Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft
File:                     Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft (raw, json)
Hash identifier:          3fsqqVacD2YxdlUyAzrlAtha8UORKH0e3T5NYL9lX00=
Subject key identifier:   12:41:C1:77:E7:A2:AF:EF:20:6A:4D:E7:68:78:F7:9A:C6:37:DB:5C
Authority key identifier: 39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41
Certificate issuer:       /CN=A91DC302/serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541
Certificate serial:       25DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft
Manifest number:          25C6
Signing time:             Fri 31 Jan 2025 15:43:37 +0000
Manifest this update:     Fri 31 Jan 2025 15:43:36 +0000
Manifest next update:     Fri 07 Feb 2025 15:43:36 +0000
Files and hashes:         1: Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl (hash: inpmHTvrmW76Qz3cBtUGty514XCnmrwgq8cKqpVUGYA=)
                          2: E54E5FF6632311ED8D313442C4F9AE02.roa (hash: +bflLncVpUKisFQ3ZZUQI/J0k3+BOK9UN6bLx8p1G6o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9691 (0x25db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC302/serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541
        Validity
            Not Before: Jan 31 15:43:36 2025 GMT
            Not After : Feb  7 15:43:36 2025 GMT
        Subject: CN=679cefa9-9a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f2:8b:80:53:0b:f4:17:7a:72:b7:53:45:de:
                    ea:86:62:b8:27:50:6b:d3:8e:51:e9:81:54:ac:ad:
                    1f:ec:41:61:9f:1c:62:6b:61:e8:c9:35:f3:92:b0:
                    a1:89:c3:ee:80:1e:33:90:1e:6d:76:84:72:5e:d1:
                    72:e5:02:c7:79:68:6e:49:fa:76:93:20:07:03:60:
                    0d:91:a2:d7:b2:08:e6:f3:a3:9f:d8:57:b6:63:09:
                    2f:eb:67:ce:bb:82:0a:88:10:83:b4:0c:69:35:73:
                    2a:4d:c0:96:9f:02:b0:64:f1:cd:c1:6c:a4:ff:15:
                    62:5c:64:de:a2:5b:4e:5d:ea:f7:dd:95:ee:5d:b3:
                    d3:17:8f:a5:d8:f7:6c:d6:25:43:94:7f:ba:d5:c2:
                    b9:ed:d0:d9:09:94:91:16:d5:db:4b:ea:a5:4d:e9:
                    09:05:1d:15:b2:40:bc:20:54:1b:56:b1:ad:4f:fa:
                    3f:a1:11:e7:7a:42:b9:40:ea:2a:ef:f0:ed:db:e4:
                    dd:26:55:71:ea:a5:0a:ae:ee:0d:fb:23:ea:ad:47:
                    f0:5b:03:be:ec:15:36:b8:20:94:3a:97:b6:8f:43:
                    89:6b:75:64:b2:08:e3:c5:c5:d9:59:be:e2:02:3e:
                    72:a2:69:71:52:d6:01:4a:3b:ae:41:26:4f:80:9f:
                    5a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:41:C1:77:E7:A2:AF:EF:20:6A:4D:E7:68:78:F7:9A:C6:37:DB:5C
            X509v3 Authority Key Identifier:
                keyid:39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a4:55:8f:ac:39:9c:7b:7e:5e:0d:d8:a1:cf:d1:47:4a:18:
         5d:45:7c:77:bd:73:67:71:56:58:96:75:a8:f5:5c:67:d8:b2:
         53:b7:52:2b:4f:3f:79:e4:a1:fc:fc:e2:99:b7:c0:26:78:f9:
         1c:5d:e1:cd:08:cb:fa:38:49:2d:f2:8d:4b:ad:2e:80:e6:f8:
         d4:8a:ba:4c:bd:5f:81:e9:c8:ca:98:24:38:24:75:6a:af:d2:
         0d:63:6b:f0:ae:e6:91:4f:91:e1:4b:cc:06:23:b8:4b:06:e2:
         71:96:88:2f:af:81:aa:14:ff:fd:20:9c:9d:44:af:b5:32:1d:
         ec:30:fb:24:47:05:d7:1e:80:4b:e2:8c:fe:6f:e3:90:b9:38:
         5b:0b:4c:19:80:f9:8c:19:1e:de:7f:f8:89:3e:69:bf:f1:06:
         09:02:f6:4c:1f:75:27:5b:93:0d:3d:be:cf:7f:01:5d:26:b2:
         52:5d:af:5f:6f:59:56:8d:9d:92:11:d0:ac:9e:21:73:12:24:
         3f:97:86:20:a7:d7:04:a8:d5:d7:69:af:7b:c5:11:b3:de:23:
         3c:1a:72:62:cb:88:12:25:be:ef:df:8c:35:70:4e:fa:54:b5:
         04:86:81:29:1b:eb:cc:13:f2:22:3b:92:44:64:9f:c5:ed:3c:
         57:13:2a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:41:39 2025 by rpki-client