Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft
File:                     pTalTbQeRB3nTDP29zbFrXpmhcY.mft (raw, json)
Hash identifier:          OcctYL1qi72v91jX5XeYB0xNhDZhUaVGiCXpgwKA+nE=
Subject key identifier:   39:76:9A:03:A6:28:FD:17:47:06:8F:3F:B8:D6:90:73:1F:2B:A3:6C
Authority key identifier: A5:36:A5:4D:B4:1E:44:1D:E7:4C:33:F6:F7:36:C5:AD:7A:66:85:C6
Certificate issuer:       /CN=A91DC75C/serialNumber=A536A54DB41E441DE74C33F6F736C5AD7A6685C6
Certificate serial:       03EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft
Manifest number:          03E4
Signing time:             Fri 31 Jan 2025 00:38:44 +0000
Manifest this update:     Fri 31 Jan 2025 00:38:43 +0000
Manifest next update:     Fri 07 Feb 2025 00:38:43 +0000
Files and hashes:         1: pTalTbQeRB3nTDP29zbFrXpmhcY.crl (hash: m650V2VS03swCsOueVnxN9QoRIEYprshUMy7q0N74vU=)
                          2: 2CB0D29E211411EE82DE6110C4F9AE02.roa (hash: lIplJdaPasT2KYwLM0CqR2rgchRbxFw1QkPzOjcDDzQ=)
                          3: 50992BCE687511ECB6E9CC6FC4F9AE02.roa (hash: I/KKCOrgm9HCsHD4UXCBhGaL/wAB3+JEfU4a1X3HO+g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1003 (0x3eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC75C/serialNumber=A536A54DB41E441DE74C33F6F736C5AD7A6685C6
        Validity
            Not Before: Jan 31 00:38:43 2025 GMT
            Not After : Feb  7 00:38:43 2025 GMT
        Subject: CN=679c1b94-4378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:91:fb:1e:67:80:d6:db:a2:d6:54:b1:3f:2d:
                    23:fb:b7:13:f1:17:54:76:08:81:d1:12:bb:88:b4:
                    0b:69:d3:c8:4e:25:85:db:e3:e7:0d:d3:af:39:c7:
                    39:aa:a2:29:68:6d:ed:9d:5a:c3:4a:03:3f:43:93:
                    af:23:d7:dd:55:e7:b9:06:34:ba:e1:f5:28:e3:39:
                    10:33:dc:c1:74:69:64:46:58:52:fa:26:6f:3c:0b:
                    0d:b7:2b:eb:df:67:e3:c5:58:02:aa:46:20:ee:69:
                    19:d1:41:7a:a6:57:e2:ef:06:ed:fe:21:24:06:4a:
                    8c:a8:1c:37:97:7a:4f:29:98:56:41:8b:22:ce:0b:
                    ae:2b:b7:c7:16:9a:99:56:fa:f9:9a:a6:8f:43:1f:
                    ed:e4:4c:c5:06:db:f5:b7:f7:5b:73:80:ea:a1:3d:
                    fa:98:87:00:c7:4a:99:8f:3f:56:81:5e:66:60:30:
                    d8:e9:ff:25:23:a4:86:ce:4f:82:50:a2:6c:62:ef:
                    31:16:8b:86:63:11:1c:87:4b:6c:00:40:83:38:38:
                    b5:76:63:0b:f5:d0:31:b7:09:39:6f:86:27:55:93:
                    b2:33:d7:4d:44:4e:7c:f2:d7:4b:70:18:5d:dd:48:
                    ad:d1:4d:8d:8b:8f:76:9b:26:6a:6f:cc:63:74:e9:
                    b5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:76:9A:03:A6:28:FD:17:47:06:8F:3F:B8:D6:90:73:1F:2B:A3:6C
            X509v3 Authority Key Identifier:
                keyid:A5:36:A5:4D:B4:1E:44:1D:E7:4C:33:F6:F7:36:C5:AD:7A:66:85:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:72:69:78:87:66:ed:c9:69:f5:24:a4:49:34:ed:db:11:f8:
         a8:76:00:13:85:9c:6f:a9:7f:57:f8:de:cf:60:2c:92:ae:c1:
         68:3d:6d:a3:3a:a2:6a:a3:0a:aa:6d:70:29:13:22:c2:9d:a2:
         8f:44:25:2c:29:70:1f:3b:6d:f0:09:4c:79:6a:a5:06:9a:aa:
         f3:59:7a:76:46:4b:35:ac:50:09:05:05:dc:a5:dd:26:4f:69:
         c6:60:62:a7:90:ea:2b:54:5a:da:11:4b:74:7f:fa:10:9d:b4:
         b4:c4:45:96:99:e1:ac:ef:0a:e8:08:3a:bc:cf:c6:bf:db:a3:
         5b:f9:c8:69:6e:e8:bd:b6:f4:32:1b:78:0d:00:d3:2e:16:db:
         7b:1d:d0:07:0d:aa:f0:b2:51:0f:b8:3a:02:73:c5:70:5c:86:
         e5:4d:06:5e:c1:b5:0c:de:39:ef:42:47:75:d3:92:a7:f4:ba:
         e6:c6:f5:c1:58:6f:12:70:42:c4:2d:40:64:65:61:72:ba:ac:
         b5:d4:cd:07:d3:62:75:8b:48:07:dc:f0:a3:bf:5c:32:23:d4:
         a3:42:e1:05:b0:43:96:4d:a7:c0:d0:d0:a6:46:6b:9e:d8:c2:
         27:e4:c1:41:72:5c:1e:66:e9:45:7b:bf:87:92:13:ce:98:90:
         10:56:2e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:53:07 2025 by rpki-client