Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft
File:                     67Vu9aQ9Hla4rmw179-QarhdJ1U.mft (raw, json)
Hash identifier:          1XmEr1QLhv3q7SrnCHcL9WsNGo3BC7ZEgr29WroKC18=
Subject key identifier:   06:91:B6:90:FF:D5:D8:F2:09:33:55:03:15:68:78:B5:7B:FD:E5:2D
Authority key identifier: EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55
Certificate issuer:       /CN=A91DC8C8/serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755
Certificate serial:       01B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft
Manifest number:          01AC
Signing time:             Fri 31 Jan 2025 02:26:56 +0000
Manifest this update:     Fri 31 Jan 2025 02:26:55 +0000
Manifest next update:     Fri 07 Feb 2025 02:26:55 +0000
Files and hashes:         1: 67Vu9aQ9Hla4rmw179-QarhdJ1U.crl (hash: dEdNHJcgAHGKfWocAgTbg0JlgEukZVXh3hMhMNhuT+k=)
                          2: 376CBBEA504411ED83277887C4F9AE02.roa (hash: 4c2Go2NdWW49HnnGM3f7US9onkJqciB7ngsY709AXRo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC8C8/serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755
        Validity
            Not Before: Jan 31 02:26:55 2025 GMT
            Not After : Feb  7 02:26:55 2025 GMT
        Subject: CN=679c34f0-a5a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bf:b0:c7:56:5e:36:6a:5f:d6:dc:1a:2a:32:
                    8e:ab:65:4b:a2:a9:81:19:24:01:41:f6:71:5e:fd:
                    5c:7b:01:7b:eb:b3:b0:60:7a:28:23:6f:b0:c4:fa:
                    a8:70:3a:56:f6:56:5d:33:58:03:f8:3c:a2:79:ad:
                    5c:22:d6:1b:61:10:7b:81:54:ae:8b:78:18:76:93:
                    60:f2:5e:5a:6b:07:a1:b4:59:44:dc:92:52:78:69:
                    7b:bf:26:2b:91:e0:97:c7:c4:54:df:59:31:b9:a7:
                    24:87:b7:f7:e3:0a:84:b8:08:83:40:56:34:e5:d7:
                    1b:c1:c2:ad:10:77:e2:b7:87:9f:51:3d:69:16:36:
                    88:1d:95:0a:71:67:58:0f:4c:85:4e:99:2f:83:ed:
                    14:57:43:dd:4d:22:53:56:56:50:ff:e2:dd:1f:0c:
                    dc:15:91:51:bc:7f:21:9c:ae:87:01:e8:90:95:05:
                    13:e5:a0:a7:47:e3:41:96:34:ca:aa:da:eb:a8:3e:
                    d0:07:74:e8:1b:e1:27:a5:9f:14:79:1d:59:ab:5e:
                    67:24:bf:d4:d5:7d:98:d2:77:71:54:13:e7:fb:c5:
                    37:90:fa:85:b0:35:07:6c:af:01:67:92:84:ba:04:
                    47:13:d7:e4:ce:9e:04:fc:f4:e7:86:e5:66:a1:a8:
                    7e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:91:B6:90:FF:D5:D8:F2:09:33:55:03:15:68:78:B5:7B:FD:E5:2D
            X509v3 Authority Key Identifier:
                keyid:EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:51:94:b5:3e:d3:6b:b9:6b:be:5b:62:d6:59:1d:54:86:c1:
         83:44:ff:d0:d9:65:90:02:f5:ed:98:4d:10:41:aa:8a:c4:75:
         fe:c4:6c:ea:8e:ce:f4:a5:1f:5d:ea:49:9b:ba:46:4a:b4:87:
         64:de:ba:f1:33:82:41:7e:4f:0a:ca:23:46:25:76:53:cb:45:
         ab:00:99:f4:17:e3:46:db:c9:26:c3:3e:f4:a3:d3:be:b9:20:
         6a:7b:02:57:ad:f1:0a:a0:65:1a:fa:b7:59:47:b3:5c:91:5d:
         0e:7f:bb:67:f6:6d:bd:83:e9:69:1f:7a:17:20:46:97:48:65:
         37:a1:c3:4c:2c:5d:e3:f1:a9:60:bc:33:aa:60:1e:86:1c:09:
         0a:eb:e5:50:ee:b1:8b:ea:60:97:5c:a3:e4:52:a1:0f:4d:c4:
         79:d3:d0:c0:dc:02:2b:8c:75:0e:cc:a0:26:31:34:47:92:03:
         60:c0:cd:4f:93:92:5a:69:29:c9:fe:31:9c:74:a0:56:b3:6f:
         a5:17:19:ae:3a:ea:7c:91:53:7f:69:0e:99:1b:97:08:45:2c:
         bb:f2:78:20:be:8b:dd:0e:d6:01:45:fc:aa:70:3e:9f:4a:3c:
         bb:27:67:99:67:45:0b:0a:26:58:f9:37:d1:fb:07:24:78:76:
         65:4c:40:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:03:36 2025 by rpki-client