Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
File:                     GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json)
Hash identifier:          pMVhFd8BWmzm2DVDAx3m1JyYxF3EWDdsmuT1iEIJL7Q=
Subject key identifier:   E5:D0:1B:6C:55:E9:1E:D2:DF:28:41:F2:9B:2F:61:25:86:41:A7:1E
Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
Certificate issuer:       /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Certificate serial:       0667
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
Manifest number:          065C
Signing time:             Thu 30 Jan 2025 20:54:18 +0000
Manifest this update:     Thu 30 Jan 2025 20:54:17 +0000
Manifest next update:     Thu 06 Feb 2025 20:54:17 +0000
Files and hashes:         1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: bEdIkoB7j54MkHfBgi8cNOGNkw5it1xtFJoPyN7awUs=)
                          2: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: QWVO48Lwadq4KUtj+VF2u0phUptaO0Lunt38Hpl0ScQ=)
                          3: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: lAVQxnaIpb4+FR/69nne2013Hk4eswtCR3VSmU3tbJU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1639 (0x667)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B
        Validity
            Not Before: Jan 30 20:54:17 2025 GMT
            Not After : Feb  6 20:54:17 2025 GMT
        Subject: CN=679be6f9-454b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:00:7d:4b:2c:d9:f7:78:86:8b:76:94:80:d4:
                    ff:ad:ba:86:24:ec:94:fb:1b:55:0d:50:73:cc:71:
                    1d:58:25:e2:1d:e7:21:9b:59:60:dc:2f:e9:07:8f:
                    6d:bd:0e:01:1a:a9:ca:32:60:0e:2b:e2:9a:e5:87:
                    ff:68:52:27:13:53:50:87:a9:67:4f:75:58:1f:3d:
                    55:4a:b3:a7:24:ac:dc:e4:ad:fc:eb:bf:6a:66:c3:
                    e6:d0:d0:cf:d1:29:eb:d2:07:b4:cd:e8:ba:de:c5:
                    5b:9f:d0:a1:91:d9:f4:78:08:e0:e6:d0:7a:bc:2b:
                    cc:d7:0a:df:55:66:04:1f:c3:99:cb:5f:56:4a:28:
                    54:0b:97:2f:6d:2b:8c:f9:2f:c1:80:8d:57:6c:15:
                    3f:49:43:7e:4a:42:de:c6:eb:a5:64:41:3d:7a:f7:
                    8c:2c:33:83:7c:06:4f:32:f3:c1:15:32:d6:4e:58:
                    83:a8:5b:45:90:37:24:9c:35:39:96:ec:8e:96:60:
                    d3:59:1d:c6:57:5b:91:cd:63:12:99:38:9c:ce:e8:
                    60:76:a4:fb:06:95:33:e0:a3:e3:5f:df:4f:44:e2:
                    28:dd:ea:73:a3:72:dd:74:45:0a:07:b7:5c:d6:56:
                    f2:0f:2b:b1:9f:a3:2b:1e:99:03:62:4a:9e:ba:ab:
                    f4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D0:1B:6C:55:E9:1E:D2:DF:28:41:F2:9B:2F:61:25:86:41:A7:1E
            X509v3 Authority Key Identifier:
                keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:5f:df:a8:94:62:03:bd:58:2a:2b:be:83:4e:73:81:16:1a:
         15:6f:b2:b5:a4:2a:01:b1:f9:54:0f:1c:f9:a2:48:f6:bd:dd:
         fb:41:05:39:83:3a:4d:0e:82:31:96:d4:51:f8:1e:bd:91:1c:
         e1:26:09:c5:08:cd:9f:65:ac:3c:63:32:ca:e7:86:51:df:2f:
         e8:81:76:db:76:2a:24:56:94:13:9b:6e:58:c3:9e:fa:5a:1a:
         30:91:c8:75:d2:60:33:1d:57:73:81:0d:4e:70:e2:32:c1:6e:
         71:07:9d:5d:5e:24:b7:d2:4a:87:fe:62:32:2f:13:a0:28:cc:
         34:2b:3d:0f:51:97:a6:56:9d:a6:2c:7e:80:86:64:d9:df:d1:
         5c:2c:ee:bf:c1:61:4d:e1:e1:b9:69:c7:76:57:2d:a3:c0:aa:
         45:75:06:d4:aa:2c:8d:69:d9:27:ed:e4:5e:64:38:92:1c:c6:
         73:03:02:77:01:80:24:76:45:21:40:fa:2f:44:49:a4:2a:c2:
         2b:82:9f:a5:d9:4b:06:2b:27:3f:eb:08:04:d9:a6:27:43:2b:
         8a:cd:5c:4f:4a:46:3b:c3:dc:0f:4c:41:ca:78:f3:c6:29:9e:
         b9:04:0d:cf:23:54:ad:20:01:dd:6d:65:bb:dd:cf:55:c4:2f:
         c6:d5:f3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:00:35 2025 by rpki-client