Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
File:                     6_d1-2stKz-APD8za4MAqL5r6YU.mft (raw, json)
Hash identifier:          pETlCM2GRj8OvwoOWhHLFuguQpC0P6WEvHB9wCjTe0k=
Subject key identifier:   30:49:84:62:C8:8E:FC:A3:80:17:6E:00:3F:AF:B9:1A:AB:68:02:B5
Authority key identifier: EB:F7:75:FB:6B:2D:2B:3F:80:3C:3F:33:6B:83:00:A8:BE:6B:E9:85
Certificate issuer:       /CN=A91D65E6/serialNumber=EBF775FB6B2D2B3F803C3F336B8300A8BE6BE985
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
Manifest number:          9A
Signing time:             Fri 31 Jan 2025 05:24:46 +0000
Manifest this update:     Fri 31 Jan 2025 05:24:45 +0000
Manifest next update:     Fri 07 Feb 2025 05:24:45 +0000
Files and hashes:         1: 6_d1-2stKz-APD8za4MAqL5r6YU.crl (hash: krjl89C9fBVFPRVXRD6G51VUR2tEBopb8Q5GTTE6Mko=)
                          2: 45BE9530F0AA11EE8FBA4E4DC4F9AE02.roa (hash: PBdH3/zpr4RKozr7sfAZDHszBwUywik32GHJG73of80=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D65E6/serialNumber=EBF775FB6B2D2B3F803C3F336B8300A8BE6BE985
        Validity
            Not Before: Jan 31 05:24:45 2025 GMT
            Not After : Feb  7 05:24:45 2025 GMT
        Subject: CN=679c5e9d-2b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:31:84:e5:fd:a2:e0:12:57:e9:0f:c6:69:af:
                    28:95:c2:52:c4:8a:ea:74:fc:1c:47:4d:97:f0:6d:
                    94:7b:b9:20:16:9c:2e:55:ca:9d:cc:91:a1:c8:9d:
                    77:dc:01:31:c1:bb:e3:0b:b5:40:7f:cd:1a:96:b0:
                    80:6f:8c:eb:35:c0:6d:5d:cd:82:b9:3a:84:b4:ac:
                    ff:af:f5:41:57:1d:f4:22:da:04:48:da:c0:ef:52:
                    79:92:02:a9:90:b3:ac:7b:5c:0e:a8:28:31:e9:f2:
                    35:c3:d6:46:af:9d:cc:73:f1:6b:d7:04:ed:b6:79:
                    09:97:24:a7:04:21:33:05:f0:54:25:86:78:b1:44:
                    7a:f0:dc:99:9f:af:17:01:d8:a7:f6:ac:a1:e9:ec:
                    aa:99:af:e0:0c:01:36:7e:46:6e:c1:5a:48:68:e2:
                    c7:2f:a0:7c:2f:26:27:df:73:2f:70:cc:67:da:85:
                    76:83:43:39:85:b5:89:92:ab:dc:57:e3:df:f1:97:
                    4f:a0:0c:ca:45:99:2a:9d:f1:9c:a8:76:38:e9:d1:
                    15:fd:9d:78:80:12:80:5c:15:41:8b:b2:2e:c8:0f:
                    83:1e:93:fc:d9:39:d9:13:f0:fc:c7:d6:a8:95:af:
                    20:92:94:06:28:35:fd:a5:05:11:ab:c5:ef:c4:b1:
                    f4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:49:84:62:C8:8E:FC:A3:80:17:6E:00:3F:AF:B9:1A:AB:68:02:B5
            X509v3 Authority Key Identifier:
                keyid:EB:F7:75:FB:6B:2D:2B:3F:80:3C:3F:33:6B:83:00:A8:BE:6B:E9:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:7f:7e:35:2a:ad:94:b1:6f:c4:81:47:6c:34:af:3a:79:7a:
         fd:6e:dc:4c:0f:f1:21:60:77:bd:a2:c4:50:e7:ff:2a:64:53:
         d2:78:5b:1e:09:43:c8:5e:2b:55:f9:df:08:f9:81:02:ff:b1:
         8a:52:d2:c1:5b:b5:d9:f3:9f:de:54:84:ff:12:f9:b5:37:b8:
         81:82:13:99:9d:9b:70:21:17:7b:ff:9a:cf:81:83:ee:1a:97:
         c1:8c:64:c1:49:79:e9:2f:8e:b8:eb:f6:17:c5:e6:84:79:cd:
         48:ec:ae:02:76:9e:15:88:6a:f5:24:bd:5f:b0:34:6e:94:08:
         ff:7c:0b:58:a4:04:67:cc:31:09:10:f3:b7:95:24:3a:a5:cc:
         9d:73:2c:5a:f7:6d:95:4d:77:d5:26:81:2e:37:5c:c0:33:88:
         02:87:aa:c0:99:28:ec:f8:82:32:e5:85:1f:5d:91:aa:2c:98:
         c5:72:5c:b9:fc:2a:73:94:3b:41:0c:bf:53:ad:bb:6f:3f:3b:
         d2:c3:f7:69:61:04:a8:2c:7b:9c:62:8a:05:65:31:c0:9c:0c:
         5e:27:25:ca:75:8b:5c:02:f6:30:78:4e:d4:3b:3c:95:9f:6a:
         6f:2a:a3:7e:ca:79:d5:0f:b5:52:d0:38:02:6e:d6:c4:31:d6:
         c7:83:57:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:16:39 2025 by rpki-client