Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
File:                     EobObnRy-d6N8qVtj9oUScpz7dw.mft (raw, json)
Hash identifier:          MDfFKzylbLIzoVtAkLaCHWY6MvkChretDTILD81yO7A=
Subject key identifier:   A8:28:B1:B5:58:AF:E1:07:BF:9F:9F:0A:38:F8:4A:DA:BC:A8:36:0E
Authority key identifier: 12:86:CE:6E:74:72:F9:DE:8D:F2:A5:6D:8F:DA:14:49:CA:73:ED:DC
Certificate issuer:       /CN=A91D9196/serialNumber=1286CE6E7472F9DE8DF2A56D8FDA1449CA73EDDC
Certificate serial:       1EDD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
Manifest number:          1EC7
Signing time:             Fri 31 Jan 2025 16:03:09 +0000
Manifest this update:     Fri 31 Jan 2025 16:03:08 +0000
Manifest next update:     Fri 07 Feb 2025 16:03:08 +0000
Files and hashes:         1: EobObnRy-d6N8qVtj9oUScpz7dw.crl (hash: 6zHpHTg0bqTGnG+1yG8LkwP5qudI75BEqaN35Kbuz8Y=)
                          2: 166B6FD854EE11E78DFD1629C4F9AE02.roa (hash: 4pH+e0DAGB7uiyu6q3/py65vuNCItVcuG3R7I6BU3bw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7901 (0x1edd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9196/serialNumber=1286CE6E7472F9DE8DF2A56D8FDA1449CA73EDDC
        Validity
            Not Before: Jan 31 16:03:08 2025 GMT
            Not After : Feb  7 16:03:08 2025 GMT
        Subject: CN=679cf43c-f06c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7e:ab:ad:6b:f6:b8:18:7b:3a:a1:72:94:e3:
                    cb:ba:68:8f:6e:b7:bc:0b:b0:f3:88:94:37:da:0a:
                    0c:97:ee:46:53:0e:47:04:fc:26:79:e4:f6:c4:98:
                    7f:1b:33:9f:50:51:a7:c4:b3:ab:b6:0e:40:a7:45:
                    f1:0f:09:ee:a7:01:92:80:c6:d5:68:df:3b:34:d4:
                    f2:b7:67:c8:6a:40:e1:ba:b4:db:b9:ac:87:37:82:
                    ee:c0:59:6d:5f:38:62:1a:e9:64:20:42:a7:f0:80:
                    5f:30:6c:8d:52:73:25:18:24:f8:82:94:13:f1:3a:
                    ff:26:67:19:94:42:53:01:47:44:b5:23:0c:bb:fb:
                    69:d2:20:8c:15:5f:d3:76:52:d0:17:c8:7b:3d:31:
                    2d:70:23:7b:a7:a0:8b:ed:45:55:68:0a:94:f6:4a:
                    c7:99:8f:8d:ee:a2:92:56:ca:c7:e9:c0:01:ae:e3:
                    f4:75:d9:98:7a:44:7b:1d:cd:7e:25:50:17:6b:01:
                    fc:9f:42:8e:4e:f8:33:0d:89:fd:ab:8f:56:3e:cc:
                    56:c4:4c:96:34:6b:13:f0:8f:2b:f6:23:16:08:d1:
                    13:46:18:2a:4e:15:ee:b2:c0:b4:d9:5e:88:55:1d:
                    fd:3f:a6:67:67:94:79:e0:9d:25:f6:3e:be:95:02:
                    ff:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:28:B1:B5:58:AF:E1:07:BF:9F:9F:0A:38:F8:4A:DA:BC:A8:36:0E
            X509v3 Authority Key Identifier:
                keyid:12:86:CE:6E:74:72:F9:DE:8D:F2:A5:6D:8F:DA:14:49:CA:73:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:08:7e:3d:c8:8a:43:62:30:28:82:e4:13:88:e4:2a:89:a2:
         01:5a:8a:cb:70:6f:68:16:a6:c1:3e:07:33:ea:b9:b3:9d:a8:
         56:72:8a:41:aa:c3:49:96:71:af:70:62:6c:f6:7d:7e:25:e4:
         c2:0e:ac:9d:4a:36:7d:17:e3:b0:23:dd:2c:a6:ed:39:c1:ca:
         16:17:34:5d:24:f2:8b:e7:16:b8:90:ec:1a:ba:6b:9a:57:66:
         c1:69:ab:9d:3e:ad:0e:2c:70:37:8b:e5:f6:af:d9:33:ad:a0:
         bd:b8:8b:13:4f:dc:e6:82:83:e5:0a:7f:dc:4d:0b:42:f3:00:
         78:85:2a:c4:85:6c:27:44:98:71:46:12:af:fb:40:d8:fe:84:
         c6:d4:59:2c:da:90:02:3c:28:ad:59:25:a9:de:96:2d:cc:4c:
         46:77:b2:fd:d3:80:cf:3a:71:34:3a:dd:da:e8:14:47:b8:5a:
         3d:93:2e:10:5f:96:bc:95:7c:bc:7e:18:a6:b2:17:78:1e:c8:
         d6:fb:50:3b:ab:97:04:c5:86:a7:a0:4d:4b:29:dc:ca:f0:39:
         1f:9e:5c:9f:f9:63:a5:6b:ef:37:9b:f8:f0:d7:da:99:f4:b9:
         35:c9:2a:7e:52:8a:1a:5a:56:e4:41:9c:40:a2:80:f2:24:25:
         46:ff:67:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:02:49 2025 by rpki-client