Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft
File:                     Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft (raw, json)
Hash identifier:          peRtTCOxQn9HZQFwL6LSgbUaQ94jGfQM3RPgbx/7TOM=
Subject key identifier:   34:6B:06:5E:89:09:28:5E:95:9E:52:97:F9:A7:C4:EA:22:4C:30:87
Authority key identifier: 0E:BD:D2:BF:44:9E:F3:34:40:63:51:55:3F:0E:D6:83:2E:46:E4:CB
Certificate issuer:       /CN=A91DE5DA/serialNumber=0EBDD2BF449EF334406351553F0ED6832E46E4CB
Certificate serial:       08D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft
Manifest number:          08CA
Signing time:             Thu 30 Jan 2025 20:30:20 +0000
Manifest this update:     Thu 30 Jan 2025 20:30:19 +0000
Manifest next update:     Thu 06 Feb 2025 20:30:19 +0000
Files and hashes:         1: Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl (hash: y6cTS9bJhAHO1UsAwWsPUKmnM/p0GIbhzWfYiDfIq3E=)
                          2: C7B69FE2287911ED93621A30C4F9AE02.roa (hash: UoGq+ZpO/6nx5x+XTY9D8Dy7/iyHFGpVYfq1cLpAn/4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2258 (0x8d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE5DA/serialNumber=0EBDD2BF449EF334406351553F0ED6832E46E4CB
        Validity
            Not Before: Jan 30 20:30:19 2025 GMT
            Not After : Feb  6 20:30:19 2025 GMT
        Subject: CN=679be15c-0683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:f3:ae:38:85:5f:ea:c5:c5:33:fd:00:55:
                    cd:67:82:10:7d:e0:d1:11:9d:7e:1c:70:b4:99:e5:
                    19:66:35:f8:27:a8:5a:39:1e:02:93:a3:eb:39:56:
                    b5:95:92:e5:0f:a1:e7:f9:77:fe:dd:ff:a3:2a:c7:
                    8a:ee:91:1b:08:39:c1:60:13:33:d6:e0:4c:1a:b0:
                    37:d9:d7:df:b8:e1:93:36:e1:ab:dd:47:a1:ef:18:
                    56:f4:7e:6e:24:4e:af:df:d2:90:50:d2:c6:e6:1f:
                    96:d0:7e:21:6c:5e:21:21:d0:11:c6:97:11:f8:0b:
                    8a:3b:04:94:2a:21:74:04:8e:4d:9c:bc:1e:81:81:
                    6c:37:b8:89:44:e0:bd:a9:fc:ed:99:ce:97:a9:b4:
                    31:f2:f0:16:19:9c:36:b6:e4:db:ef:48:e4:86:16:
                    b9:91:aa:15:6c:bd:cd:d6:f2:71:6a:a1:98:16:07:
                    6e:1f:aa:66:10:03:03:29:60:e1:22:e9:1a:a3:ba:
                    1f:63:96:c0:fe:7e:46:af:92:c8:bb:7e:9a:ca:3f:
                    18:a5:36:f7:2e:c5:f5:75:5e:1f:fc:0e:ed:87:54:
                    72:1c:ed:0b:b9:6e:45:73:f3:92:16:f1:ea:56:24:
                    9a:d3:a9:f6:12:de:75:16:45:6c:7e:34:b3:e8:34:
                    bc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6B:06:5E:89:09:28:5E:95:9E:52:97:F9:A7:C4:EA:22:4C:30:87
            X509v3 Authority Key Identifier:
                keyid:0E:BD:D2:BF:44:9E:F3:34:40:63:51:55:3F:0E:D6:83:2E:46:E4:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:27:c4:b6:56:90:03:0a:1f:15:57:7a:eb:43:61:0f:3d:0b:
         63:c2:0e:b0:03:9c:b1:38:3d:f4:df:04:f6:18:50:19:c3:31:
         a8:63:96:b0:ca:4b:f0:4b:ce:fa:ad:eb:d6:a1:45:73:24:0f:
         29:f6:f4:29:e7:c2:3a:62:a4:84:8e:bd:89:5f:48:8f:8e:3a:
         81:f9:aa:3b:ec:0c:0c:b0:5d:b8:95:a7:d0:27:6c:a4:f9:ee:
         4c:b3:c8:6d:79:9a:f9:5d:d3:1c:46:70:55:27:58:9f:65:25:
         f6:fd:4d:ff:5a:e6:ee:ec:44:7b:d8:f5:35:2b:5b:2c:c7:cf:
         55:8b:5c:4c:4c:1f:c5:5a:77:6d:f1:80:d0:72:0d:ca:80:13:
         b2:b7:41:37:60:91:80:3c:33:51:45:ae:af:aa:50:a2:5f:f3:
         0a:8c:49:fc:62:e5:be:6b:e6:2f:07:9d:a3:ed:4f:c9:dc:a2:
         3f:93:73:70:09:74:0c:44:45:57:1e:ea:e6:16:2b:0f:05:76:
         5e:21:c2:09:a9:09:57:34:42:19:d5:af:cc:00:88:ac:45:52:
         5b:78:dc:39:8a:04:63:e6:dd:9e:f0:9e:79:27:e8:04:e7:16:
         8d:6c:b4:51:9e:29:93:0c:ce:2d:3a:82:6a:f7:5f:d5:22:fc:
         33:e9:e6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:27 2025 by rpki-client