Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
File:                     aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json)
Hash identifier:          75EulibG47f4cCCesa1vf5KQfFa7calxyljbta2oU20=
Subject key identifier:   72:F7:BF:7C:0F:B1:8D:8B:2A:C2:81:79:69:1D:92:DD:ED:BE:32:4A
Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9
Certificate issuer:       /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
Certificate serial:       01A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
Manifest number:          0193
Signing time:             Fri 31 Jan 2025 03:19:30 +0000
Manifest this update:     Fri 31 Jan 2025 03:19:30 +0000
Manifest next update:     Fri 07 Feb 2025 03:19:30 +0000
Files and hashes:         1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: 1XCtI4OOLc9biMuCU+sifWTwfmDFvb9Eoau7pKxw1gk=)
                          2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: F/3cYZL7bllZSZJSqrH5BVhm+oFTZvg6Wc8U6l59cP8=)
                          3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: JyMg/EdjARK9CrqMTXHM5U+yTBgU1TCFV25bTHvbz3E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
        Validity
            Not Before: Jan 31 03:19:30 2025 GMT
            Not After : Feb  7 03:19:30 2025 GMT
        Subject: CN=679c4142-e0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:06:91:74:0b:fa:95:0f:8f:85:34:7a:61:b4:
                    6d:09:bd:d9:87:c2:f7:e9:30:43:c3:ca:5e:0e:4d:
                    46:98:86:d1:99:5b:7a:a2:f0:d7:3c:04:9d:59:78:
                    f5:12:1f:a3:ca:78:12:25:6d:c6:73:95:41:fb:4b:
                    78:a9:65:ad:57:8f:0c:5c:f8:a2:e6:01:c8:69:a8:
                    66:fc:1b:5e:1e:fc:6c:84:86:48:87:36:5a:43:27:
                    44:eb:1a:bd:81:88:48:91:c7:eb:0c:37:2e:b8:25:
                    4e:4f:71:bb:3e:6d:63:84:dc:f0:6d:02:c0:a1:95:
                    0a:9f:90:7a:4a:28:b7:98:15:ca:1b:dd:40:f0:07:
                    a5:90:82:5e:1e:0e:04:b5:fa:7d:46:fc:19:27:45:
                    ab:ff:0a:0a:08:e3:40:fd:7d:8d:10:b7:ab:46:01:
                    f1:31:e4:97:74:25:39:ea:89:ea:6f:87:0f:41:b1:
                    c6:16:60:81:a8:06:54:17:95:2d:55:29:fd:a1:63:
                    79:fb:ea:10:ca:5d:a6:23:50:6e:95:a8:56:cc:ac:
                    4e:c7:9f:43:6b:a6:78:96:7e:b1:d0:4b:32:9d:83:
                    cd:01:90:5d:0d:1a:1a:82:88:38:a3:b8:b1:2d:63:
                    67:94:a9:58:cc:b2:bd:74:ed:1d:ff:37:f5:83:d0:
                    54:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F7:BF:7C:0F:B1:8D:8B:2A:C2:81:79:69:1D:92:DD:ED:BE:32:4A
            X509v3 Authority Key Identifier:
                keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:82:81:a5:e3:95:47:70:49:30:6f:01:fc:15:89:32:e7:71:
         01:76:b7:e5:12:e4:31:ee:a3:29:03:ba:0b:11:fc:7b:89:65:
         c5:9c:d3:d7:55:da:27:48:75:81:c3:b8:4f:03:1f:be:85:7f:
         ad:ce:b1:ea:a9:60:5c:0f:61:84:e7:0a:70:7d:b0:0f:23:7b:
         0c:bc:15:e8:ab:20:e2:13:53:84:e2:c6:b0:60:8b:83:d1:be:
         c3:22:df:64:55:c8:4f:8c:10:93:40:fd:eb:f3:75:1c:da:15:
         1f:7c:90:86:06:6c:3d:82:8b:09:48:c5:74:5e:68:13:7f:ec:
         e7:82:60:22:64:ba:06:c7:a7:43:92:ac:da:b3:b9:0e:da:b2:
         64:61:e1:f6:01:21:eb:1e:0e:6e:2f:b0:80:cf:eb:9d:c8:1c:
         7b:0b:b9:be:e5:97:6f:2a:e1:b5:41:11:6b:3e:62:66:c3:cc:
         bb:01:e0:b9:8c:08:bf:35:05:10:d3:ab:54:7f:ef:f7:a8:eb:
         97:41:31:83:5f:fe:61:f3:a6:d3:87:f5:0f:b7:fb:29:9d:4b:
         cd:30:91:52:77:60:a1:c8:a9:07:3a:f6:d2:85:1a:25:8b:7d:
         90:67:e7:35:8f:f1:d7:e7:a6:b2:3e:6f:2d:08:80:f1:31:13:
         07:94:7e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:04 2025 by rpki-client