Signing time:             Fri 31 Jan 2025 15:55:14 +0000
Manifest this update:     Fri 31 Jan 2025 15:55:13 +0000
Manifest next update:     Fri 07 Feb 2025 15:55:13 +0000
Files and hashes:         1: v7abwiV2uVe6tf8za36DWNy3Cio.crl (hash: MTopxL0jwa+Fi1nrC8bGkcGPArgP5QDL5QVa6LcTGrs=)
                          2: 6D2F20B6ECEB11EE960F5531C4F9AE02.roa (hash: VxYl4qfB1zjkRKmgSxnmRNT6jpcxz/oQeuf18i1PilE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8592 (0x2190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5BFB/serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A
        Validity
            Not Before: Jan 31 15:55:13 2025 GMT
            Not After : Feb  7 15:55:13 2025 GMT
        Subject: CN=679cf261-e65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:91:e4:e2:79:c8:56:81:17:89:65:bf:63:a1:
                    9b:45:47:50:f3:4e:fb:10:43:c9:a0:ea:6d:c4:f7:
                    2b:a6:68:5c:27:1d:7e:64:e5:2b:88:f0:7b:4a:01:
                    bf:25:6d:16:07:04:10:e1:ec:2c:f8:f0:16:46:33:
                    ac:17:f2:f0:fc:6d:73:6e:74:eb:ad:d4:24:f6:a2:
                    0f:72:63:64:1f:aa:1c:f5:80:02:22:ac:98:bd:09:
                    e1:3a:31:c7:91:95:83:29:49:49:06:f2:02:3a:74:
                    ce:15:83:e9:73:ba:c1:ba:5c:dd:5f:6b:d1:27:22:
                    1a:62:22:9b:f8:c6:ac:a7:ce:a0:66:8a:3c:34:bd:
                    07:a8:45:05:e8:f7:7d:b4:05:f8:00:99:f8:23:36:
                    18:86:e6:b0:09:c7:24:af:76:e1:43:8b:55:85:44:
                    8a:c0:4c:7e:58:d6:b0:54:e9:b3:6a:c6:4c:cd:47:
                    26:7f:75:d9:4b:ae:02:75:31:5a:84:94:c9:e5:f1:
                    5c:6f:5a:45:ce:a0:22:fb:5d:38:ba:30:e7:54:b0:
                    1a:c5:ec:b7:1c:53:66:a4:b2:24:9b:5a:91:d6:8f:
                    45:65:46:63:10:f6:21:66:1e:d1:5f:84:d5:e9:eb:
                    01:68:de:7c:7b:85:ba:e5:98:1b:02:e9:89:47:c2:
                    8c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3B:F2:D9:E6:74:8F:1D:7B:A0:EF:BE:29:2F:48:0A:86:B3:2C:D7
            X509v3 Authority Key Identifier:
                keyid:BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e7:07:f9:db:49:ae:e1:40:7c:f9:99:21:f2:fd:52:26:7a:
         d5:1c:62:9e:7a:fb:3b:16:e5:df:91:61:02:95:cd:1a:8a:f2:
         9b:e8:86:d6:5a:03:6b:74:f8:e7:ca:8c:6b:e9:0b:f0:7b:84:
         9d:aa:40:69:09:16:eb:02:ad:83:83:0a:29:3c:44:38:50:c8:
         a6:51:55:ee:61:74:11:3f:96:98:46:70:d6:a7:a7:3b:b0:7a:
         26:32:f3:9d:a9:e0:79:84:c6:7f:f9:ab:e6:f1:7c:06:92:ac:
         74:97:91:ac:27:da:f2:dc:b8:25:fe:a0:5c:2b:b3:40:e4:93:
         6a:44:ec:9b:05:28:54:0d:c6:2d:a9:bc:f7:c9:c7:8b:22:bb:
         72:c0:df:3d:50:44:ca:fa:3e:34:03:cd:38:5d:4d:14:f5:0e:
         17:c3:06:1f:8e:fd:21:31:f6:42:40:21:ae:c0:6b:46:59:04:
         68:d9:98:25:e7:a8:20:7c:4b:f6:73:17:bc:c5:2b:85:1c:d7:
         3e:fd:65:5d:c3:53:84:c8:71:54:ef:3e:36:aa:f2:7c:ab:bc:
         5a:9f:b4:bf:35:e9:d5:5e:fe:0f:b5:bd:a0:f9:a7:c3:be:2e:
         22:e8:e4:32:bb:3f:96:5d:2b:e0:01:4c:7d:3d:0e:cb:68:c5:
         64:30:bb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:05 2025 by rpki-client