Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft
File:                     h6VQYbdfHcLFxbuH0omOgzB9hw8.mft (raw, json)
Hash identifier:          Cf89sDl9J/Wvp9GvRPmbRgpUHYasWjMaKA/uvlkaWjQ=
Subject key identifier:   50:03:A3:E2:07:A5:DA:38:2A:EC:D6:F5:DA:FE:6D:75:9D:A9:F8:38
Authority key identifier: 87:A5:50:61:B7:5F:1D:C2:C5:C5:BB:87:D2:89:8E:83:30:7D:87:0F
Certificate issuer:       /CN=A91DD42F/serialNumber=87A55061B75F1DC2C5C5BB87D2898E83307D870F
Certificate serial:       0717
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft
Manifest number:          0708
Signing time:             Thu 30 Jan 2025 21:52:06 +0000
Manifest this update:     Thu 30 Jan 2025 21:52:05 +0000
Manifest next update:     Thu 06 Feb 2025 21:52:05 +0000
Files and hashes:         1: h6VQYbdfHcLFxbuH0omOgzB9hw8.crl (hash: VZiZpvJ/164lYnIukMIDSSCwtATNgRWJkykmiG64568=)
                          2: E20C4942DC7D11EDA2F7B651C4F9AE02.roa (hash: yD7Oq9ELTSwJW2k9G7WxgHSnfxXNkpi3+nKcvJopyDM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1815 (0x717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD42F/serialNumber=87A55061B75F1DC2C5C5BB87D2898E83307D870F
        Validity
            Not Before: Jan 30 21:52:05 2025 GMT
            Not After : Feb  6 21:52:05 2025 GMT
        Subject: CN=679bf486-0a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:93:b0:a6:92:a0:48:28:a0:d7:5f:15:50:bf:
                    53:08:9f:90:d6:93:da:a3:df:75:50:72:8f:0c:95:
                    11:6b:b7:1a:1a:1a:51:43:8f:03:ef:0b:8d:cc:be:
                    4a:d8:bf:33:f1:e1:e4:6b:57:a7:f3:02:09:cc:f7:
                    6a:60:b4:54:14:c5:99:ba:17:81:6d:86:31:50:12:
                    f5:46:f0:b1:03:8d:17:1e:ad:83:38:01:74:81:ce:
                    5d:e8:47:c8:31:12:48:d7:7c:88:14:f6:22:74:51:
                    b4:8f:15:02:e2:9e:e2:3e:62:21:83:a4:b3:61:f1:
                    40:7b:81:8e:f3:08:f6:d8:18:d7:e8:d9:a6:6f:d0:
                    4a:01:97:9f:e0:8c:8a:6e:c1:1b:2a:bb:ad:ea:5e:
                    83:1d:3f:d3:90:6b:92:6c:21:4a:ae:a4:17:d9:e5:
                    fe:0f:08:7f:e9:f8:d7:7f:67:8e:9f:b2:8d:b1:76:
                    29:cc:e2:db:6c:cb:3c:99:6d:6d:dc:2e:90:ff:f3:
                    b0:bc:b7:92:57:51:50:77:06:3d:dc:a2:8e:ac:95:
                    a1:89:f4:2c:29:0d:d4:00:43:0a:cd:61:88:f2:77:
                    db:ab:96:56:d5:8c:b4:23:17:6d:27:51:01:60:9b:
                    76:02:fa:cc:11:bd:d6:ca:a5:a3:6b:2a:45:e5:bf:
                    3a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:03:A3:E2:07:A5:DA:38:2A:EC:D6:F5:DA:FE:6D:75:9D:A9:F8:38
            X509v3 Authority Key Identifier:
                keyid:87:A5:50:61:B7:5F:1D:C2:C5:C5:BB:87:D2:89:8E:83:30:7D:87:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:3f:d8:50:b8:7c:0c:4e:53:50:37:16:70:2a:1d:43:7f:b2:
         47:16:d1:56:19:31:ce:f2:f6:32:69:a5:0f:05:09:a3:ad:36:
         d2:bc:3a:7f:c5:3d:a1:62:e9:e5:91:de:56:24:a3:e4:40:28:
         8e:3d:10:3c:de:6b:07:a9:07:a5:bd:59:b1:c1:47:48:f9:6e:
         fa:2f:9f:0f:d3:b8:4b:4a:ec:d1:42:db:52:6a:7f:3d:6c:76:
         42:4a:38:e4:0d:85:ee:46:c7:10:b4:c3:f2:30:33:de:39:58:
         bf:8b:d4:20:a2:bd:c9:3f:0b:0e:25:c8:89:4f:5d:6b:85:96:
         31:bf:92:f4:ae:04:d4:98:a0:d8:b0:e2:a3:57:2a:96:33:88:
         ae:1f:74:37:43:58:60:03:03:8a:a6:87:de:18:c9:bb:74:05:
         f0:28:11:b0:fa:a1:ea:8e:43:66:8d:4b:54:d3:e5:0d:be:df:
         3f:25:fb:bb:93:70:ec:ef:f6:46:8b:71:ca:c7:78:a8:c4:a0:
         82:5b:57:e4:35:cf:1f:64:35:24:b6:fe:0a:2e:a7:a6:7b:40:
         4f:ec:69:e7:22:d8:b1:22:ae:b1:1f:0f:61:e4:34:e1:a8:c7:
         3c:5a:23:32:5d:0f:be:24:9e:b7:c0:74:25:66:de:86:e4:e1:
         90:50:90:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:41:55 2025 by rpki-client