Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft
File:                     yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft (raw, json)
Hash identifier:          IQpt+2rGLk+KMfUtrzvm3T1wcpYg/9+uHVboe3uAfnI=
Subject key identifier:   63:96:3D:52:D8:35:94:66:D4:7A:08:27:C4:9E:C3:11:E7:E6:96:75
Authority key identifier: CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4
Certificate issuer:       /CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4
Certificate serial:       026C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft
Manifest number:          0268
Signing time:             Fri 31 Jan 2025 01:47:36 +0000
Manifest this update:     Fri 31 Jan 2025 01:47:35 +0000
Manifest next update:     Fri 07 Feb 2025 01:47:35 +0000
Files and hashes:         1: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl (hash: B7t0EKFLqEwRTF2mOfGet0Nym3SeKFqxV6ElKoJemdQ=)
                          2: 008702ECFD2511EC813E430BC4F9AE02.roa (hash: 9MRdrfgCzJPWi60WfDAHGFIjA+2Au5PPZv6A0PmrENc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 620 (0x26c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4
        Validity
            Not Before: Jan 31 01:47:35 2025 GMT
            Not After : Feb  7 01:47:35 2025 GMT
        Subject: CN=679c2bb7-46e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d8:de:ea:9c:0a:2b:12:53:03:fd:82:ad:97:
                    c9:b7:49:cd:fd:d7:bb:91:d7:f3:0f:9d:99:bd:98:
                    a6:ac:7a:2c:45:65:ae:0b:64:e0:e4:61:fe:f7:7f:
                    65:2e:78:5a:a3:05:30:92:4e:9b:1f:37:26:51:cf:
                    68:f5:5a:ee:22:3d:3c:1f:1d:bd:7c:17:db:f1:a9:
                    d2:80:17:e1:e1:e4:98:eb:f7:a2:1d:73:10:e0:91:
                    c1:c9:7a:9c:76:c0:94:05:db:6e:bb:6d:cf:74:90:
                    8b:d2:00:79:e3:83:38:5c:0f:59:d2:7b:73:e8:6c:
                    99:7f:56:eb:5d:5d:1f:6e:b3:20:ef:86:10:b0:87:
                    3e:fc:96:bd:8f:4c:71:fd:11:79:7a:c7:cf:a6:1f:
                    96:5f:d2:d5:88:85:0b:75:a0:55:13:57:e9:87:b9:
                    73:5f:78:e7:ce:cb:a5:00:c4:ba:94:35:3d:c3:e6:
                    e6:c0:ab:f5:37:f6:34:25:8d:b9:20:4c:ac:04:60:
                    f7:d0:cb:85:c9:04:94:ff:c3:df:13:56:c0:01:4d:
                    86:7d:3a:85:19:92:3a:48:98:51:a0:9e:a5:60:60:
                    87:fe:e6:6d:ec:bd:2f:10:93:48:fe:f7:3b:41:c7:
                    c6:9c:df:4a:fb:77:09:ae:18:3b:54:36:28:e6:df:
                    dd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:96:3D:52:D8:35:94:66:D4:7A:08:27:C4:9E:C3:11:E7:E6:96:75
            X509v3 Authority Key Identifier:
                keyid:CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b5:0f:3e:9b:67:87:53:e9:c7:32:20:03:bf:8a:17:ba:8c:
         e2:2e:33:f3:53:fd:c4:21:c1:5f:5d:dd:cc:89:ca:52:c5:0c:
         3f:1d:2c:78:e2:78:7c:66:78:64:4f:57:f2:65:3c:a1:fe:fc:
         70:b6:cb:a6:92:39:dd:38:47:be:7c:99:69:f5:e9:d6:33:75:
         38:ba:9f:96:93:f2:ed:d3:34:1b:b1:28:df:13:97:e4:3e:12:
         6a:0f:78:d6:f6:63:ca:3b:fc:29:9a:4a:26:b2:ac:7d:c7:55:
         86:55:45:5f:58:4b:61:8a:f5:9e:0f:7f:0f:bf:89:2c:99:17:
         b3:55:29:b2:9e:9c:c4:1a:d1:96:d0:22:57:97:49:57:d4:9c:
         77:d8:bb:2d:23:4c:1d:16:ab:87:24:cc:8e:a8:17:68:99:ba:
         0e:91:57:b8:71:26:43:9c:cf:28:21:1a:cb:a4:98:f0:50:6c:
         a5:ae:be:c3:c9:29:49:45:03:bf:56:5b:f7:88:79:a2:ac:45:
         9d:7a:6e:12:17:1b:88:46:91:09:bb:cf:30:83:55:54:92:52:
         9e:40:d9:92:d2:c3:3c:0d:f6:d7:3d:3d:4f:2b:13:f7:30:8c:
         a7:5e:02:2a:64:f8:58:48:64:67:ce:40:20:87:b1:51:a3:0e:
         58:fa:df:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:48 2025 by rpki-client