Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
File:                     3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json)
Hash identifier:          Li3824utOt3Oy1b5REu6D9s665xaJzrjlhcqZ7D21Hk=
Subject key identifier:   26:EB:F8:D3:98:53:36:A8:0A:2F:77:E1:39:02:06:0E:FD:E2:71:24
Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D
Certificate issuer:       /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
Manifest number:          45
Signing time:             Fri 31 Jan 2025 06:26:47 +0000
Manifest this update:     Fri 31 Jan 2025 06:26:47 +0000
Manifest next update:     Fri 07 Feb 2025 06:26:46 +0000
Files and hashes:         1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: HwzKzN6Fj3pR5SRvO2L3i51QhqybyD2dvfNiGx4WiPE=)
                          2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: HKA4VosuvqKj93QksjNsBERDuKRgYc9/Nd6hWkYBCUw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D
        Validity
            Not Before: Jan 31 06:26:47 2025 GMT
            Not After : Feb  7 06:26:46 2025 GMT
        Subject: CN=679c6d27-404b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c5:a5:89:70:cc:75:21:96:2b:12:32:9e:c8:
                    da:3a:a5:7a:b0:e2:44:95:e4:e6:3f:fc:88:95:0b:
                    c2:97:12:73:67:81:be:ef:e0:a8:52:54:9d:99:82:
                    e8:59:65:14:03:66:88:e3:28:a7:11:b0:85:00:72:
                    47:84:84:85:06:19:af:04:74:b6:d3:b4:f8:d4:01:
                    9b:e9:e2:a3:c7:1e:8c:b2:20:ea:47:2c:8c:29:f1:
                    e7:a1:11:96:30:fc:72:82:7e:c7:63:c0:80:86:54:
                    70:c1:b9:06:dc:08:a4:94:43:cb:b7:72:42:c4:d1:
                    62:c4:bc:ad:5c:92:44:fe:96:5a:b7:ab:cd:7d:ff:
                    01:2f:35:5c:35:3c:85:72:34:1f:cb:68:d2:9b:59:
                    17:8f:98:de:58:c3:69:7b:17:21:a1:c7:af:bd:67:
                    b8:b9:14:ab:d7:ba:a3:8e:f0:24:ed:7b:69:49:2d:
                    55:3d:d7:d7:a6:6c:62:e3:96:ff:aa:bc:a2:43:03:
                    9d:47:04:73:f2:bb:f2:93:87:06:9b:f7:fc:31:6d:
                    5d:67:b7:37:9f:0b:6d:37:5e:9c:b2:6a:49:af:8d:
                    aa:55:27:17:7f:7a:d0:98:94:82:fb:41:40:69:2f:
                    4e:7e:5d:cb:c9:3d:94:d7:0e:13:94:44:8c:99:fa:
                    c4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EB:F8:D3:98:53:36:A8:0A:2F:77:E1:39:02:06:0E:FD:E2:71:24
            X509v3 Authority Key Identifier:
                keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:9d:76:01:45:5d:9a:1a:db:f0:95:ba:d9:d9:6a:38:a5:de:
         b1:5a:5b:1a:45:19:2d:2c:55:0f:2c:93:e7:da:14:f9:ee:3c:
         15:3e:d8:86:e5:34:78:99:02:c8:ff:36:86:37:e6:cb:ac:d8:
         10:1b:92:c8:69:2d:b2:3e:62:bf:b7:90:20:25:81:e7:14:53:
         24:2a:f5:ea:6a:4b:be:ce:51:c3:0e:e4:c9:e1:c6:69:84:f8:
         9f:fd:a6:58:38:bb:c9:77:ae:36:66:4f:2e:9d:7f:25:f3:32:
         60:67:60:56:c7:73:6a:c2:65:d8:1e:e0:c1:86:dc:e2:52:71:
         ef:76:57:cf:70:9c:37:12:fe:b5:e2:d3:fc:c6:28:f8:b1:9c:
         a3:f5:09:b1:42:6f:5b:bd:77:5b:2c:a8:07:f3:da:49:c2:42:
         f0:c9:a4:2e:db:3d:1d:ed:0a:22:42:7b:b4:08:45:35:69:e1:
         0c:c2:92:b1:51:87:a2:b0:eb:ca:59:e9:3d:d5:0c:5a:f1:bf:
         37:ca:62:70:ea:8d:87:66:38:b6:98:b1:92:57:eb:b5:9c:5f:
         d7:21:1e:eb:55:0f:b8:53:fa:25:e6:24:2f:9b:fd:0a:af:a3:
         f1:a4:89:67:78:53:45:9f:74:a1:96:ca:05:4d:a4:bf:55:8b:
         8f:cf:65:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:35 2025 by rpki-client